last executing test programs: 17m21.409839162s ago: executing program 0 (id=125): fanotify_init(0x0, 0xc0d9e5268d9d54da) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x81, 0x4, 0x2, 0x2, 0x40001000, 0x8000}}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) ioprio_set$pid(0x3, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) request_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xa}, &(0x7f0000001fee)='R\x10rust\xe3c*sgr\x00dx:De', 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0xffffffffffffff10) 17m20.1171356s ago: executing program 0 (id=126): fanotify_init(0x0, 0xc0d9e5268d9d54da) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x81, 0x4, 0x2, 0x2, 0x40001000, 0x8000}}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) ioprio_set$pid(0x3, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) request_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xa}, &(0x7f0000001fee)='R\x10rust\xe3c*sgr\x00dx:De', 0x0) 17m12.543814014s ago: executing program 0 (id=132): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000000c0)=""/49) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0xa) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) 17m6.253915495s ago: executing program 0 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) setxattr$security_ima(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1489, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x20000000, 0x2, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd881, 0x0, 0x6, 0xfffffff8, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 17m4.42376956s ago: executing program 0 (id=142): fanotify_init(0x0, 0xc0d9e5268d9d54da) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x81, 0x4, 0x2, 0x2, 0x40001000, 0x8000}}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) ioprio_set$pid(0x3, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) request_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xa}, &(0x7f0000001fee)='R\x10rust\xe3c*sgr\x00dx:De', 0x0) 17m0.863181012s ago: executing program 0 (id=148): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x1, 0x0, &(0x7f0000000180)=0x0) timer_delete(r4) 16m44.82641087s ago: executing program 32 (id=148): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x1, 0x0, &(0x7f0000000180)=0x0) timer_delete(r4) 9m6.680393269s ago: executing program 2 (id=973): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x90, 0x0, 0x4, 0x3ffd, 0x7}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 9m6.509498743s ago: executing program 2 (id=975): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 9m6.293615217s ago: executing program 2 (id=978): fanotify_init(0x0, 0xc0d9e5268d9d54da) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x81, 0x4, 0x2, 0x2, 0x40001000, 0x8000}}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) ioprio_set$pid(0x3, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) request_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xa}, &(0x7f0000001fee)='R\x10rust\xe3c*sgr\x00dx:De', 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0xffffffffffffff10) 9m4.782975427s ago: executing program 2 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="831028bd7000fcdb9f251600000018000180140002006e657464657673696d300000000000000500030066"], 0x34}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x20000000) 9m3.339314643s ago: executing program 5 (id=984): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a80016", 0x33}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 9m2.968572809s ago: executing program 5 (id=985): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x90, 0x0, 0x4, 0x3ffd, 0x7}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 9m2.853185246s ago: executing program 5 (id=987): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x25c, 0xf0, 0x7, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff], [], 'macvlan1\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x4, 0x2}, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x884022, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m1.571348674s ago: executing program 2 (id=992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 9m0.007065127s ago: executing program 5 (id=994): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x400c854) 8m59.820982482s ago: executing program 2 (id=996): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6113}) socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffffff7, 0x5, 0x8, 0x3, 0x6, 0x4, 0x2, 0x400, 0x7, 0x9, 0x6, 0x6, 0x6, 0x7de, 0x7fffffff, 0x8, 0x0, 0x6297b264, 0x7, 0x43bd, 0x9, 0x6, 0x9, 0xb93a, 0x5, 0x5, 0x8b, 0x9, 0x5, 0xabe9, 0x0, 0x1ff, 0x4, 0x80000000, 0x3, 0x5, 0x5, 0x40, 0x1, 0x954, 0x3ed, 0x80000001, 0xf, 0x401, 0x82, 0x8, 0x0, 0x200, 0x0, 0x5, 0x1, 0x9, 0x6, 0x8, 0x4, 0x1, 0x0, 0x7, 0x7, 0x4, 0x5, 0x3, 0x9, 0x8, 0x4, 0xce, 0x7ff, 0x8, 0x2, 0xffff, 0x5, 0x1, 0xdd, 0x3, 0x167c, 0x2, 0x5, 0x1, 0xa27, 0x7, 0x7, 0x401, 0xffff, 0x5, 0x3, 0x3, 0x200, 0x6, 0xcf8, 0xe, 0x6, 0x6, 0x7, 0x1, 0x4, 0x4, 0x1, 0x7, 0x6f, 0x7, 0x0, 0x4c, 0x3, 0x0, 0x401, 0x1, 0x6, 0x2, 0x2, 0x5, 0xfbe, 0x2, 0xca, 0x3, 0x5, 0x8, 0x0, 0x2, 0x861, 0x3, 0xa, 0x4, 0x401, 0x3, 0x4, 0x8001, 0x1ff, 0x8, 0x1, 0x2d98, 0x0, 0x800, 0xd, 0xda35, 0x3, 0x0, 0x1, 0x0, 0x8a, 0x2, 0x6, 0x1000, 0x400000, 0x291, 0x7, 0xa, 0x1, 0x1, 0x20000000, 0x1ff, 0xfffffff5, 0x2, 0x2, 0x7, 0xe, 0x8, 0xf, 0x9, 0xff, 0x8, 0x9, 0x7, 0x5, 0x2, 0x2, 0x3, 0x3b, 0x8, 0x2, 0x6, 0x6, 0x8, 0x80, 0xf, 0x3, 0x3, 0x1, 0x7, 0xfffffffd, 0x80, 0xffffffff, 0x5, 0x3, 0x9, 0x6, 0x1, 0x1, 0x7, 0x1, 0x7, 0xf, 0x91, 0x9, 0x8, 0x4, 0x9, 0xe8, 0x8, 0x3, 0x1, 0xffff, 0xffff, 0x39e3c86, 0x85ba, 0x7, 0x6b, 0x3, 0x2, 0xb, 0x7, 0x8, 0xe, 0x7, 0x7, 0x3, 0x43c3, 0xfff, 0x0, 0x1, 0x5, 0x9, 0x10001, 0x2, 0x5, 0x5, 0x0, 0x4, 0x18, 0xc, 0x0, 0xd43f, 0x7, 0x619, 0x0, 0x25b, 0x3, 0x3, 0xd32, 0x6, 0x5, 0x7, 0x7, 0x31b9c40c, 0xa0, 0x5, 0x651d, 0x800, 0x801, 0x401, 0x7, 0xf99f, 0x2, 0x80000000, 0x9, 0x0, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 8m59.73296867s ago: executing program 5 (id=997): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x90, 0x0, 0x4, 0x3ffd, 0x7}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 8m59.626586089s ago: executing program 5 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ptrace$pokeuser(0x6, r6, 0x4, 0xa4b3) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) 8m44.767713864s ago: executing program 33 (id=996): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6113}) socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffffff7, 0x5, 0x8, 0x3, 0x6, 0x4, 0x2, 0x400, 0x7, 0x9, 0x6, 0x6, 0x6, 0x7de, 0x7fffffff, 0x8, 0x0, 0x6297b264, 0x7, 0x43bd, 0x9, 0x6, 0x9, 0xb93a, 0x5, 0x5, 0x8b, 0x9, 0x5, 0xabe9, 0x0, 0x1ff, 0x4, 0x80000000, 0x3, 0x5, 0x5, 0x40, 0x1, 0x954, 0x3ed, 0x80000001, 0xf, 0x401, 0x82, 0x8, 0x0, 0x200, 0x0, 0x5, 0x1, 0x9, 0x6, 0x8, 0x4, 0x1, 0x0, 0x7, 0x7, 0x4, 0x5, 0x3, 0x9, 0x8, 0x4, 0xce, 0x7ff, 0x8, 0x2, 0xffff, 0x5, 0x1, 0xdd, 0x3, 0x167c, 0x2, 0x5, 0x1, 0xa27, 0x7, 0x7, 0x401, 0xffff, 0x5, 0x3, 0x3, 0x200, 0x6, 0xcf8, 0xe, 0x6, 0x6, 0x7, 0x1, 0x4, 0x4, 0x1, 0x7, 0x6f, 0x7, 0x0, 0x4c, 0x3, 0x0, 0x401, 0x1, 0x6, 0x2, 0x2, 0x5, 0xfbe, 0x2, 0xca, 0x3, 0x5, 0x8, 0x0, 0x2, 0x861, 0x3, 0xa, 0x4, 0x401, 0x3, 0x4, 0x8001, 0x1ff, 0x8, 0x1, 0x2d98, 0x0, 0x800, 0xd, 0xda35, 0x3, 0x0, 0x1, 0x0, 0x8a, 0x2, 0x6, 0x1000, 0x400000, 0x291, 0x7, 0xa, 0x1, 0x1, 0x20000000, 0x1ff, 0xfffffff5, 0x2, 0x2, 0x7, 0xe, 0x8, 0xf, 0x9, 0xff, 0x8, 0x9, 0x7, 0x5, 0x2, 0x2, 0x3, 0x3b, 0x8, 0x2, 0x6, 0x6, 0x8, 0x80, 0xf, 0x3, 0x3, 0x1, 0x7, 0xfffffffd, 0x80, 0xffffffff, 0x5, 0x3, 0x9, 0x6, 0x1, 0x1, 0x7, 0x1, 0x7, 0xf, 0x91, 0x9, 0x8, 0x4, 0x9, 0xe8, 0x8, 0x3, 0x1, 0xffff, 0xffff, 0x39e3c86, 0x85ba, 0x7, 0x6b, 0x3, 0x2, 0xb, 0x7, 0x8, 0xe, 0x7, 0x7, 0x3, 0x43c3, 0xfff, 0x0, 0x1, 0x5, 0x9, 0x10001, 0x2, 0x5, 0x5, 0x0, 0x4, 0x18, 0xc, 0x0, 0xd43f, 0x7, 0x619, 0x0, 0x25b, 0x3, 0x3, 0xd32, 0x6, 0x5, 0x7, 0x7, 0x31b9c40c, 0xa0, 0x5, 0x651d, 0x800, 0x801, 0x401, 0x7, 0xf99f, 0x2, 0x80000000, 0x9, 0x0, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 8m44.503045631s ago: executing program 34 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ptrace$pokeuser(0x6, r6, 0x4, 0xa4b3) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) 3m18.353877545s ago: executing program 4 (id=2594): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x805}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000003f80), 0x2}, {0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x1) 3m14.595847315s ago: executing program 4 (id=2602): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f", 0x45}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa0934795", 0x2d}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d17576173", 0x1f}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ff"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m12.631116157s ago: executing program 4 (id=2604): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c0200000000000000000d0000000000005f000000"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) r5 = fsmount(r4, 0x0, 0x2) symlinkat(0x0, r5, &(0x7f00000000c0)='./file0\x00') r6 = socket(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01048100010f0008cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, 0x0) 3m11.304682408s ago: executing program 4 (id=2608): sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x0, './cgroup\x00'}, 0x6e) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x1, 0x0) r0 = msgget$private(0x0, 0x80) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) msgsnd(r0, &(0x7f0000003a00)={0x1}, 0x8, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xa820, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000040)={0x1, 0x1, 0x1000, 0x1, &(0x7f00000006c0)="ca", 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, &(0x7f0000000040), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c261020000000000140003006272696467655f736c6976655f30000008000400d400000014001680100001800c000300ffffffff02000000"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 3m9.108122282s ago: executing program 4 (id=2613): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x622f, &(0x7f00000010c0)="$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") socket$unix(0x1, 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x2441, 0x83) fdatasync(r0) 3m4.019704758s ago: executing program 4 (id=2623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYBLOB="b90985634a57751bea5793ad354eaa05020029aab9533bfeb33ca89ca5b7bc69c585d52d220002318aabcc34ae", @ANYBLOB="ca3b01c9acaefd9b7f0b00030008000d00b82496ceb9946889648d776a5e84103beabbcf19185d54240a781280aadc3e434dd603799738afe50a75d74498deb89d825f5bdb7cba9f13ad71c7d84ccb64ee5ffc3c0368a03f2eaf288f2633f9f9f3d90502ed9a4b978d7e1e321d86922465b0bef3eaf8708b4a1c3ed1dc6b29d94f8c3c7e89b9f6396b847c909613e521f541f669672745dffcb86eb0ea7c91655d73bdb159fa23527e47ce004fe15ee18d760db92db3af32e964f2fc709f9b3432"], 0xe) r1 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x48a, 0x0, 0x10004}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000140)="87", 0x1) sync() fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x38040, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x80000000, 0x7, 0x726, 0xfff, 0x4, "c49f9689e74418d627063099b9512a08e241e5", 0x3, 0x1000}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x6, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@arm64={0xfb, 0xdf, 0xa6, '\x00', 0x80}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 2m45.511198209s ago: executing program 35 (id=2623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYBLOB="b90985634a57751bea5793ad354eaa05020029aab9533bfeb33ca89ca5b7bc69c585d52d220002318aabcc34ae", @ANYBLOB="ca3b01c9acaefd9b7f0b00030008000d00b82496ceb9946889648d776a5e84103beabbcf19185d54240a781280aadc3e434dd603799738afe50a75d74498deb89d825f5bdb7cba9f13ad71c7d84ccb64ee5ffc3c0368a03f2eaf288f2633f9f9f3d90502ed9a4b978d7e1e321d86922465b0bef3eaf8708b4a1c3ed1dc6b29d94f8c3c7e89b9f6396b847c909613e521f541f669672745dffcb86eb0ea7c91655d73bdb159fa23527e47ce004fe15ee18d760db92db3af32e964f2fc709f9b3432"], 0xe) r1 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x48a, 0x0, 0x10004}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000140)="87", 0x1) sync() fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x38040, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x80000000, 0x7, 0x726, 0xfff, 0x4, "c49f9689e74418d627063099b9512a08e241e5", 0x3, 0x1000}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x6, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@arm64={0xfb, 0xdf, 0xa6, '\x00', 0x80}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 2m25.425194489s ago: executing program 6 (id=2698): r0 = socket(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01048100010f0008cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) 2m25.030953233s ago: executing program 6 (id=2700): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, 0x0, 0x1a, 0x0, 0x2}, 0x28) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) 2m24.717923665s ago: executing program 6 (id=2702): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xc3) close(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) syz_open_dev$vcsu(0x0, 0x40, 0x82000) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) 2m22.059754756s ago: executing program 6 (id=2707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000000080)=""/81) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) capset(&(0x7f00000001c0)={0x19980330, r0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) 2m15.471215931s ago: executing program 6 (id=2717): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x401) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/187) 2m10.23701254s ago: executing program 6 (id=2721): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 1m53.889389748s ago: executing program 36 (id=2721): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 7.801688429s ago: executing program 1 (id=2953): pipe2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8000f28, 0x8) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xb) write$binfmt_elf64(r2, 0x0, 0x278) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.288831982s ago: executing program 7 (id=2956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 5.569132817s ago: executing program 7 (id=2957): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) 5.550885704s ago: executing program 7 (id=2958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.407782659s ago: executing program 1 (id=2959): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x2803, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 4.194668813s ago: executing program 3 (id=2960): r0 = socket$pptp(0x18, 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) 4.058143998s ago: executing program 7 (id=2961): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800"/27], &(0x7f0000000000)='GPL\x00'}, 0x94) 3.87600343s ago: executing program 1 (id=2962): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x20, 0x31, 0x4, "b78b1203"}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x81, 0x3, "131892"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "ef35"}, 0x0, &(0x7f0000000340)={0x20, 0x84, 0x1, "1b"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "8a6e56"}}) pipe(0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x810) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.811875862s ago: executing program 7 (id=2963): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@utf8}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@utf8no}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@rodir}, {@utf8no}]}, 0x1, 0x2b8, &(0x7f0000001240)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0xff, 0x0, 0x0) 3.735930729s ago: executing program 3 (id=2964): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 3.412565967s ago: executing program 3 (id=2965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 3.249369852s ago: executing program 3 (id=2966): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) 3.059242185s ago: executing program 3 (id=2967): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000003c0)={0xc, {0xc, "ff69bbfd181f5fd1a2e39a78"}}, 0x12) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x2000, 0x3ffffff, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000020000000900020073797a3100000000050001000700000004000780fd35e4ea8bbd574f824a99141681b578d5f3fe2f1e559ac3d721f6c775621d3f54f7e851c931dbdb1aa770132e0faeb61e6ccfbd1175f07df798d4bb92f9743d23938201c41a217139baaf25f3f6f43f5b7b111900a5e6043f2bca326c0b0daf2408eed48f4dadb4a188ee49eb9c7c62e0762c5adc3d9a8b37d86cab270420d5"], 0x2c}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 2.192763843s ago: executing program 7 (id=2968): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, "00186371ae9b1c03"}}}}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x200411, &(0x7f0000000540)=ANY=[@ANYBLOB='atgc,active_logs=6\x00nogc_merge,noinline_xattr,jqfmt=vfsv0,active_logs=6,nobarrier,active_logs=4,fsync_mode=posix,nouser_xattr,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',resuid=', @ANYRESHEX=0x0, @ANYBLOB=',heap,fowner>', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x555e, &(0x7f000000afc0)="$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") 779.016178ms ago: executing program 3 (id=2969): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2a}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$kcm(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)="d424e9", 0x3}], 0x1}, 0x4040) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000700)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, &(0x7f0000000200)={0x0, 0x21, 0xf2, {0xf2, 0xbdbd15c6dfeaacfa, "3543d3d326f5c6e0812e97b8f0be25da51aebfb85ae0798384acd26632a7c58a917dce9a833f060a50155dc411e13e8ae61297b0e73bf898437c97bd18b0a07dba095974d113dbd74fdb10d824e1862f04dcc89854b5a15baeb0f39e893d4d8ed4218dcf362a9415dfa0602c72aefd115e2951db9ffbe4666443e39cebd5b9cbeb177999204f491838a49ab890fc9e865f7e2f3ae0063cca1281dcdf9fd00e500ee9eb0909b2837a9cb4063c609122b9363dc45640b01ed2e8f4d7540180d4ff24e21a76ef09ff3dd50a24f2169a57fc9c6b2bbc34c67005bd74d0376adb8e5a763759b298c31491fa52d9eb534c0339"}}, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000380)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x1, "cf"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x3, 0x1, {0x22, 0x968}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x20, 0x16, 0x48, "4458b2046e928860e220cf804552b11f58f260f646f152f6e279e315a82f9b8c2239727389507eeff16b7e88902d66d98b288961cb8977c8b341c81abef596774c565c82fb911d81"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb0}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000800)={0x20, 0x1, 0xb1, "ae37843ea9f86e63b16161043e7fdff5e211adc8558543ef93926fb4c685ea7320bee00bc4f83d88bfed3aa25a33947df6b7769da27b3fd65331392b41031ed07abc562c6d23a023509f1f7e30e8fee703799c64f32f3c3f0d490300000ab89af4a05211c7f138d5534b2e8227d8c0e9186aeabb250af9262fc695f95f5ccc46ea9a8237ced9574f06b1e45c23b90fa1dbcf771576ea25941940b3f3606d16fff9278f4b68d8e17aedfb8872c284c75909"}, 0x0}) fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='system.posix_acl_access\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) 650.109664ms ago: executing program 1 (id=2970): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x2803, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 180.281428ms ago: executing program 1 (id=2971): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111a00000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 0s ago: executing program 1 (id=2972): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f", 0x45}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa0934795", 0x2d}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d17576173", 0x1f}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ff"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): =0x0, refcnt=1 [ 1104.032320][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1104.062378][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.063127][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.063777][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.067049][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.067748][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.068554][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.068611][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.068835][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.069508][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.070170][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.070881][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.071544][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.072155][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.072847][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.075367][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.076146][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.080809][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.080868][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.080905][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.094373][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.094437][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.102223][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.110926][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.110984][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.111860][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.112535][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.132355][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.136055][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.155550][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.163276][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.164332][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.173951][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.174008][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.174988][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.178962][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.191670][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.192405][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.219229][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.294895][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.297177][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.297508][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.303275][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.305202][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.310311][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.600341][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.600682][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.600978][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.601261][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.601498][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.601785][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.602024][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.607896][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.608446][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.610132][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.610411][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1104.612778][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.260093][T11864] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1105.272241][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.280629][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.280977][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.282400][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.282690][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.282968][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.283285][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.283600][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.298716][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.302017][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.305617][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.312842][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.412948][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.427765][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.431656][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.437443][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.439915][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.440346][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.440834][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.625381][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.626435][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.633308][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.646940][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.648654][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.659982][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.668019][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.674548][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.698090][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.703530][ T1502] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.711527][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.715488][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.891065][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.895783][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.946844][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.958244][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.990688][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1105.997140][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1106.673232][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1106.782709][T14675] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1106.968759][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.034946][ T3430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.319100][T14995] loop7: detected capacity change from 0 to 512 [ 1107.325410][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.332080][ T1502] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.362345][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.362408][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.465965][ T12] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1107.525530][T14675] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.525578][T14675] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.544994][T14675] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.590020][T14995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1107.608511][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.637376][T14675] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.643338][T14675] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1107.653074][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.653116][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.653139][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.654675][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.672166][T14675] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.694423][T14675] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.723056][ T3430] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1107.723114][ T3430] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1107.723146][ T3430] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1107.723193][ T3430] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1107.723248][ T3430] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1107.724146][ T1502] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.727406][ T1502] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.727460][ T1502] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1107.827803][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1108.049217][ T12] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1108.049272][ T12] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1108.109701][T12304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.135829][ T1502] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1108.270930][T12304] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1108.321679][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1108.376331][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1108.377950][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1108.390051][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1108.408983][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1110.648452][T11463] Bluetooth: hci2: command tx timeout [ 1110.905213][ T5628] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1111.251803][ T5628] usb 2-1: Using ep0 maxpacket: 8 [ 1111.675817][ T5628] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1111.882984][ T5628] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 1111.883003][ T5628] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1111.883014][ T5628] usb 2-1: Product: syz [ 1111.883022][ T5628] usb 2-1: Manufacturer: syz [ 1111.883030][ T5628] usb 2-1: SerialNumber: syz [ 1112.411184][T15040] netlink: 'syz.7.2753': attribute type 8 has an invalid length. [ 1112.890179][T11463] Bluetooth: hci2: command tx timeout [ 1113.350972][ T5628] usb 2-1: selecting invalid altsetting 1 [ 1113.351018][ T5628] catc 2-1:8.0: Can't set altsetting 1. [ 1113.354238][ T5628] catc 2-1:8.0: probe with driver catc failed with error -5 [ 1113.456581][T15033] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1113.479906][ T5628] usb 2-1: USB disconnect, device number 12 [ 1113.734008][T15048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2756'. [ 1115.173779][T11463] Bluetooth: hci2: command tx timeout [ 1116.078617][T15004] hsr0 speed is unknown, defaulting to 1000 [ 1116.090968][T15004] lo speed is unknown, defaulting to 1000 [ 1116.223243][T14691] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1116.346464][T14691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1116.359079][T14691] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1116.546212][T14691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1116.558183][T14691] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1116.613806][T14691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1116.620246][T14691] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1116.880571][T14691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1117.489386][T11463] Bluetooth: hci2: command tx timeout [ 1121.109154][T14691] kthread_run failed with err -4 [ 1122.462268][T15113] netlink: 'syz.7.2775': attribute type 4 has an invalid length. [ 1123.068252][ T5744] lo speed is unknown, defaulting to 1000 [ 1123.068307][ T5744] sy0: Port: 1 Link DOWN [ 1123.923431][T15115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.923662][T15115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.028225][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1124.088808][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1124.151669][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1124.176597][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1124.186092][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1124.501488][T15115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.508790][T15115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.379307][ T5625] Bluetooth: hci0: command tx timeout [ 1127.054491][T15152] loop3: detected capacity change from 0 to 16 [ 1127.055582][T15152] erofs: Unknown parameter 'ÿÿÿÿ0xffffffffffffffffœôS2òç/¾b*üDObê hÄ*w³Rþ [ 1127.055582][T15152] ýß±ÌùÀùè™êšçÃZ+ ' [ 1127.056012][T15152] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1128.903054][ T5625] Bluetooth: hci0: command tx timeout [ 1129.412334][ T3430] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.432957][T15133] hsr0 speed is unknown, defaulting to 1000 [ 1129.433013][T15133] syz2: Port: 1 Link DOWN [ 1130.114863][ T3430] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.340312][ T3430] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.087962][ T5625] Bluetooth: hci0: command tx timeout [ 1131.657313][ T3430] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.430291][T15185] loop7: detected capacity change from 0 to 128 [ 1132.441402][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.459595][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.464598][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.464887][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.465794][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.517460][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.520020][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.538001][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.599197][T14675] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.600893][ T1502] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1132.645011][ T7759] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1132.682547][T15185] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1132.702568][ T12] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1132.702814][T15185] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.055534][T15198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2794'. [ 1133.303802][ T5625] Bluetooth: hci0: command tx timeout [ 1133.953211][T12304] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1133.966794][T13495] bridge_slave_1: left allmulticast mode [ 1133.966829][T13495] bridge_slave_1: left promiscuous mode [ 1133.967128][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.984450][ T7759] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1134.070926][T12304] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1134.111762][T13495] bridge_slave_0: left allmulticast mode [ 1134.111784][T13495] bridge_slave_0: left promiscuous mode [ 1134.111956][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.899986][T15239] loop1: detected capacity change from 0 to 128 [ 1136.928742][ T803] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.944774][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.945038][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.950201][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.953670][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.953791][ T803] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.953826][ T803] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.953974][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.964822][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.964834][ T803] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1136.966219][ T803] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.966944][ T803] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.966980][ T803] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.967004][ T803] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.970310][ T803] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1136.975617][ T803] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1137.084220][T15239] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1137.087727][ T803] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1137.088015][T15239] ext4 filesystem being mounted at /515/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.531754][T13495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.610735][T13495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.655916][T13495] bond0 (unregistering): Released all slaves [ 1137.759120][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1138.019935][ T5613] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1138.040287][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1138.046601][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1138.892697][T15110] hsr0 speed is unknown, defaulting to 1000 [ 1138.950730][T15110] lo speed is unknown, defaulting to 1000 [ 1139.458009][ T8764] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1139.735832][ T8764] usb 8-1: Using ep0 maxpacket: 16 [ 1139.742697][ T8764] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.742751][ T8764] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1139.742779][ T8764] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1139.742801][ T8764] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1139.742824][ T8764] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.747481][ T8764] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1139.747511][ T8764] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1139.747532][ T8764] usb 8-1: Manufacturer: syz [ 1140.550487][ T8764] usb 8-1: config 0 descriptor?? [ 1140.894821][T15294] loop3: detected capacity change from 0 to 512 [ 1140.909554][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.919117][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.927359][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.927423][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.928018][ T1465] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1140.946098][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.946165][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.947695][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.950489][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.954983][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.981061][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.982948][ T3430] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.987825][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.994051][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1140.994763][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.062277][ T8764] rc_core: IR keymap rc-hauppauge not found [ 1141.062297][ T8764] Registered IR keymap rc-empty [ 1141.062498][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1141.082415][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1141.103705][T15294] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1141.103818][T15294] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 1141.103833][T15294] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2814: Corrupt directory, running e2fsck is recommended [ 1141.236937][ T8764] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1141.313610][T15299] loop1: detected capacity change from 0 to 128 [ 1141.349609][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.354045][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.354339][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.357101][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.357140][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.358532][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.358654][ T3430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.358696][ T3430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.360119][ T3430] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1141.361241][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.364350][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.365158][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.365194][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.365217][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.368245][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.368905][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1141.444748][T15294] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1141.444896][T15294] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2814: corrupted in-inode xattr: e_name out of bounds [ 1141.444924][T15294] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1141.449034][ C1] EXT4-fs (loop3): initial error at time 1778591902: ext4_iget_extra_inode:5128: inode 15 [ 1141.449070][ C1] EXT4-fs (loop3): last error at time 1778591902: ext4_iget_extra_inode:5128: inode 15 [ 1141.473042][ T8764] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input39 [ 1141.487081][ T3430] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1141.488083][T15294] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2814: couldn't read orphan inode 15 (err -117) [ 1141.488404][T15294] loop3: lost filesystem error report for type 5 error -117 [ 1141.488622][ T3430] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1141.638073][T15299] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1141.639090][ T68] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1141.639357][T15299] ext4 filesystem being mounted at /518/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.644032][T15294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1141.904394][T15294] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1141.904424][T15294] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 1141.904440][T15294] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2814: Corrupt directory, running e2fsck is recommended [ 1141.938988][T15294] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1141.939021][T15294] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 1141.939038][T15294] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2814: Corrupt directory, running e2fsck is recommended [ 1142.047726][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.051923][ T3430] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1142.052434][T15294] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 1142.076275][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.097503][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.103846][T15294] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1142.103890][T15294] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 1142.103910][T15294] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2814: Corrupt directory, running e2fsck is recommended [ 1142.114600][T15294] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1142.130285][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1142.290399][T15004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.290625][T15004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.290920][T15004] bridge_slave_0: entered allmulticast mode [ 1142.302064][T15004] bridge_slave_0: entered promiscuous mode [ 1142.342375][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1142.342457][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1142.391324][T15004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.391632][T15004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.391880][T15004] bridge_slave_1: entered allmulticast mode [ 1142.399345][T15004] bridge_slave_1: entered promiscuous mode [ 1142.466953][ T5613] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1142.476469][ T803] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1142.493552][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.536694][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.556966][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.575675][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1142.587326][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.599736][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.621083][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.642457][ T8764] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1142.705809][T13626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.856203][ T1465] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1142.902280][ T8764] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1142.902305][ T8764] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1142.904809][T13626] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1142.993577][ T8764] usb 8-1: USB disconnect, device number 4 [ 1143.294983][ T5625] block nbd3: Receive control failed (result -32) [ 1143.508049][T13495] hsr_slave_0: left promiscuous mode [ 1143.548069][T15310] block nbd3: shutting down sockets [ 1143.561581][T13495] hsr_slave_1: left promiscuous mode [ 1143.562858][T13495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.605160][T13495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.869633][ T37] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1146.604708][T15333] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1146.894085][T15339] netlink: 'syz.7.2828': attribute type 1 has an invalid length. [ 1147.054669][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 1147.060417][ T37] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1147.060442][ T37] usb 4-1: config 0 has no interface number 0 [ 1147.060487][ T37] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1147.063022][ T37] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1147.063049][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.063069][ T37] usb 4-1: Product: syz [ 1147.063084][ T37] usb 4-1: Manufacturer: syz [ 1147.063098][ T37] usb 4-1: SerialNumber: syz [ 1147.101302][ T37] usb 4-1: config 0 descriptor?? [ 1147.157906][ T68] smc: removing ib device syz1 [ 1147.292341][ T5628] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1147.398495][T13495] team0 (unregistering): Port device team_slave_1 removed [ 1147.445174][T13495] team0 (unregistering): Port device team_slave_0 removed [ 1147.462695][ T5628] usb 2-1: Using ep0 maxpacket: 16 [ 1147.467748][ T5628] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.467800][ T5628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.467884][ T5628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1147.467908][ T5628] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1147.467932][ T5628] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.474508][ T5628] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1147.474538][ T5628] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1147.474615][ T5628] usb 2-1: Manufacturer: syz [ 1147.535645][ T5628] usb 2-1: config 0 descriptor?? [ 1147.813262][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1147.813296][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1147.891576][ T5628] rc_core: IR keymap rc-hauppauge not found [ 1147.891598][ T5628] Registered IR keymap rc-empty [ 1147.891888][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1147.912266][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1147.946818][ T5628] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1147.982498][ T5628] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 1148.155028][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.178079][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.207591][T15004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.210013][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.233495][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.252859][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.272375][T15339] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1148.279149][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.295460][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.316781][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.323069][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1148.323099][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1148.323186][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1148.343413][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.370352][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1148.422421][ T5628] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1148.422446][ T5628] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1148.432305][ T37] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1148.580941][ T37] usb 4-1: USB disconnect, device number 11 [ 1148.606207][ T5628] usb 2-1: USB disconnect, device number 13 [ 1148.665481][T15004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.749212][T15347] loop7: detected capacity change from 0 to 128 [ 1148.889124][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.889169][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.889193][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.889215][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.889237][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.889258][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.889278][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.889312][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.890188][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1148.890244][ T41] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.975101][T13496] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.977205][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1148.990541][ T41] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1149.521268][ T68] smbdirect: ib_dev[syz1] removed [ 1149.920349][T13496] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1149.956362][T12304] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1150.212285][T15004] team0: Port device team_slave_0 added [ 1150.231865][T15004] team0: Port device team_slave_1 added [ 1151.437309][T15127] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1151.461220][T15126] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1151.599653][T15127] usb 4-1: Using ep0 maxpacket: 8 [ 1151.604686][T15127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.632126][T15127] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1151.632164][T15127] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1151.632186][T15127] usb 4-1: Product: syz [ 1151.632201][T15127] usb 4-1: Manufacturer: syz [ 1151.632216][T15127] usb 4-1: SerialNumber: syz [ 1151.766824][T15126] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1152.005444][T15127] usb 4-1: config 0 descriptor?? [ 1152.101868][T15004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.101879][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.101895][T15004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.163978][T15127] imon_raw 4-1:0.0: IR endpoint missing [ 1152.187939][T15004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.187950][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.187965][T15004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.366805][T15126] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1152.461835][ T5628] usb 4-1: USB disconnect, device number 12 [ 1152.527087][T15126] usb 2-1: Using ep0 maxpacket: 16 [ 1152.529156][T15126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.529209][T15126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1152.529238][T15126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1152.529260][T15126] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1152.529283][T15126] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1152.530467][T15126] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1152.530494][T15126] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1152.530515][T15126] usb 2-1: Manufacturer: syz [ 1152.643077][T15126] usb 2-1: config 0 descriptor?? [ 1152.957019][T15004] hsr_slave_0: entered promiscuous mode [ 1152.977644][T15004] hsr_slave_1: entered promiscuous mode [ 1153.060734][T15126] rc_core: IR keymap rc-hauppauge not found [ 1153.060756][T15126] Registered IR keymap rc-empty [ 1153.060907][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.076233][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.154253][T15126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1153.202323][T15126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41 [ 1153.294801][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.310808][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.330011][T15134] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1153.336777][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.357571][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.371474][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.393678][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.415319][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.439073][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.461817][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.479702][T15126] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1153.633479][T15134] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.633526][T15134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1153.633551][T15134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1153.633573][T15134] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1153.643774][T15134] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1153.643802][T15134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.643822][T15134] usb 