last executing test programs: 4.533448604s ago: executing program 1 (id=2896): r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='statm\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.506503465s ago: executing program 1 (id=2897): socket(0x10, 0x803, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 4.47942263s ago: executing program 1 (id=2899): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) close(0x3) socket(0x2, 0x80805, 0x0) r1 = fanotify_init(0x200, 0x80002) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) close(0x3) 4.346005017s ago: executing program 1 (id=2900): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 4.337129581s ago: executing program 1 (id=2901): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 2.314679495s ago: executing program 4 (id=2924): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 2.254034848s ago: executing program 4 (id=2926): setreuid(0x0, 0xee01) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) 2.251465151s ago: executing program 3 (id=2927): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000900)={0x0, 0x0, r2, r3, 0x3, 0x8, 0x14, 0x1000, {0x8, 0x5, 0x5, 0xb, 0x8000, 0x9, 0x1, 0x8001, 0x9, 0xfffc, 0x5, 0x60b, 0x2, 0x10000, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 2.239781618s ago: executing program 0 (id=2928): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r3, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 2.186085939s ago: executing program 3 (id=2929): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x13, 0x6, "ba2a43ac5c6f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.664871219s ago: executing program 0 (id=2931): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x2000}) 1.646671943s ago: executing program 3 (id=2932): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5dc, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x6a, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 1.589333176s ago: executing program 0 (id=2933): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 1.58914901s ago: executing program 3 (id=2934): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1.581297409s ago: executing program 3 (id=2935): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x200000000000003, {0x1, 0x0, 0xa52, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffd, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 1.570928054s ago: executing program 0 (id=2936): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.546983715s ago: executing program 0 (id=2937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000600)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x814) 1.436321453s ago: executing program 3 (id=2938): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) close_range(r0, r1, 0x0) 1.43302899s ago: executing program 4 (id=2939): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f0010000000000000300000000000000040000000000000000000000000000000080020000000000030000000000000009000000010001000400000000000000090000000000000004000000000000000b00000000000000060000000000000002000000000200000600000001000000060000000080000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01800000000000800000000001000000000000000100000000000000010000009401543200000000000000000400000000000000000000000000000007000000000000000000000000000000ff0f0000f4000000040000000000000007000000000000008c00000000000000f9ffffffffffffff0000000000000000040000800000000008000000060800000500000000a0000078", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="ff010000fcffffff000000000400000000000000e6000000000000000200000007000000000000000000000004000000000000000000000000000000ff07000000000000ffffffffffffff7fff0f0000ff0700000300000000000000090000000000000003000000000000003406000000000000050000000000000002000000000000000200000006080000070000000080000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050000000300000000000000fdff000000000300"/44], 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) 693.77566ms ago: executing program 0 (id=2940): accept(0xffffffffffffffff, &(0x7f0000000340)=@rc={0x1f, @fixed}, &(0x7f00000003c0)=0x80) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x60, 0xdd, 0x99, 0x20, 0x5e9, 0x9, 0x73db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb6, 0x7, 0x0, 0x9, 0xbd, 0x2e}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, 0xffffffffffffffff, 0x7dfff000) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000180)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 661.986025ms ago: executing program 2 (id=2941): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x43}, @l2cap_cid_signaling={{0x3f}, [@l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x5, 0x2, 0x2, 0x91}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x2e04, 0x4}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x81, 0x2, 0x3, 0x1}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x5, 0xffff, 0xfff8, 0x4}}, @l2cap_info_req={{0xa, 0x8, 0x2}, {0x4}}, @l2cap_info_req={{0xa, 0x2, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x0, 0x4d}}]}}, 0x48) 590.028902ms ago: executing program 2 (id=2942): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003e0007172dbd7000fcdbdf2503"], 0x24}}, 0x0) read(r0, &(0x7f00000009c0)=""/4096, 0x1000) 589.799889ms ago: executing program 2 (id=2943): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x400000000001, 0x1, 0x4c869, 0x1009, 0x2, 0x80000001, 0x48cb, 0xfffffffffffffff9, 0x820000df}) 589.648118ms ago: executing program 2 (id=2944): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/keys\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 563.16205ms ago: executing program 2 (id=2945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 545.242995ms ago: executing program 4 (id=2946): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 530.863829ms ago: executing program 4 (id=2947): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='\\/\xe9\x838\x9d<\f\x91\x01\x00\x00\x00\x00\x00\x00\x00n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefv\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81V\x99\x1d\x1f\xe0\x15\xade\xd2\xea\xce\x04\x01T\xccW\xb9g}\xdcdW$h\xbc\x9fw\x9e\xef\xdc\xa3\bQ\xcf\xe24\xca\x8c\"l&\xf2\r\xdd\x14R\xdf\xe4B\xf9\xe5\xd4\n\xf7\x93^\x1ck\xf9\xab\x1fE{ QRK\xb5\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 378.006123ms ago: executing program 2 (id=2948): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$lan78xx(0x2, 0xfffffffffffffe55, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 334.550263ms ago: executing program 1 (id=2902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000480)="89e73d5521fe62a3b47380c988cafa663c55dba4ee7bbea30399c0c913b27d0d8283530f1b78f1b6a6a09d591029d61d91b707cabbcff35009cc56", 0x3b}], 0x1) 0s ago: executing program 4 (id=2949): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10014400, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x6bb3, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x5, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1024020, 0x0) kernel console output (not intermixed with test programs): multicast mode [ 172.634379][T11056] loop2: detected capacity change from 0 to 1024 [ 172.634758][T11056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.637585][T11058] binder: 11057:11058 tried to acquire reference to desc 0, got 1 instead [ 172.637660][T11058] binder: 11057:11058 got transaction with invalid data ptr [ 172.637690][T11058] binder: 11057:11058 transaction async to 11057:0 failed 108/29201/-14, code 0 size 0-24 line 3492 [ 172.638075][ T8536] binder: undelivered TRANSACTION_ERROR: 29201 [ 172.649298][T11056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.736569][T11065] syz2: rxe_newlink: already configured on ip6_vti0 [ 172.748911][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1542'. [ 172.748993][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1542'. [ 172.771354][T11070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.774599][T11070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.879629][T11080] syzkaller0: entered promiscuous mode [ 172.879659][T11080] syzkaller0: entered allmulticast mode [ 173.224682][T11094] ptrace attach of "./syz-executor exec"[6573] was attempted by " [ 173.364490][T11099] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 173.409209][T11101] tipc: Started in network mode [ 173.409246][T11101] tipc: Node identity e67a182d6081, cluster identity 4711 [ 173.409321][T11101] tipc: Enabled bearer , priority 0 [ 173.413913][T11100] tipc: Disabling bearer [ 173.479464][ T6580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.639107][T11117] loop0: detected capacity change from 0 to 16 [ 173.642713][T11117] erofs (device loop0): mounted with root inode @ nid 36. [ 173.762658][T11127] syzkaller0: entered promiscuous mode [ 173.763881][T11127] syzkaller0: entered allmulticast mode [ 173.863199][T11129] loop2: detected capacity change from 0 to 128 [ 173.864970][T11129] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 173.865158][T11129] hpfs: filesystem error: improperly stopped [ 173.865190][T11129] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 173.865214][T11129] hpfs: You really don't want any checks? You are crazy... [ 173.865305][T11129] hpfs: hpfs_map_sector(): read error [ 173.865311][T11129] hpfs: code page support is disabled [ 173.869616][T11129] hpfs: hpfs_map_4sectors(): unaligned read [ 173.869678][T11129] hpfs: hpfs_map_4sectors(): unaligned read [ 173.869690][T11129] hpfs: filesystem error: unable to find root dir [ 173.920350][T11131] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 173.956062][T11134] tipc: Enabled bearer , priority 0 [ 173.959408][T11133] tipc: Disabling bearer [ 173.979638][T11136] loop3: detected capacity change from 0 to 1024 [ 173.981308][T11136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.991725][T11136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.210429][T11161] loop0: detected capacity change from 0 to 16 [ 174.212475][T11161] erofs (device loop0): mounted with root inode @ nid 36. [ 174.221664][T11162] syzkaller0: entered promiscuous mode [ 174.222992][T11162] syzkaller0: entered allmulticast mode [ 174.310880][T11165] syz2: rxe_newlink: already configured on ip6_vti0 [ 174.386432][T11167] ptrace attach of "./syz-executor exec"[6575] was attempted by " [ 174.419314][T11169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.425630][T11169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.848223][ T6573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.871371][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1585'. [ 174.872605][T11197] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 174.887184][T11199] syzkaller0: entered promiscuous mode [ 174.888506][T11199] syzkaller0: entered allmulticast mode [ 174.953671][T11201] ptrace attach of "./syz-executor exec"[6580] was attempted by " [ 174.981517][T11203] loop1: detected capacity change from 0 to 16 [ 174.998180][T11203] erofs (device loop1): mounted with root inode @ nid 36. [ 175.098106][T11216] loop2: detected capacity change from 0 to 128 [ 175.100324][T11216] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 175.102717][T11216] hpfs: filesystem error: improperly stopped [ 175.104115][T11216] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 175.105722][T11216] hpfs: You really don't want any checks? You are crazy... [ 175.107330][T11216] hpfs: hpfs_map_sector(): read error [ 175.108250][T11216] hpfs: code page support is disabled [ 175.109346][T11216] hpfs: hpfs_map_4sectors(): unaligned read [ 175.110423][T11216] hpfs: hpfs_map_4sectors(): unaligned read [ 175.111471][T11216] hpfs: filesystem error: unable to find root dir [ 175.168842][T11220] syzkaller0: entered promiscuous mode [ 175.168876][T11220] syzkaller0: entered allmulticast mode [ 175.184503][T11224] loop2: detected capacity change from 0 to 1024 [ 175.187206][T11224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.187844][T11222] tipc: Enabled bearer , priority 0 [ 175.192085][T11221] tipc: Disabling bearer [ 175.215477][T11224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.259380][T11228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1596'. [ 175.259740][T11228] syz2: rxe_newlink: already configured on ip6_vti0 [ 175.358963][T11240] syzkaller0: entered promiscuous mode [ 175.358994][T11240] syzkaller0: entered allmulticast mode [ 175.432682][T11248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1603'. [ 175.475686][T11255] loop3: detected capacity change from 0 to 16 [ 175.476634][T11253] loop0: detected capacity change from 0 to 128 [ 175.477331][T11253] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 175.477422][T11253] hpfs: filesystem error: improperly stopped [ 175.477431][T11253] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 175.477439][T11253] hpfs: You really don't want any checks? You are crazy... [ 175.477500][T11253] hpfs: hpfs_map_sector(): read error [ 175.477505][T11253] hpfs: code page support is disabled [ 175.477677][T11253] hpfs: hpfs_map_4sectors(): unaligned read [ 175.477693][T11253] hpfs: hpfs_map_4sectors(): unaligned read [ 175.477697][T11253] hpfs: filesystem error: unable to find root dir [ 175.484435][T11255] erofs (device loop3): mounted with root inode @ nid 36. [ 175.535239][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1607'. [ 175.535608][T11257] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 175.567295][T11260] tipc: Enabled bearer , priority 0 [ 175.569976][T11259] tipc: Disabling bearer [ 175.616968][T11268] syzkaller0: entered promiscuous mode [ 175.617831][T11266] loop5: detected capacity change from 0 to 7 [ 175.618871][T11266] Dev loop5: unable to read RDB block 7 [ 175.618887][T11266] loop5: unable to read partition table [ 175.618941][T11266] loop5: partition table beyond EOD, truncated [ 175.618950][T11266] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.623409][T11268] syzkaller0: entered allmulticast mode [ 175.726577][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'. [ 175.771666][T11281] loop0: detected capacity change from 0 to 128 [ 175.777840][T11281] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 175.777898][T11281] hpfs: filesystem error: improperly stopped [ 175.777914][T11281] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 175.778376][T11281] hpfs: You really don't want any checks? You are crazy... [ 175.778539][T11281] hpfs: hpfs_map_sector(): read error [ 175.778547][T11281] hpfs: code page support is disabled [ 175.780227][T11281] hpfs: hpfs_map_4sectors(): unaligned read [ 175.780266][T11281] hpfs: hpfs_map_4sectors(): unaligned read [ 175.780273][T11281] hpfs: filesystem error: unable to find root dir [ 175.848284][T11286] syzkaller0: entered promiscuous mode [ 175.848323][T11286] syzkaller0: entered allmulticast mode [ 175.864771][T11288] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 175.995903][T11296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.996086][T11296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.000957][T11294] tipc: Enabled bearer , priority 0 [ 176.003341][T11293] tipc: Disabling bearer [ 176.047654][ T6580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.072893][T11298] syzkaller0: entered promiscuous mode [ 176.073921][T11298] syzkaller0: entered allmulticast mode [ 176.117358][T11302] loop0: detected capacity change from 0 to 16 [ 176.119225][T11302] erofs (device loop0): mounted with root inode @ nid 36. [ 176.154458][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1627'. [ 176.195332][T11310] loop1: detected capacity change from 0 to 128 [ 176.199438][T11310] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 176.201431][T11310] hpfs: filesystem error: improperly stopped [ 176.202515][T11310] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 176.203773][T11310] hpfs: You really don't want any checks? You are crazy... [ 176.205970][T11310] hpfs: hpfs_map_sector(): read error [ 176.208684][T11310] hpfs: code page support is disabled [ 176.209677][T11310] hpfs: hpfs_map_4sectors(): unaligned read [ 176.210709][T11310] hpfs: hpfs_map_4sectors(): unaligned read [ 176.211648][T11310] hpfs: filesystem error: unable to find root dir [ 176.259798][T11315] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 176.381053][T11326] loop2: detected capacity change from 0 to 1024 [ 176.381394][T11326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.414655][T11326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.762375][T11348] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 176.762663][T11348] hpfs: filesystem error: improperly stopped [ 176.762683][T11348] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 176.762701][T11348] hpfs: You really don't want any checks? You are crazy... [ 176.762785][T11348] hpfs: hpfs_map_sector(): read error [ 176.762791][T11348] hpfs: code page support is disabled [ 176.762823][T11348] hpfs: hpfs_map_4sectors(): unaligned read [ 176.762845][T11348] hpfs: hpfs_map_4sectors(): unaligned read [ 176.762850][T11348] hpfs: filesystem error: unable to find root dir [ 176.800870][T11352] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 176.829236][T11354] syzkaller0: entered promiscuous mode [ 176.830339][T11354] syzkaller0: entered allmulticast mode [ 176.841015][T11356] erofs (device loop0): mounted with root inode @ nid 36. [ 177.019972][T11376] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 120 [ 177.143995][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.144492][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.245898][ T6580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.274938][T11384] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 177.366362][T11396] syzkaller0: entered promiscuous mode [ 177.367682][T11396] syzkaller0: entered allmulticast mode [ 177.475014][T11410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.488464][T11410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.560301][T11417] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 177.574731][T11419] erofs (device loop2): mounted with root inode @ nid 36. [ 177.851107][T11425] vlan2: entered allmulticast mode [ 177.854549][T11425] __nla_validate_parse: 1 callbacks suppressed [ 177.854607][T11425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1668'. [ 177.859050][T11427] netlink: 'syz.4.1669': attribute type 39 has an invalid length. [ 177.935975][T11434] syzkaller0: entered promiscuous mode [ 177.936007][T11434] syzkaller0: entered allmulticast mode [ 178.124535][T11452] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 