4-1: Product: syz [ 1153.643836][T15134] usb 4-1: Manufacturer: syz [ 1153.643852][T15134] usb 4-1: SerialNumber: syz [ 1153.751522][T15126] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1153.751546][T15126] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1153.803494][T15134] usb 4-1: config 0 descriptor?? [ 1153.996319][T15134] adutux 4-1:0.0: interrupt endpoints not found [ 1154.011900][T15126] usb 2-1: USB disconnect, device number 14 [ 1154.939875][T15134] usb 4-1: USB disconnect, device number 13 [ 1154.982079][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1156.768761][T15434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2848'. [ 1158.881068][T15110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.881362][T15110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.881689][T15110] bridge_slave_0: entered allmulticast mode [ 1158.897433][T15110] bridge_slave_0: entered promiscuous mode [ 1158.908965][ T5625] block nbd7: Receive control failed (result -32) [ 1159.071836][T15110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.072138][T15110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.072428][T15110] bridge_slave_1: entered allmulticast mode [ 1159.128313][T15448] block nbd7: shutting down sockets [ 1159.139563][T15110] bridge_slave_1: entered promiscuous mode [ 1159.664789][ T5625] Bluetooth: hci6: unexpected event for opcode 0x204e [ 1159.900571][T15110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.907302][T15466] tipc: Started in network mode [ 1159.907331][T15466] tipc: Node identity 1ed0fd785912, cluster identity 4711 [ 1159.982699][T15466] tipc: Enabled bearer , priority 0 [ 1159.983933][T15463] syzkaller0: entered promiscuous mode [ 1159.983956][T15463] syzkaller0: entered allmulticast mode [ 1160.166617][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2861'. [ 1161.318365][T15110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.330170][T15473] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2858'. [ 1161.359777][T15475] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1161.492920][T15461] tipc: Resetting bearer [ 1162.846455][T15486] binder: 15483:15486 ioctl c0306201 200000000680 returned -14 [ 1162.851045][T15461] tipc: Disabling bearer [ 1163.010769][ T5628] tipc: Node number set to 1203961208 [ 1163.431922][T15110] team0: Port device team_slave_0 added [ 1163.461229][T15110] team0: Port device team_slave_1 added [ 1163.864380][T15110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.864397][T15110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.864436][T15110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.884177][ T5625] block nbd7: Receive control failed (result -32) [ 1164.001359][T15110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.001374][T15110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.001398][T15110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.096927][T15492] block nbd7: shutting down sockets [ 1165.637241][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1165.784842][T15520] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1165.784880][T15520] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1165.784924][T15520] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1166.696000][T15110] hsr_slave_0: entered promiscuous mode [ 1166.704240][T15110] hsr_slave_1: entered promiscuous mode [ 1166.706122][T15110] debugfs: 'hsr0' already exists in 'hsr' [ 1166.706147][T15110] Cannot create hsr debugfs directory [ 1166.876296][T15520] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1166.957409][T15533] binder: 15532:15533 ioctl c0306201 200000000680 returned -14 [ 1167.130423][T15004] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1167.204964][T15004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1167.254444][T15004] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1167.286366][T15543] loop1: detected capacity change from 0 to 512 [ 1167.289073][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.289622][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.289846][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.290231][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.290422][T13496] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1167.299206][ T68] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.299362][ T195] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.301239][ T195] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1167.303915][T15004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1167.311041][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.312677][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.312730][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.313119][T13496] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1167.315760][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.317430][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.321634][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.322301][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.323673][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.324316][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.338203][ T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.342797][T15543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1167.342936][T15543] ext4 filesystem being mounted at /538/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.396245][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.403054][T15540] tipc: Started in network mode [ 1167.403082][T15540] tipc: Node identity ea3f5215960d, cluster identity 4711 [ 1167.403262][T15540] tipc: Enabled bearer , priority 0 [ 1167.407542][T15004] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1167.432416][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.442544][T13496] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1167.571984][T15552] loop7: detected capacity change from 0 to 128 [ 1167.600363][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.651389][T15004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.652337][T15548] syzkaller0: entered promiscuous mode [ 1167.652358][T15548] syzkaller0: entered allmulticast mode [ 1167.677840][T13496] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.678110][T13496] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.679035][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.682041][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.682517][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.683179][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.685978][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.687671][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.691833][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.692947][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1167.695860][ T1465] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1167.710334][T15552] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1167.712372][ T12] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1167.713942][T15552] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.717900][T15553] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2875'. [ 1167.973152][T10651] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1168.209095][T10651] usb 2-1: Using ep0 maxpacket: 32 [ 1168.213005][T10651] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1168.213035][T10651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.446660][T10651] usb 2-1: selecting invalid altsetting 3 [ 1168.446729][T10651] comedi comedi5: could not set alternate setting 3 in high speed [ 1168.446741][T10651] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1168.463769][T10651] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1168.557142][T15004] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1168.563986][T12304] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1168.624537][ T7759] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1168.628565][T12304] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1168.699429][T15004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1168.717158][ T5628] usb 2-1: USB disconnect, device number 15 [ 1168.748770][T15538] tipc: Resetting bearer [ 1168.943715][T15538] tipc: Disabling bearer [ 1169.087393][T10651] tipc: Node number set to 2083672597 [ 1169.524420][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1169.740866][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1169.741740][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1169.864550][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1169.877382][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1169.877697][T13496] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1169.878029][T13496] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1169.938635][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1169.950875][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1169.966674][T13496] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.033079][ T195] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.033208][ T195] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.033284][ T195] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.057528][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.057584][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.057616][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.057647][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.057675][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.078524][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.116474][ T1502] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.139794][ T1502] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.155256][T13496] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.387342][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.391621][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.392406][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.392955][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.393614][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.404321][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1170.552754][ T803] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.646523][ T1502] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1170.679458][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1171.712745][T15590] loop7: detected capacity change from 0 to 128 [ 1171.748672][ T195] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.766463][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.770720][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.778523][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.779552][ T803] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.783319][ T195] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.784092][ T195] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.820761][ T803] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.821519][ T803] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.823123][ T803] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.823162][ T803] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.823499][ T803] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1171.891093][T15590] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1171.891560][ T1465] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1171.899455][T15590] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.939430][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.939478][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.944579][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.948627][T11463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1171.996811][T11463] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1171.997659][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1171.999612][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1172.038675][T11463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1172.039266][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1172.039309][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1172.039345][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1172.062653][T11463] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1172.066516][T11463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1172.098165][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1172.102694][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1172.351093][T15596] tipc: Enabling of bearer rejected, already enabled [ 1172.782960][T12304] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1172.878026][ T12] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1172.954543][T12304] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1174.216426][T15624] binder: BINDER_SET_CONTEXT_MGR already set [ 1174.216437][T15624] binder: 15622:15624 ioctl 4018620d 200000001000 returned -16 [ 1174.508413][T11463] Bluetooth: hci4: command tx timeout [ 1174.560061][T15629] usb usb9: usbfs: process 15629 (syz.7.2895) did not claim interface 0 before use [ 1175.265569][T15634] loop3: detected capacity change from 0 to 128 [ 1175.268426][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.268739][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.270434][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.270668][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.271007][ T803] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1175.322872][T15634] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1175.323143][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1175.329303][T15634] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1175.494134][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.554482][T15637] tipc: Enabled bearer , priority 10 [ 1175.579138][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.589525][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.590312][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.608303][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.617345][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.617516][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.617623][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.651885][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.653130][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1175.950113][T15591] hsr0 speed is unknown, defaulting to 1000 [ 1175.993902][T15591] lo speed is unknown, defaulting to 1000 [ 1176.328035][T13626] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1176.397173][ T7759] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1176.441480][T13626] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1176.551864][T11463] block nbd7: Receive control failed (result -32) [ 1176.734818][T11463] Bluetooth: hci4: command tx timeout [ 1176.767315][T15639] block nbd7: shutting down sockets [ 1177.201161][T15126] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 1177.375894][T15126] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1177.375915][T15126] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1177.375929][T15126] usb 4-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1177.375944][T15126] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1177.375963][T15126] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1177.375975][T15126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.399733][T15126] usb 4-1: config 0 descriptor?? [ 1177.404577][T15653] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1178.261980][T15126] usbhid 4-1:0.0: can't add hid device: -71 [ 1178.262105][T15126] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1178.298427][T15126] usb 4-1: USB disconnect, device number 14 [ 1178.956249][T11463] Bluetooth: hci4: command tx timeout [ 1179.617895][T15670] ubi31: attaching mtd0 [ 1179.704666][T15670] ubi31: scanning is finished [ 1179.704688][T15670] ubi31: empty MTD device detected [ 1179.826742][T11463] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1180.913286][T15665] smbdirect: ib_dev[syz2] removed [ 1181.218723][T11463] Bluetooth: hci4: command tx timeout [ 1181.344075][T13495] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.396891][T15670] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1181.530749][T15679] loop3: detected capacity change from 0 to 128 [ 1181.534637][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.535615][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.548991][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.549030][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.566437][ T68] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1181.580840][T15679] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1181.581050][ T68] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1181.584333][T15679] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1181.607729][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.608015][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.608816][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.610106][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.610725][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.611396][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.611500][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.611592][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.612933][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.613598][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1181.979101][T15683] tipc: Enabling of bearer rejected, already enabled [ 1182.580456][T13626] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1182.639145][ T1493] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1182.671658][T13626] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1182.781132][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1183.110251][T15703] netlink: 'syz.7.2913': attribute type 13 has an invalid length. [ 1184.552222][T11463] block nbd1: Receive control failed (result -32) [ 1184.580543][T15689] block nbd1: shutting down sockets [ 1184.604132][T13495] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.242241][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1186.282979][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1186.286698][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1186.298031][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1186.308728][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1188.528546][T11463] Bluetooth: hci2: command tx timeout [ 1188.640693][T13495] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.762025][T11463] Bluetooth: hci2: command tx timeout [ 1190.831513][T13495] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.947917][T15764] loop3: detected capacity change from 0 to 40427 [ 1191.962458][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1191.970683][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1191.977716][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1191.978308][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1191.978673][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1191.979047][T15764] F2FS-fs (loop3): invalid crc value [ 1191.989435][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1191.993943][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1191.995807][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.016471][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.091424][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.120397][T15764] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1192.127846][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.135594][T15764] F2FS-fs (loop3): Start checkpoint disabled! [ 1192.158260][ T803] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1192.187364][ T68] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1192.206300][T15764] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1192.211003][T15764] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1192.232614][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.236669][ T1493] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.258441][ T38] audit: type=1800 audit(1778591949.670:5): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2926" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1192.264775][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.282889][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.294068][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.330049][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.335853][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.349804][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.352614][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.358729][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.359443][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.364716][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.367900][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.371793][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.380590][ T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.478347][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.486740][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.509389][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1192.740823][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.740823][T15772] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1192.745929][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.745929][T15772] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1192.747084][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.747084][T15772] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1192.747509][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.747509][T15772] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1192.748057][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.748057][T15772] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 1192.751589][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.751589][T15772] loop3: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 1192.752178][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.752178][T15772] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 1192.752595][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.752595][T15772] loop3: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 1192.753015][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.753015][T15772] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 1192.753490][T15772] syz.3.2926: attempt to access beyond end of device [ 1192.753490][T15772] loop3: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 1193.064108][T11463] Bluetooth: hci2: command tx timeout [ 1193.127963][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.149157][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.160844][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.165291][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.168948][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.174289][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.184543][ T803] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.293078][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.392484][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.394532][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.397115][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.397158][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.397198][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.397242][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1193.418079][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1194.035733][T15727] lo speed is unknown, defaulting to 1000 [ 1194.035966][T15591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.036265][T15591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.036594][T15591] bridge_slave_0: entered allmulticast mode [ 1194.098705][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1194.098739][ T68] Tainted: [L]=SOFTLOCKUP [ 1194.098746][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1194.098759][ T68] Workqueue: writeback wb_workfn (flush-7:3) [ 1194.098911][ T68] Call Trace: [ 1194.098919][ T68] [ 1194.098990][ T68] dump_stack_lvl+0xe8/0x150 [ 1194.099072][ T68] f2fs_stop_checkpoint+0x383/0x540 [ 1194.099157][ T68] f2fs_write_end_io+0x1274/0x1740 [ 1194.099237][ T68] __submit_merged_bio+0x256/0x6a0 [ 1194.099270][ T68] __submit_merged_write_cond+0x3c9/0x4e0 [ 1194.099303][ T68] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1194.099374][ T68] f2fs_write_data_pages+0x287e/0x34f0 [ 1194.099433][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1194.099492][ T68] ? __lock_acquire+0x6b5/0x2d10 [ 1194.099578][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1194.099599][ T68] do_writepages+0x32e/0x550 [ 1194.099653][ T68] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1194.099720][ T68] ? reacquire_held_locks+0x104/0x190 [ 1194.099738][ T68] ? rt_spin_lock+0x1e0/0x400 [ 1194.099767][ T68] __writeback_single_inode+0x133/0x10e0 [ 1194.099815][ T68] ? rt_spin_unlock+0x160/0x200 [ 1194.099841][ T68] writeback_sb_inodes+0x97f/0x1980 [ 1194.099874][ T68] ? lockdep_hardirqs_on+0x7a/0x110 [ 1194.099898][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1194.099951][ T68] ? rcu_is_watching+0x15/0xb0 [ 1194.100044][ T68] wb_writeback+0x445/0xb00 [ 1194.100064][ T68] ? queue_io+0x281/0x440 [ 1194.100085][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 1194.100122][ T68] wb_workfn+0x3fd/0xf20 [ 1194.100145][ T68] ? look_up_lock_class+0x57/0x110 [ 1194.100163][ T68] ? __pfx___resched_curr+0x10/0x10 [ 1194.100246][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 1194.100274][ T68] ? do_raw_spin_unlock+0xf5/0x210 [ 1194.100325][ T68] ? process_one_work+0x8be/0x1630 [ 1194.100374][ T68] ? process_one_work+0x8be/0x1630 [ 1194.100410][ T68] ? process_one_work+0x8be/0x1630 [ 1194.100434][ T68] process_one_work+0x98b/0x1630 [ 1194.100469][ T68] ? __pfx_process_one_work+0x10/0x10 [ 1194.100486][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 1194.100518][ T68] worker_thread+0xb49/0x1140 [ 1194.100545][ T68] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1194.100573][ T68] kthread+0x388/0x470 [ 1194.100589][ T68] ? __pfx_worker_thread+0x10/0x10 [ 1194.100608][ T68] ? __pfx_kthread+0x10/0x10 [ 1194.100626][ T68] ret_from_fork+0x514/0xb70 [ 1194.100647][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 1194.100666][ T68] ? __switch_to+0xc79/0x1410 [ 1194.100683][ T68] ? __pfx_kthread+0x10/0x10 [ 1194.100700][ T68] ret_from_fork_asm+0x1a/0x30 [ 1194.100735][ T68] [ 1194.100804][ T68] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1194.195534][T15591] bridge_slave_0: entered promiscuous mode [ 1194.227261][T15591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.227541][T15591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.227845][T15591] bridge_slave_1: entered allmulticast mode [ 1194.252768][T15591] bridge_slave_1: entered promiscuous mode [ 1194.597419][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1194.663775][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1194.664239][T15127] loop3: lost filesystem error report for type 5 error -108 [ 1194.981605][T15591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.291643][T11463] Bluetooth: hci2: command tx timeout [ 1196.208994][T13626] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1196.293478][T15127] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1196.315612][T15127] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1196.697542][T15591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.028423][T15800] syzkaller1: entered promiscuous mode [ 1197.028440][T15800] syzkaller1: entered allmulticast mode [ 1197.364758][T15591] team0: Port device team_slave_0 added [ 1197.398433][T15591] team0: Port device team_slave_1 added [ 1197.520406][T15813] loop3: detected capacity change from 0 to 128 [ 1197.521465][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.550632][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.553385][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.554116][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.554154][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.554178][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.554201][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.554224][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.554245][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.554267][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.554288][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.556770][ T68] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1197.579711][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.579760][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.579788][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.579819][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.579841][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1197.579862][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1198.021853][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.030751][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.037353][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.038186][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.041889][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.042878][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.045142][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.046286][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.053092][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.054764][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.063148][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.063537][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.064142][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.064412][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.064959][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.065219][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.065777][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.066093][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.066611][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.066877][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.069557][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.070355][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.074230][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.084402][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.085002][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.085514][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.086076][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.086362][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.086951][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.087227][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.090114][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.090428][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.091055][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.091348][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.091946][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.092451][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.093191][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.093504][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.096729][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.097037][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.097654][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.097946][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.098536][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.100063][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.101905][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.102180][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.102757][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.103779][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.105034][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.105964][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.117344][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.118835][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.119804][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.120536][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.121534][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.122385][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.123024][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.123539][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.124191][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.124588][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.125160][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.125473][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.125965][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.126391][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.127096][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.135112][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.135705][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.136065][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.136754][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.137296][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.143005][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.144110][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.144770][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.145057][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.145884][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.147345][ T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.148182][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.151637][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.152043][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.152297][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.152634][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.152825][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.153193][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.153435][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.154010][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.154208][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.154615][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.154897][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.155280][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.155473][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.155927][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.156103][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.156540][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.156863][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.157271][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.157445][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.158645][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.158851][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.159515][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.159831][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.160453][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.160863][ T1002] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.165769][T15814] bio_check_eod: 176 callbacks suppressed [ 1198.165833][T15814] syz.3.2934: attempt to access beyond end of device [ 1198.165833][T15814] loop3: rw=2049, sector=145, nr_sectors = 363 limit=128 [ 1198.171576][ T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1198.999619][T15819] loop1: detected capacity change from 0 to 40427 [ 1199.011016][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.037848][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.038897][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.039888][ T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.069363][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.069481][T15819] F2FS-fs (loop1): invalid crc value [ 1199.092303][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.093035][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.093492][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.094578][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.104129][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.162678][ T3430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.179827][T15819] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1199.186067][ T3430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.187889][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.189321][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.194301][T15819] F2FS-fs (loop1): Start checkpoint disabled! [ 1199.202976][ T3430] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.203016][ T3430] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1199.219258][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.256862][ T1002] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1199.256947][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.281491][T15819] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 1199.284354][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.287896][T15819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1199.289500][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.290636][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.503200][ T38] audit: type=1800 audit(1778591956.277:6): pid=15819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2935" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1199.503945][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.509962][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.520921][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.523587][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.527386][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1199.652064][T15823] syz.1.2935: attempt to access beyond end of device [ 1199.652064][T15823] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1199.652690][T15823] syz.1.2935: attempt to access beyond end of device [ 1199.652690][T15823] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1199.653147][T15823] syz.1.2935: attempt to access beyond end of device [ 1199.653147][T15823] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1199.653557][T15823] syz.1.2935: attempt to access beyond end of device [ 1199.653557][T15823] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1199.653962][T15823] syz.1.2935: attempt to access beyond end of device [ 1199.653962][T15823] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 1199.654606][T15823] syz.1.2935: attempt to access beyond end of device [ 1199.654606][T15823] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 1199.655031][T15823] syz.1.2935: attempt to access beyond end of device [ 1199.655031][T15823] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 1199.655451][T15823] syz.1.2935: attempt to access beyond end of device [ 1199.655451][T15823] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 1199.655883][T15823] syz.1.2935: attempt to access beyond end of device [ 1199.655883][T15823] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 1200.196484][ T195] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.212867][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.214546][T14675] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.265431][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.266264][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.268612][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.313920][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.318613][T14675] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.320097][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.368897][T15591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.368927][T15591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.368953][T15591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.403956][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.406305][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.415835][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.417220][T15591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.417233][T15591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.417258][T15591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.417773][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.422112][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.471353][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.471400][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.471431][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.471478][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.471751][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1200.513618][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1200.513651][ T68] Tainted: [L]=SOFTLOCKUP [ 1200.513659][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1200.513672][ T68] Workqueue: writeback wb_workfn (flush-7:1) [ 1200.513710][ T68] Call Trace: [ 1200.513718][ T68] [ 1200.513727][ T68] dump_stack_lvl+0xe8/0x150 [ 1200.513756][ T68] f2fs_stop_checkpoint+0x383/0x540 [ 1200.513787][ T68] f2fs_write_end_io+0x1274/0x1740 [ 1200.513835][ T68] __submit_merged_bio+0x256/0x6a0 [ 1200.513867][ T68] __submit_merged_write_cond+0x3c9/0x4e0 [ 1200.513900][ T68] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1200.513947][ T68] f2fs_write_data_pages+0x287e/0x34f0 [ 1200.514017][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1200.514058][ T68] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1200.514200][ T68] ? __lock_acquire+0x6b5/0x2d10 [ 1200.514237][ T68] ? __lock_acquire+0x6b5/0x2d10 [ 1200.514278][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1200.514306][ T68] do_writepages+0x32e/0x550 [ 1200.514334][ T68] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1200.514362][ T68] ? reacquire_held_locks+0x104/0x190 [ 1200.514386][ T68] ? rt_spin_lock+0x1e0/0x400 [ 1200.514422][ T68] __writeback_single_inode+0x133/0x10e0 [ 1200.514449][ T68] ? rt_spin_unlock+0x160/0x200 [ 1200.514480][ T68] writeback_sb_inodes+0x97f/0x1980 [ 1200.514520][ T68] ? lockdep_hardirqs_on+0x7a/0x110 [ 1200.514550][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1200.514612][ T68] ? rcu_is_watching+0x15/0xb0 [ 1200.514643][ T68] wb_writeback+0x445/0xb00 [ 1200.514670][ T68] ? queue_io+0x281/0x440 [ 1200.514699][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 1200.514737][ T68] wb_workfn+0x3fd/0xf20 [ 1200.514764][ T68] ? look_up_lock_class+0x57/0x110 [ 1200.514803][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 1200.514838][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 1200.514868][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1200.514899][ T68] ? process_one_work+0x8be/0x1630 [ 1200.514926][ T68] ? process_one_work+0x8be/0x1630 [ 1200.514964][ T68] ? process_one_work+0x8be/0x1630 [ 1200.514988][ T68] process_one_work+0x98b/0x1630 [ 1200.515041][ T68] ? __pfx_process_one_work+0x10/0x10 [ 1200.515065][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 1200.515109][ T68] worker_thread+0xb49/0x1140 [ 1200.515145][ T68] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1200.515183][ T68] kthread+0x388/0x470 [ 1200.515204][ T68] ? __pfx_worker_thread+0x10/0x10 [ 1200.515230][ T68] ? __pfx_kthread+0x10/0x10 [ 1200.515252][ T68] ret_from_fork+0x514/0xb70 [ 1200.515278][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 1200.515302][ T68] ? __switch_to+0xc79/0x1410 [ 1200.515326][ T68] ? __pfx_kthread+0x10/0x10 [ 1200.515348][ T68] ret_from_fork_asm+0x1a/0x30 [ 1200.515391][ T68] [ 1200.519423][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1200.522280][ T68] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1200.536510][ T1465] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1200.536566][ T1465] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1200.643342][ T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1200.958300][T14675] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1201.041460][T13626] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1201.134298][T13495] bridge_slave_1: left allmulticast mode [ 1201.134333][T13495] bridge_slave_1: left promiscuous mode [ 1201.134617][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.311424][T13495] bridge_slave_0: left allmulticast mode [ 1201.311447][T13495] bridge_slave_0: left promiscuous mode [ 1201.311664][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.532303][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1201.704055][T13495] bridge_slave_1: left allmulticast mode [ 1201.704328][T13495] bridge_slave_1: left promiscuous mode [ 1201.704603][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.047096][T13495] bridge_slave_0: left allmulticast mode [ 1202.047179][T13495] bridge_slave_0: left promiscuous mode [ 1202.047948][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.806452][T15841] loop3: detected capacity change from 0 to 512 [ 1203.828760][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.842898][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.842942][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.842966][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.849736][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.853250][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.854602][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.855007][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.875707][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.877024][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.877145][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.877529][ T1502] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1203.878346][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.879097][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.880259][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.880862][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.881605][ T1502] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.889084][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.890598][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1203.891657][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.894005][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1203.935883][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1203.990042][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1204.000657][T15841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1204.000794][T15841] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.023497][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1204.040849][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1204.049115][ T1502] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1204.344477][T13495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.365126][ T5628] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1204.430805][T13495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.495345][T13495] bond0 (unregistering): Released all slaves [ 1204.549109][ T5628] usb 4-1: Using ep0 maxpacket: 32 [ 1204.552250][ T5628] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1204.552278][ T5628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.645793][ T5628] usb 4-1: selecting invalid altsetting 3 [ 1204.645817][ T5628] comedi comedi5: could not set alternate setting 3 in high speed [ 1204.645833][ T5628] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1204.661355][ T5628] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1204.827228][T15134] usb 4-1: USB disconnect, device number 15 [ 1205.082930][T13495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1205.167150][T13495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.190857][T13495] bond0 (unregistering): Released all slaves [ 1205.292390][T15849] syzkaller1: entered promiscuous mode [ 1205.292418][T15849] syzkaller1: entered allmulticast mode [ 1205.529632][ T195] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1205.530045][ T195] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1205.530153][ T195] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1205.530293][ T195] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1205.618972][T13626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1205.793939][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1205.795763][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1205.808454][T13626] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1208.402813][T15870] loop1: detected capacity change from 0 to 40427 [ 1208.413212][ T7759] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.442788][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.443600][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1208.443682][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1208.449212][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.449902][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.450265][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.451309][T15870] F2FS-fs (loop1): invalid crc value [ 1208.487320][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.489096][T13496] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.494389][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.497656][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.503892][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.556934][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.557044][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.574232][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.583936][ T195] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.590855][ T195] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.657509][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.662316][T15870] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1208.669263][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1208.674352][T15870] F2FS-fs (loop1): Start checkpoint disabled! [ 1208.688301][ T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1208.776389][ T41] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1208.941472][T15870] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 1209.001459][T15870] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1209.258134][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.262076][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.267481][ T1493] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.278145][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.317331][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.321582][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.331518][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.333832][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.339658][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.358493][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.381002][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.406395][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.416398][ T195] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.422281][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.425603][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.428895][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.435614][ T1002] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.440059][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.445670][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.452105][T15876] loop7: detected capacity change from 0 to 128 [ 1209.636211][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.650147][ T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.663378][ T38] audit: type=1800 audit(1778591965.803:7): pid=15870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2944" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1209.678999][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.705817][ T1465] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1209.940438][T15878] bio_check_eod: 177 callbacks suppressed [ 1209.940499][T15878] syz.1.2944: attempt to access beyond end of device [ 1209.940499][T15878] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1209.986007][T15878] syz.1.2944: attempt to access beyond end of device [ 1209.986007][T15878] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1210.008853][T15878] syz.1.2944: attempt to access beyond end of device [ 1210.008853][T15878] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1210.021974][T15878] syz.1.2944: attempt to access beyond end of device [ 1210.021974][T15878] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1210.033889][T15878] syz.1.2944: attempt to access beyond end of device [ 1210.033889][T15878] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 1210.047989][T15878] syz.1.2944: attempt to access beyond end of device [ 1210.047989][T15878] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 1210.055967][T15878] syz.1.2944: attempt to access beyond end of device [ 1210.055967][T15878] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 1210.062718][T15878] syz.1.2944: attempt to access beyond end of device [ 1210.062718][T15878] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 1210.067666][T15878] syz.1.2944: attempt to access beyond end of device [ 1210.067666][T15878] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 1210.109163][T15878] syz.1.2944: attempt to access beyond end of device [ 1210.109163][T15878] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 1210.334673][ T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1210.334729][ T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1210.334760][ T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1210.334808][ T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1210.363141][ T41] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.432588][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.432642][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.432666][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.432688][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.432710][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.432732][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.432754][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.547025][ T5274] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1211.576510][T13496] CPU: 1 UID: 0 PID: 13496 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1211.576531][T13496] Tainted: [L]=SOFTLOCKUP [ 1211.576535][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1211.576542][T13496] Workqueue: writeback wb_workfn (flush-7:1) [ 1211.576568][T13496] Call Trace: [ 1211.576573][T13496] [ 1211.576578][T13496] dump_stack_lvl+0xe8/0x150 [ 1211.576596][T13496] f2fs_stop_checkpoint+0x383/0x540 [ 1211.576613][T13496] f2fs_write_end_io+0x1274/0x1740 [ 1211.576642][T13496] __submit_merged_bio+0x256/0x6a0 [ 1211.576660][T13496] __submit_merged_write_cond+0x3c9/0x4e0 [ 1211.576678][T13496] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1211.576703][T13496] f2fs_write_data_pages+0x287e/0x34f0 [ 1211.576736][T13496] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1211.576758][T13496] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1211.576787][T13496] ? __lock_acquire+0x6b5/0x2d10 [ 1211.576807][T13496] ? __lock_acquire+0x6b5/0x2d10 [ 1211.576828][T13496] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1211.576845][T13496] do_writepages+0x32e/0x550 [ 1211.576860][T13496] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1211.576877][T13496] ? reacquire_held_locks+0x104/0x190 [ 1211.576890][T13496] ? rt_spin_lock+0x1e0/0x400 [ 1211.576910][T13496] __writeback_single_inode+0x133/0x10e0 [ 1211.576933][T13496] ? rt_spin_unlock+0x160/0x200 [ 1211.576951][T13496] writeback_sb_inodes+0x97f/0x1980 [ 1211.576972][T13496] ? lockdep_hardirqs_on+0x7a/0x110 [ 1211.576989][T13496] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1211.577022][T13496] ? rcu_is_watching+0x15/0xb0 [ 1211.577040][T13496] wb_writeback+0x445/0xb00 [ 1211.577054][T13496] ? queue_io+0x281/0x440 [ 1211.577070][T13496] ? __pfx_wb_writeback+0x10/0x10 [ 1211.577091][T13496] wb_workfn+0x3fd/0xf20 [ 1211.577106][T13496] ? look_up_lock_class+0x57/0x110 [ 1211.577119][T13496] ? lapic_next_event+0x11/0x20 [ 1211.577239][T13496] ? __pfx_wb_workfn+0x10/0x10 [ 1211.577264][T13496] ? do_raw_spin_lock+0x12b/0x2f0 [ 1211.577288][T13496] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1211.577317][T13496] ? process_one_work+0x8be/0x1630 [ 1211.577337][T13496] ? process_one_work+0x8be/0x1630 [ 1211.577358][T13496] ? process_one_work+0x8be/0x1630 [ 1211.577372][T13496] process_one_work+0x98b/0x1630 [ 1211.577397][T13496] ? __pfx_process_one_work+0x10/0x10 [ 1211.577411][T13496] ? do_raw_spin_lock+0x12b/0x2f0 [ 1211.577438][T13496] worker_thread+0xb49/0x1140 [ 1211.577458][T13496] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1211.577478][T13496] kthread+0x388/0x470 [ 1211.577490][T13496] ? __pfx_worker_thread+0x10/0x10 [ 1211.577504][T13496] ? __pfx_kthread+0x10/0x10 [ 1211.577517][T13496] ret_from_fork+0x514/0xb70 [ 1211.577532][T13496] ? __pfx_ret_from_fork+0x10/0x10 [ 1211.577545][T13496] ? __switch_to+0xc79/0x1410 [ 1211.577557][T13496] ? __pfx_kthread+0x10/0x10 [ 1211.577570][T13496] ret_from_fork_asm+0x1a/0x30 [ 1211.577593][T13496] [ 1211.577598][T13496] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1211.608616][ T7759] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1211.728128][ T3430] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 1211.735666][T15591] hsr_slave_0: entered promiscuous mode [ 1211.741008][T15591] hsr_slave_1: entered promiscuous mode [ 1211.758414][T15591] debugfs: 'hsr0' already exists in 'hsr' [ 1211.758439][T15591] Cannot create hsr debugfs directory [ 1211.825000][T13496] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.827857][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.831572][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.832359][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.833050][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.833712][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.835644][T13496] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.837112][T13496] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.838497][T13496] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1211.842596][ T37] loop1: lost filesystem error report for type 5 error -108 [ 1211.897104][ T3430] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1212.186304][ T3430] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1212.232488][T12304] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1212.341660][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1212.567811][ T5629] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1212.608147][ T5629] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1212.858873][T15897] fido_id[15897]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1213.865628][T13495] hsr_slave_0: left promiscuous mode [ 1213.907734][T13495] hsr_slave_1: left promiscuous mode [ 1213.908822][T13495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.954267][T13495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.259231][T13495] hsr_slave_0: left promiscuous mode [ 1216.643332][T13495] hsr_slave_1: left promiscuous mode [ 1216.644517][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.644542][T13495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.795615][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.795643][T13495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.966434][T15127] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1216.968987][T15127] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1217.220140][T13495] veth1_macvtap: left promiscuous mode [ 1217.230222][T15959] fido_id[15959]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1217.247154][T15964] loop7: detected capacity change from 0 to 256 [ 1217.260637][T13495] veth0_macvtap: left promiscuous mode [ 1217.260954][T13495] veth1_vlan: left promiscuous mode [ 1217.261139][T13495] veth0_vlan: left promiscuous mode [ 1217.289620][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.290576][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.291183][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.291561][ T3430] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.325086][ T1465] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.353025][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.394917][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.403889][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.405985][ T41] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.451910][ T1002] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.451983][ T1002] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.464972][ T7759] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.483795][ T7759] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.485251][ T1002] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.485989][ T1002] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.487128][ T1002] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1217.555957][ T37] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1217.601110][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.601278][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.601385][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.601485][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.601584][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.601682][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.601781][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.601884][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.602192][ T41] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1217.735663][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 1217.744101][ T37] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1217.744128][ T37] usb 2-1: config 0 has no interface number 0 [ 1217.744172][ T37] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1217.746756][ T37] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1217.746782][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.746810][ T37] usb 2-1: Product: syz [ 1217.746822][ T37] usb 2-1: Manufacturer: syz [ 1217.746836][ T37] usb 2-1: SerialNumber: syz [ 1217.762718][ T37] usb 2-1: config 0 descriptor?? [ 1218.290749][T15974] loop3: detected capacity change from 0 to 40427 [ 1218.293035][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.294919][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.296503][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.297319][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.299373][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.300293][T15974] F2FS-fs (loop3): invalid crc value [ 1218.319678][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.320305][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.320899][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.329819][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.336820][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.340544][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.352392][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.355862][T13496] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.412928][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.437166][ T37] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1218.437196][ T37] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1218.451067][T15974] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1218.459206][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.466645][T15974] F2FS-fs (loop3): Start checkpoint disabled! [ 1218.476690][ T1493] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1218.500957][ T1465] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1218.506846][T15974] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1218.508265][T15974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1218.513854][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.517183][ T38] audit: type=1800 audit(1778591974.272:8): pid=15974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2967" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1218.588523][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.597882][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.608984][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.617762][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.625890][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.630641][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.638473][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.643020][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.648185][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.654436][ T37] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1218.654467][ T37] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1218.654489][ T37] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1218.654780][ T37] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1218.657849][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.662041][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.673843][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.683349][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.688759][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.698345][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.756522][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.764078][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.766461][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.771107][ T7759] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.781742][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.786919][ T37] usb 2-1: USB disconnect, device number 16 [ 1218.795010][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1218.949229][T15978] bio_check_eod: 176 callbacks suppressed [ 1218.949251][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.949251][T15978] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1218.949715][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.949715][T15978] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1218.950143][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.950143][T15978] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1218.950551][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.950551][T15978] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1218.950984][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.950984][T15978] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 1218.954913][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.954913][T15978] loop3: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 1218.955392][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.955392][T15978] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 1218.955822][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.955822][T15978] loop3: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 1218.956250][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.956250][T15978] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 1218.956657][T15978] syz.3.2967: attempt to access beyond end of device [ 1218.956657][T15978] loop3: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 1219.776795][ T1465] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1219.781153][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1219.797114][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1219.797172][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1219.797204][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1219.797251][ T1002] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1219.809521][ T195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 1219.946004][ T57] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1219.959139][T12304] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1220.317607][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1220.317642][ T68] Tainted: [L]=SOFTLOCKUP [ 1220.317650][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1220.317662][ T68] Workqueue: writeback wb_workfn (flush-7:3) [ 1220.317703][ T68] Call Trace: [ 1220.317711][ T68] [ 1220.317720][ T68] dump_stack_lvl+0xe8/0x150 [ 1220.317750][ T68] f2fs_stop_checkpoint+0x383/0x540 [ 1220.317783][ T68] f2fs_write_end_io+0x1274/0x1740 [ 1220.317836][ T68] __submit_merged_bio+0x256/0x6a0 [ 1220.317880][ T68] __submit_merged_write_cond+0x3c9/0x4e0 [ 1220.317916][ T68] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1220.317969][ T68] f2fs_write_data_pages+0x287e/0x34f0 [ 