178.150034][T11457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.151964][T11457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.327325][ T6574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.347668][T11462] netlink: 'syz.0.1680': attribute type 39 has an invalid length. [ 178.398183][T11464] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1681'. [ 178.466700][T11476] syzkaller0: entered promiscuous mode [ 178.466730][T11476] syzkaller0: entered allmulticast mode [ 178.547945][T11482] erofs (device loop1): mounted with root inode @ nid 36. [ 178.705857][T11488] ptrace attach of "./syz-executor exec"[6574] was attempted by " [ 178.815591][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.832403][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.837619][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.839426][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.841704][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.843452][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.846120][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.848331][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.941196][T11495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.947525][T11495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.014661][T11499] netlink: 'syz.1.1691': attribute type 39 has an invalid length. [ 179.051751][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.053441][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.303665][T11507] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1694'. [ 179.413671][T11519] tipc: Enabled bearer , priority 0 [ 179.416651][T11518] tipc: Disabling bearer [ 179.436729][T11521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1698'. [ 179.521322][T11531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.523046][T11531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.576857][T11537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.577018][T11537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.799839][ T6580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.840598][T11542] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1706'. [ 180.031715][T11559] ptrace attach of "./syz-executor exec"[6583] was attempted by " [ 180.127866][T11561] tipc: Enabling of bearer rejected, failed to enable media [ 180.154210][T11567] syzkaller1: entered promiscuous mode [ 180.154239][T11567] syzkaller1: entered allmulticast mode [ 180.206454][T11573] set_capacity_and_notify: 6 callbacks suppressed [ 180.206673][T11573] loop1: detected capacity change from 0 to 1024 [ 180.207199][T11573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.219359][T11573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.565762][T11583] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1719'. [ 180.602832][T11591] netlink: 'syz.2.1722': attribute type 72 has an invalid length. [ 180.604268][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 180.627148][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.628357][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.759810][T11597] tipc: Enabling of bearer rejected, failed to enable media [ 180.789567][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.789761][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.811962][T11611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1728'. [ 180.855128][ T7113] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 181.005124][ T7113] usb 1-1: Using ep0 maxpacket: 16 [ 181.006488][ T7113] usb 1-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.006705][ T7113] usb 1-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.006724][ T7113] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.006738][ T7113] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 181.006746][ T7113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.008083][ T7113] usb 1-1: config 0 descriptor?? [ 181.060161][ T6575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.160023][T11622] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1733'. [ 181.165522][T11624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.165867][T11624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.198261][T11628] netlink: 'syz.1.1735': attribute type 72 has an invalid length. [ 181.199721][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 181.328673][T11631] ptrace attach of "./syz-executor exec"[6575] was attempted by " [ 181.337669][T11633] tipc: Enabling of bearer rejected, failed to enable media [ 181.417044][ T7113] hid (null): invalid report_count 1224842725 [ 181.421192][ T7113] asus 0003:0B05:19B6.0001: invalid report_count 1224842725 [ 181.421889][ T7113] asus 0003:0B05:19B6.0001: item 0 4 1 9 parsing failed [ 181.422076][ T7113] asus 0003:0B05:19B6.0001: Asus hid parse failed: -22 [ 181.422103][ T7113] asus 0003:0B05:19B6.0001: probe with driver asus failed with error -22 [ 181.430307][T11647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.430474][T11647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.619873][ T7113] usb 1-1: USB disconnect, device number 11 [ 181.685520][T11649] loop2: detected capacity change from 0 to 1024 [ 181.687055][T11649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.698370][T11649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.134079][T11663] netlink: 'syz.1.1746': attribute type 72 has an invalid length. [ 182.277623][T11675] tipc: Enabling of bearer rejected, failed to enable media [ 182.561120][ T6580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.678330][T11697] ptrace attach of "./syz-executor exec"[6583] was attempted by " [ 182.815185][ T8536] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.975271][ T8536] usb 1-1: Using ep0 maxpacket: 8 [ 182.980257][ T8536] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 182.982078][ T8536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.983952][ T8536] usb 1-1: Product: syz [ 182.984741][ T8536] usb 1-1: Manufacturer: syz [ 182.985955][ T8536] usb 1-1: SerialNumber: syz [ 182.992545][ T8536] usb 1-1: config 0 descriptor?? [ 183.183896][T11724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.184080][T11724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.204930][ T8536] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 183.226022][T11713] tipc: Enabling of bearer rejected, failed to enable media [ 183.241149][T11729] loop2: detected capacity change from 0 to 1024 [ 183.242844][T11729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.260822][T11729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.291792][T11735] __nla_validate_parse: 5 callbacks suppressed [ 183.292114][T11735] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1768'. [ 183.369518][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 184.098372][ T6580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.176830][T11758] tipc: Enabling of bearer rejected, failed to enable media [ 184.364049][ T8536] gspca_sunplus: reg_w_riv err -71 [ 184.364121][ T8536] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 184.369510][ T8536] usb 1-1: USB disconnect, device number 12 [ 184.517538][T11769] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1780'. [ 184.674940][T11776] ptrace attach of "./syz-executor exec"[6575] was attempted by " [ 185.002121][T11782] binder: 11777:11782 got transaction to invalid handle, 1 [ 185.002174][T11782] binder: 11777:11782 cannot find target node [ 185.002401][T11782] binder: 11777:11782 transaction call to 0:0 failed 112/29201/-22, code 0 size 0-24 line 3232 [ 185.272526][T11788] syzkaller0: entered promiscuous mode [ 185.272559][T11788] syzkaller0: entered allmulticast mode [ 185.681557][ T7113] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.038194][T11801] loop0: detected capacity change from 0 to 1024 [ 186.048066][T11801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.072054][T11801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.473553][T11816] loop1: detected capacity change from 0 to 128 [ 186.483582][T11816] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 186.483676][T11816] hpfs: filesystem error: improperly stopped [ 186.483693][T11816] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 186.483705][T11816] hpfs: You really don't want any checks? You are crazy... [ 186.483781][T11816] hpfs: hpfs_map_sector(): read error [ 186.483786][T11816] hpfs: code page support is disabled [ 186.483964][T11816] hpfs: hpfs_map_4sectors(): unaligned read [ 186.483992][T11816] hpfs: hpfs_map_4sectors(): unaligned read [ 186.484001][T11816] hpfs: filesystem error: unable to find root dir [ 186.856240][ T6574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.857343][T11823] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1793'. [ 187.079153][T11813] tipc: Enabling of bearer rejected, failed to enable media [ 187.135837][T11830] syzkaller0: entered promiscuous mode [ 187.135873][T11830] syzkaller0: entered allmulticast mode [ 187.246158][T11836] binder: BINDER_SET_CONTEXT_MGR already set [ 187.248713][T11836] binder: 11835:11836 ioctl 4018620d 200000c0 returned -16 [ 187.286107][T11837] ptrace attach of "./syz-executor exec"[6583] was attempted by " [ 187.385484][ T2467] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.400296][ T2467] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.409994][T11839] binder: BINDER_SET_CONTEXT_MGR already set [ 187.410034][T11839] binder: 11835:11839 ioctl 4018620d 20000040 returned -16 [ 187.410983][T11839] binder: 11835:11839 got transaction to invalid handle, 1 [ 187.411004][T11839] binder: 11835:11839 cannot find target node [ 187.411079][T11839] binder: 11835:11839 transaction call to 0:0 failed 114/29201/-22, code 0 size 0-24 line 3232 [ 188.108910][ T6631] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.176350][T11853] loop2: detected capacity change from 0 to 1024 [ 188.180780][T11853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.201182][T11853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.671463][T11864] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1805'. [ 189.050520][ T6580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.108578][T11868] syzkaller0: entered promiscuous mode [ 189.108611][T11868] syzkaller0: entered allmulticast mode [ 189.113160][T11875] netlink: 'syz.0.1810': attribute type 39 has an invalid length. [ 189.179935][T11870] tipc: Enabled bearer , priority 0 [ 189.231910][T11882] ptrace attach of "./syz-executor exec"[6574] was attempted by " [ 189.746278][T11869] tipc: Disabling bearer [ 189.949755][T11892] binder: 11883:11892 got transaction to invalid handle, 1 [ 189.949862][T11892] binder: 11883:11892 cannot find target node [ 189.950059][T11892] binder: 11883:11892 transaction call to 0:0 failed 118/29201/-22, code 0 size 0-24 line 3232 [ 190.171468][T11890] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1816'. [ 190.210408][T11902] loop2: detected capacity change from 0 to 1024 [ 190.211334][T11902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.228512][T11902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.243586][T11896] tipc: Enabling of bearer rejected, failed to enable media [ 190.622584][ T7083] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.741340][T11917] netlink: 'syz.1.1822': attribute type 39 has an invalid length. [ 190.752476][T11915] syzkaller0: entered promiscuous mode [ 190.752505][T11915] syzkaller0: entered allmulticast mode [ 191.080283][ T6580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.314209][T11945] ptrace attach of "./syz-executor exec"[6573] was attempted by " [ 191.531105][T11950] tipc: Enabled bearer , priority 0 [ 191.616744][T11929] tipc: Disabling bearer [ 191.620053][T11954] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1829'. [ 191.745891][T11963] netlink: 'syz.0.1833': attribute type 39 has an invalid length. [ 191.765371][T11965] loop0: detected capacity change from 0 to 1024 [ 191.767000][T11965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.942631][T11967] binder: BINDER_SET_CONTEXT_MGR already set [ 191.942657][T11967] binder: 11958:11967 ioctl 4018620d 20000040 returned -16 [ 191.942837][T11967] binder: 11958:11967 got transaction to invalid handle, 1 [ 191.942850][T11967] binder: 11958:11967 cannot find target node [ 191.942865][T11967] binder: 11958:11967 transaction call to 0:0 failed 120/29201/-22, code 0 size 0-24 line 3232 [ 191.952165][T11965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.670156][ T6687] binder: undelivered TRANSACTION_ERROR: 29201 [ 192.842882][ T6574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.891488][T11991] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1840'. [ 193.016408][T12003] tipc: Enabled bearer , priority 0 [ 193.017687][T12005] netlink: 'syz.2.1844': attribute type 39 has an invalid length. [ 193.065931][T12002] tipc: Disabling bearer [ 193.315995][T12014] ptrace attach of "./syz-executor exec"[6583] was attempted by " [ 193.627148][T12020] loop3: detected capacity change from 0 to 1024 [ 193.627925][T12020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.656725][T12020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.765850][T12024] binder: BINDER_SET_CONTEXT_MGR already set [ 193.765872][T12024] binder: 12017:12024 ioctl 4018620d 20000040 returned -16 [ 193.767518][T12024] binder: 12017:12024 got transaction to invalid handle, 1 [ 193.767543][T12024] binder: 12017:12024 cannot find target node [ 193.767740][T12024] binder: 12017:12024 transaction call to 0:0 failed 122/29201/-22, code 0 size 0-24 line 3232 [ 194.194780][T12032] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1852'. [ 194.303828][T12038] tipc: Enabling of bearer rejected, failed to enable media [ 194.320114][T12048] tipc: Enabled bearer , priority 0 [ 194.357571][T12045] tipc: Disabling bearer [ 194.429976][ T6687] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.467770][T12067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1861'. [ 194.470168][T12067] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 194.483347][ T6573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.573568][T12074] syzkaller0: entered promiscuous mode [ 194.573605][T12074] syzkaller0: entered allmulticast mode [ 194.742732][T12080] netlink: 'syz.4.1862': attribute type 2 has an invalid length. [ 194.745870][T12080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.746953][T12080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.510300][T12090] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1869'. [ 195.975118][T12098] binder: BINDER_SET_CONTEXT_MGR already set [ 195.975178][T12098] binder: 12095:12098 ioctl 4018620d 20000040 returned -16 [ 195.975901][T12098] binder: 12095:12098 got transaction to invalid handle, 1 [ 195.975923][T12098] binder: 12095:12098 cannot find target node [ 195.976000][T12098] binder: 12095:12098 transaction call to 0:0 failed 124/29201/-22, code 0 size 0-24 line 3232 [ 196.401907][T12105] loop3: detected capacity change from 0 to 1024 [ 196.402572][T12105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.419811][T12105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.546311][T12110] ptrace attach of "./syz-executor exec"[6574] was attempted by " [ 196.848630][ T6631] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.262050][ T6573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.872972][T12137] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1882'. [ 198.469823][T12148] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.700800][T12158] loop4: detected capacity change from 0 to 1024 [ 198.702473][T12158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.875925][T12163] ptrace attach of "./syz-executor exec"[6573] was attempted by " [ 199.263217][T12164] netlink: 'syz.1.1890': attribute type 2 has an invalid length. [ 199.264164][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.264340][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.328767][T12158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.692231][ T6583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.975673][T12177] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1893'. [ 201.281915][T12207] ip6_vti0 speed is unknown, defaulting to 1000 [ 201.566314][T12212] loop2: detected capacity change from 0 to 1024 [ 201.566673][T12212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.579632][T12212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.856156][T12216] ptrace attach of "./syz-executor exec"[6574] was attempted by "./syz-executor exec"[12216] [ 202.114638][T12228] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1905'. [ 202.132313][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1906'. [ 202.134842][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1906'. [ 202.364782][T12247] syzkaller0: entered promiscuous mode [ 202.366124][T12247] syzkaller0: entered allmulticast mode [ 202.446323][ T6580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.462737][T12266] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1917'. [ 203.720441][T12273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.721670][T12273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.975761][T12260] ip6_vti0 speed is unknown, defaulting to 1000 [ 203.980191][T12272] netlink: 'syz.2.1916': attribute type 2 has an invalid length. [ 203.982651][T12267] tipc: Enabling of bearer rejected, failed to enable media [ 204.059674][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1920'. [ 204.059766][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1920'. [ 204.213764][T12300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1924'. [ 204.214043][T12300] syz2: rxe_newlink: already configured on ip6_vti0 [ 204.301374][T12304] ptrace attach of "./syz-executor exec"[6574] was attempted by ""[12304] [ 205.139737][T12318] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1929'. [ 205.388839][T12324] syzkaller0: entered promiscuous mode [ 205.388870][T12324] syzkaller0: entered allmulticast mode [ 206.023400][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1935'. [ 206.069357][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1932'. [ 206.069460][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1932'. [ 206.073981][T12333] syz2: rxe_newlink: already configured on ip6_vti0 [ 206.408602][T12343] ptrace attach of "./syz-executor exec"[6575] was attempted by ""[12343] [ 206.478222][T12347] ip6_vti0 speed is unknown, defaulting to 1000 [ 206.484560][T12349] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1940'. [ 207.367704][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1946'. [ 