1220.318040][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1220.318129][ T68] ? __lock_acquire+0x6b5/0x2d10 [ 1220.318169][ T68] ? __lock_acquire+0x6b5/0x2d10 [ 1220.318215][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1220.318245][ T68] do_writepages+0x32e/0x550 [ 1220.318275][ T68] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1220.318304][ T68] ? reacquire_held_locks+0x104/0x190 [ 1220.318328][ T68] ? rt_spin_lock+0x1e0/0x400 [ 1220.318367][ T68] __writeback_single_inode+0x133/0x10e0 [ 1220.318398][ T68] ? rt_spin_unlock+0x160/0x200 [ 1220.318431][ T68] writeback_sb_inodes+0x97f/0x1980 [ 1220.318476][ T68] ? lockdep_hardirqs_on+0x7a/0x110 [ 1220.318509][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1220.318579][ T68] ? rcu_is_watching+0x15/0xb0 [ 1220.318615][ T68] wb_writeback+0x445/0xb00 [ 1220.318643][ T68] ? queue_io+0x281/0x440 [ 1220.318672][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 1220.318712][ T68] wb_workfn+0x3fd/0xf20 [ 1220.318739][ T68] ? look_up_lock_class+0x57/0x110 [ 1220.318781][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 1220.318816][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 1220.318848][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1220.318887][ T68] ? process_one_work+0x8be/0x1630 [ 1220.318915][ T68] ? process_one_work+0x8be/0x1630 [ 1220.318955][ T68] ? process_one_work+0x8be/0x1630 [ 1220.318981][ T68] process_one_work+0x98b/0x1630 [ 1220.319033][ T68] ? __pfx_process_one_work+0x10/0x10 [ 1220.319057][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 1220.319106][ T68] worker_thread+0xb49/0x1140 [ 1220.319146][ T68] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1220.319186][ T68] kthread+0x388/0x470 [ 1220.319208][ T68] ? __pfx_worker_thread+0x10/0x10 [ 1220.319230][ T68] ? __pfx_kthread+0x10/0x10 [ 1220.319252][ T68] ret_from_fork+0x514/0xb70 [ 1220.319278][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 1220.319300][ T68] ? __switch_to+0xc79/0x1410 [ 1220.319322][ T68] ? __pfx_kthread+0x10/0x10 [ 1220.319342][ T68] ret_from_fork_asm+0x1a/0x30 [ 1220.319386][ T68] [ 1220.445910][ T1465] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1220.513008][ T1465] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 1220.660013][ T68] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1221.189100][T13626] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1221.330662][T13495] team0 (unregistering): Port device team_slave_1 removed [ 1221.356951][T15981] loop7: detected capacity change from 0 to 40427 [ 1221.380187][ T1465] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.380451][T15981] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1221.380704][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.380835][T15981] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1221.381322][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.381548][T15981] F2FS-fs (loop7): invalid crc value [ 1221.381698][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.381823][T15981] F2FS-fs (loop7): invalid crc value [ 1221.381853][T15981] F2FS-fs (loop7): Failed to get valid F2FS checkpoint [ 1221.381894][T15981] INFO: trying to register non-static key. [ 1221.381973][T15981] The code is fine but needs lockdep annotation, or maybe [ 1221.381982][T15981] you didn't initialize this object before use? [ 1221.382020][T15981] turning off the locking correctness validator. [ 1221.382045][T15981] CPU: 0 UID: 0 PID: 15981 Comm: syz.7.2968 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1221.382076][T15981] Tainted: [L]=SOFTLOCKUP [ 1221.382085][T15981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1221.382098][T15981] Call Trace: [ 1221.382106][T15981] [ 1221.382115][T15981] dump_stack_lvl+0xe8/0x150 [ 1221.382146][T15981] assign_lock_key+0x133/0x150 [ 1221.382174][T15981] register_lock_class+0xcc/0x2e0 [ 1221.382198][T15981] __lock_acquire+0xad/0x2d10 [ 1221.382220][T15981] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1221.382243][T15981] ? __lock_acquire+0x6b5/0x2d10 [ 1221.382267][T15981] ? __lock_acquire+0x6b5/0x2d10 [ 1221.382292][T15981] ? f2fs_exist_written_data+0x53/0x90 [ 1221.382353][T15981] lock_acquire+0x106/0x350 [ 1221.382375][T15981] ? f2fs_exist_written_data+0x53/0x90 [ 1221.382407][T15981] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1221.382432][T15981] rt_spin_lock+0x83/0x400 [ 1221.382462][T15981] ? f2fs_exist_written_data+0x53/0x90 [ 1221.382492][T15981] ? __pfx_rt_spin_lock+0x10/0x10 [ 1221.382522][T15981] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1221.382546][T15981] ? preempt_count_add+0x91/0x190 [ 1221.382579][T15981] f2fs_exist_written_data+0x53/0x90 [ 1221.382609][T15981] f2fs_drop_inode+0xda/0xbf0 [ 1221.382633][T15981] iput+0x651/0xe80 [ 1221.382691][T15981] f2fs_fill_super+0x6047/0x7850 [ 1221.382742][T15981] get_tree_bdev_flags+0x431/0x4f0 [ 1221.382783][T15981] ? __pfx_f2fs_fill_super+0x10/0x10 [ 1221.382813][T15981] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1221.382850][T15981] vfs_get_tree+0x92/0x2a0 [ 1221.382882][T15981] do_new_mount+0x341/0xd30 [ 1221.382932][T15981] ? apparmor_capable+0x126/0x170 [ 1221.382994][T15981] ? __pfx_do_new_mount+0x10/0x10 [ 1221.383019][T15981] ? ns_capable+0x89/0xe0 [ 1221.383077][T15981] ? user_path_at+0xd4/0x160 [ 1221.383129][T15981] ? user_path_at+0xd4/0x160 [ 1221.383158][T15981] __se_sys_mount+0x31d/0x420 [ 1221.383185][T15981] ? __pfx___se_sys_mount+0x10/0x10 [ 1221.383213][T15981] ? __x64_sys_mount+0x20/0xc0 [ 1221.383236][T15981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.383259][T15981] do_syscall_64+0x15f/0xf80 [ 1221.383284][T15981] ? trace_irq_disable+0x3b/0x140 [ 1221.383375][T15981] ? clear_bhb_loop+0x40/0x90 [ 1221.383399][T15981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.383421][T15981] RIP: 0033:0x7f301eb1e04a [ 1221.383449][T15981] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.383495][T15981] RSP: 002b:00007f301cd6de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1221.383543][T15981] RAX: ffffffffffffffda RBX: 00007f301cd6dee0 RCX: 00007f301eb1e04a [ 1221.383560][T15981] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00007f301cd6dea0 [ 1221.383576][T15981] RBP: 0000200000000140 R08: 00007f301cd6dee0 R09: 0000000000200411 [ 1221.383591][T15981] R10: 0000000000200411 R11: 0000000000000246 R12: 0000200000000000 [ 1221.383607][T15981] R13: 00007f301cd6dea0 R14: 000000000000555e R15: 0000200000000540 [ 1221.383631][T15981] [ 1221.386364][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.387669][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.397282][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.397769][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.400522][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.402219][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.402735][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.403140][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.403522][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.405112][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.405546][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.405948][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.406515][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.406979][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.407488][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.408250][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.408756][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.411724][ T68] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.413229][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.414794][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.416465][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.421179][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.422433][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.422894][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.424284][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.425310][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.428164][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.428654][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.429926][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.429959][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.429984][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.430019][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.433052][T13495] team0 (unregistering): Port device team_slave_0 removed [ 1221.436699][ T3430] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1221.555838][T15258] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1222.242818][T15134] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1222.371446][T13495] team0 (unregistering): Port device team_slave_1 removed [ 1222.392893][T13495] team0 (unregistering): Port device team_slave_0 removed [ 1222.403117][T15134] usb 4-1: Using ep0 maxpacket: 8 [ 1222.417609][T15134] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1222.417660][T15134] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1222.417682][T15134] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1222.417696][T15134] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1222.417708][T15134] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1222.417729][T15134] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1222.417741][T15134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.591902][T15727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.592177][T15727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.592360][T15727] bridge_slave_0: entered allmulticast mode [ 1222.594187][T15727] bridge_slave_0: entered promiscuous mode [ 1222.640257][T15727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.640552][T15727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.640739][T15727] bridge_slave_1: entered allmulticast mode [ 1222.642182][T15134] usb 4-1: usb_control_msg returned -32 [ 1222.642288][T15134] usbtmc 4-1:16.0: can't read capabilities [ 1222.643564][T15727] bridge_slave_1: entered promiscuous mode [ 1222.718679][T15727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.723825][T15727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.961306][T15727] team0: Port device team_slave_0 added [ 1222.964226][T15727] team0: Port device team_slave_1 added [ 1222.999863][T15727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.999880][T15727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.999905][T15727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.045749][T15727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.045765][T15727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.045791][T15727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.088368][T15727] hsr_slave_0: entered promiscuous mode [ 1223.089868][T15727] hsr_slave_1: entered promiscuous mode [ 1223.092034][T15727] debugfs: 'hsr0' already exists in 'hsr' [ 1223.092053][T15727] Cannot create hsr debugfs directory [ 1223.623268][ T5274] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1224.610944][T15727] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1224.682818][T15727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1224.694679][T15727] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1224.768400][T15727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1224.792203][T15727] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1224.863315][T15727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1224.870335][T15727] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1224.908362][T15727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.925092][T15591] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1224.972349][T15591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1224.977694][T15591] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1224.996680][T15591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1225.001555][T15591] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1225.036991][T15591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1225.042760][T15591] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1225.083099][T15591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1225.090727][ T5629] usb 4-1: USB disconnect, device number 16 [ 1225.318541][T15727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.350224][T15727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.371949][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.372092][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.387357][T15591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.399743][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.399833][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.442022][T15591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.458637][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.458759][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.476593][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.476742][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.598338][T13495] bridge_slave_1: left allmulticast mode [ 1225.598356][T13495] bridge_slave_1: left promiscuous mode [ 1225.598469][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.684683][T13495] bridge_slave_0: left allmulticast mode [ 1225.684701][T13495] bridge_slave_0: left promiscuous mode [ 1225.684812][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.854803][T13495] bridge_slave_1: left allmulticast mode [ 1225.854829][T13495] bridge_slave_1: left promiscuous mode [ 1225.854996][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.919341][T13495] bridge_slave_0: left allmulticast mode [ 1225.919359][T13495] bridge_slave_0: left promiscuous mode [ 1225.919465][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.164918][T13495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.293242][T13495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.357975][T13495] bond0 (unregistering): Released all slaves [ 1226.496273][T13495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.581673][T13495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.646201][T13495] bond0 (unregistering): Released all slaves [ 1226.670000][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1227.211829][T13495] hsr_slave_0: left promiscuous mode [ 1227.254587][T13495] hsr_slave_1: left promiscuous mode [ 1227.255217][T13495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.297727][T13495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.468726][T13495] hsr_slave_0: left promiscuous mode [ 1227.489725][T13495] hsr_slave_1: left promiscuous mode [ 1227.490505][T13495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.532952][T13495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.853558][T13495] team0 (unregistering): Port device team_slave_1 removed [ 1227.877310][T13495] team0 (unregistering): Port device team_slave_0 removed [ 1228.121531][T13495] team0 (unregistering): Port device team_slave_1 removed [ 1228.163561][T13495] team0 (unregistering): Port device team_slave_0 removed [ 1228.241356][ T5274] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1228.386541][T15727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.437734][T15591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.883133][T15727] veth0_vlan: entered promiscuous mode [ 1228.919763][T15727] veth1_vlan: entered promiscuous mode [ 1228.942628][T15591] veth0_vlan: entered promiscuous mode [ 1228.973903][T15591] veth1_vlan: entered promiscuous mode [ 1228.998691][T15727] veth0_macvtap: entered promiscuous mode [ 1229.009889][T15727] veth1_macvtap: entered promiscuous mode [ 1229.054755][T15727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.073119][T15727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.073931][T15591] veth0_macvtap: entered promiscuous mode [ 1229.096998][T15591] veth1_macvtap: entered promiscuous mode [ 1229.099602][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.101881][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.107364][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.111345][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.240504][T15591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.298192][T15591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.298280][T15727] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 1229.335097][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.335896][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.337618][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.343874][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.351379][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.351397][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.363921][T15727] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 1229.474619][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.474648][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.564310][T15591] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 1229.610156][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.610176][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.626188][T15591] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 1229.677193][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.677212][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50