207.367784][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1946'. [ 207.507193][T12372] syzkaller0: entered promiscuous mode [ 207.508234][T12372] syzkaller0: entered allmulticast mode [ 207.931098][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.931276][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.290082][T12389] tipc: Enabling of bearer rejected, failed to enable media [ 208.292497][T12393] netlink: 'syz.4.1951': attribute type 2 has an invalid length. [ 208.341228][T12406] syzkaller0: entered promiscuous mode [ 208.341267][T12406] syzkaller0: entered allmulticast mode [ 209.138502][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1957'. [ 209.140282][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1957'. [ 209.328991][T12440] ip6_vti0 speed is unknown, defaulting to 1000 [ 209.467142][T12444] tipc: Enabling of bearer rejected, failed to enable media [ 209.570243][T12455] syzkaller0: entered promiscuous mode [ 209.571543][T12455] syzkaller0: entered allmulticast mode [ 209.771629][T12460] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1969'. [ 210.683202][T12471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1972'. [ 210.683292][T12471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1972'. [ 210.747353][T12482] syzkaller0: entered promiscuous mode [ 210.747388][T12482] syzkaller0: entered allmulticast mode [ 210.809693][T12482] tipc: Enabled bearer , priority 0 [ 210.885771][T12481] tipc: Resetting bearer [ 210.899723][T12481] tipc: Disabling bearer [ 211.092808][T12495] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1983'. [ 211.126101][T12498] syzkaller0: entered promiscuous mode [ 211.126136][T12498] syzkaller0: entered allmulticast mode [ 211.133410][T12501] ip6_vti0 speed is unknown, defaulting to 1000 [ 212.004361][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1988'. [ 212.006175][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1988'. [ 212.062107][T12526] netlink: 'syz.4.1986': attribute type 2 has an invalid length. [ 212.065840][T12526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.066009][T12526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.284157][T12535] syzkaller0: entered promiscuous mode [ 212.288567][T12535] syzkaller0: entered allmulticast mode [ 212.313159][T12535] tipc: Enabled bearer , priority 0 [ 212.333464][T12538] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1995'. [ 212.355842][T12534] tipc: Resetting bearer [ 212.383100][T12534] tipc: Disabling bearer [ 212.764449][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2000'. [ 212.767873][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2000'. [ 213.209135][T12558] syzkaller0: entered promiscuous mode [ 213.209171][T12558] syzkaller0: entered allmulticast mode [ 213.910067][T12590] ip6_vti0 speed is unknown, defaulting to 1000 [ 213.963666][T12587] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2007'. [ 214.065322][T12601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2012'. [ 215.230626][T12621] syzkaller0: entered promiscuous mode [ 215.232910][T12621] syzkaller0: entered allmulticast mode [ 215.241822][T12624] ip6_vti0 speed is unknown, defaulting to 1000 [ 216.319290][T12637] __nla_validate_parse: 2 callbacks suppressed [ 216.319332][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2024'. [ 216.319420][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2024'. [ 216.395328][T12653] syzkaller0: entered promiscuous mode [ 216.395357][T12653] syzkaller0: entered allmulticast mode [ 216.537939][T12674] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2032'. [ 217.025512][T12685] netlink: 'syz.4.2028': attribute type 2 has an invalid length. [ 217.026556][T12685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.026770][T12685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.526763][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2037'. [ 217.528639][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2037'. [ 217.667526][T12708] syzkaller0: entered promiscuous mode [ 217.669529][T12708] syzkaller0: entered allmulticast mode [ 217.739720][T12712] syzkaller0: entered promiscuous mode [ 217.739753][T12712] syzkaller0: entered allmulticast mode [ 218.055762][T12718] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2045'. [ 219.081920][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2050'. [ 219.083894][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2050'. [ 219.212189][T12743] syzkaller0: entered promiscuous mode [ 219.212217][T12743] syzkaller0: entered allmulticast mode [ 219.467848][T12751] syzkaller0: entered promiscuous mode [ 219.469901][T12751] syzkaller0: entered allmulticast mode [ 219.476050][T12753] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2059'. [ 220.389803][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2061'. [ 220.391789][T12759] syzkaller0: entered promiscuous mode [ 220.391805][T12759] syzkaller0: entered allmulticast mode [ 220.477214][T12781] syzkaller0: entered promiscuous mode [ 220.478209][T12781] syzkaller0: entered allmulticast mode [ 221.211440][T12812] netlink: 'syz.4.2071': attribute type 2 has an invalid length. [ 221.212212][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.212394][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.388329][T12816] __nla_validate_parse: 2 callbacks suppressed [ 221.388365][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2074'. [ 221.388436][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2074'. [ 221.458631][T12820] syzkaller0: entered promiscuous mode [ 221.459787][T12820] syzkaller0: entered allmulticast mode [ 221.468473][T12819] syzkaller0: entered promiscuous mode [ 221.468496][T12819] syzkaller0: entered allmulticast mode [ 222.721083][T12828] syzkaller0: entered promiscuous mode [ 222.722153][T12828] syzkaller0: entered allmulticast mode [ 222.723960][T12835] syzkaller0: entered promiscuous mode [ 222.723987][T12835] syzkaller0: entered allmulticast mode [ 222.764114][T12863] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2081'. [ 223.411984][T12886] syzkaller0: entered promiscuous mode [ 223.412023][T12886] syzkaller0: entered allmulticast mode [ 223.897786][T12905] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2093'. [ 224.106876][T12903] syzkaller0: entered promiscuous mode [ 224.107813][T12903] syzkaller0: entered allmulticast mode [ 224.827163][T12918] syzkaller0: entered promiscuous mode [ 224.827192][T12918] syzkaller0: entered allmulticast mode [ 224.835528][T12932] syzkaller0: entered promiscuous mode [ 224.835561][T12932] syzkaller0: entered allmulticast mode [ 224.933171][T12954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.935104][T12954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.250900][T12973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.251075][T12973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.292683][T12974] netlink: 'syz.0.2109': attribute type 2 has an invalid length. [ 225.525140][ T6701] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 225.686797][ T6701] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 225.686829][ T6701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.689185][ T6701] usb 1-1: config 0 descriptor?? [ 225.693060][ T6701] pwc: Samsung MPC-C10 USB webcam detected. [ 225.895986][T12981] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.294663][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.294949][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.067970][T13028] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.143218][ T6701] pwc: send_video_command error -71 [ 228.143243][ T6701] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 228.144008][ T6701] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 228.147067][ T6701] usb 1-1: USB disconnect, device number 13 [ 228.216682][T13032] syzkaller0: entered promiscuous mode [ 228.216715][T13032] syzkaller0: entered allmulticast mode [ 228.873592][T13047] syzkaller0: entered promiscuous mode [ 228.874698][T13047] syzkaller0: entered allmulticast mode [ 228.989161][T13051] syzkaller0: entered promiscuous mode [ 228.990334][T13051] syzkaller0: entered allmulticast mode [ 229.272627][T13071] syzkaller0: entered promiscuous mode [ 229.273850][T13071] syzkaller0: entered allmulticast mode [ 229.679690][T13084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.679860][T13084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.085307][T13083] netlink: 'syz.1.2145': attribute type 2 has an invalid length. [ 230.090655][T13079] ip6_vti0 speed is unknown, defaulting to 1000 [ 230.207429][T13095] syzkaller0: entered promiscuous mode [ 230.208319][T13095] syzkaller0: entered allmulticast mode [ 230.222557][T13097] syzkaller0: entered promiscuous mode [ 230.223483][T13097] syzkaller0: entered allmulticast mode [ 230.301838][T13100] syzkaller0: entered promiscuous mode [ 230.302878][T13100] syzkaller0: entered allmulticast mode [ 230.882351][T13128] ip6_vti0 speed is unknown, defaulting to 1000 [ 231.381737][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 231.564528][T13140] syzkaller0: entered promiscuous mode [ 231.564557][T13140] syzkaller0: entered allmulticast mode [ 231.723066][T13146] syzkaller0: entered promiscuous mode [ 231.723851][T13146] syzkaller0: entered allmulticast mode [ 231.737590][T13148] syzkaller0: entered promiscuous mode [ 231.737618][T13148] syzkaller0: entered allmulticast mode [ 232.394100][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2177'. [ 232.476421][T13183] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.956227][ T6701] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 233.121991][ T6701] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 233.123617][ T6701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.125361][ T6701] usb 1-1: config 0 has no interface number 0 [ 233.125389][ T6701] usb 1-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.130025][ T6701] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 233.131530][ T6701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.132820][ T6701] usb 1-1: Product: syz [ 233.133499][ T6701] usb 1-1: Manufacturer: syz [ 233.134357][ T6701] usb 1-1: SerialNumber: syz [ 233.136950][ T6701] usb 1-1: config 0 descriptor?? [ 233.141011][ T6701] yurex 1-1:0.50: Could not find endpoints [ 233.221619][T13196] syzkaller0: entered promiscuous mode [ 233.222801][T13196] syzkaller0: entered allmulticast mode [ 233.434161][T13211] syzkaller0: entered promiscuous mode [ 233.439078][T13211] syzkaller0: entered allmulticast mode [ 234.254051][T13221] syzkaller0: entered promiscuous mode [ 234.255201][T13221] syzkaller0: entered allmulticast mode [ 234.433522][T13244] ip6_vti0 speed is unknown, defaulting to 1000 [ 235.018311][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'. [ 235.042059][T13252] syzkaller0: entered promiscuous mode [ 235.042152][T13252] syzkaller0: entered allmulticast mode [ 235.167780][T13256] binder: 13255:13256 ioctl c0306201 0 returned -14 [ 235.324731][T13261] binder: 13255:13261 got transaction to invalid handle, 1 [ 235.324770][T13261] binder: 13255:13261 cannot find target node [ 235.324862][T13261] binder: 13255:13261 transaction call to 0:0 failed 128/29201/-22, code 0 size 0-24 line 3232 [ 235.557711][T13266] syzkaller0: entered promiscuous mode [ 235.559837][T13266] syzkaller0: entered allmulticast mode [ 235.615652][T13269] syzkaller0: entered promiscuous mode [ 235.617228][T13269] syzkaller0: entered allmulticast mode [ 235.696996][ T6701] usb 1-1: USB disconnect, device number 14 [ 235.725339][T13269] tipc: Enabled bearer , priority 0 [ 235.745694][T13268] tipc: Resetting bearer [ 235.908490][T13268] tipc: Disabling bearer [ 235.998410][T13280] syzkaller0: entered promiscuous mode [ 235.998525][T13280] syzkaller0: entered allmulticast mode [ 236.021728][ T6701] binder: undelivered TRANSACTION_ERROR: 29201 [ 236.032806][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2207'. [ 236.754806][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.756594][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.007686][T13311] syzkaller0: entered promiscuous mode [ 237.009939][T13311] syzkaller0: entered allmulticast mode [ 237.026293][T13303] syzkaller0: entered promiscuous mode [ 237.027452][T13303] syzkaller0: entered allmulticast mode [ 237.036759][T13314] binder: 13313:13314 ioctl c0306201 0 returned -14 [ 237.110524][T13315] tipc: Enabled bearer , priority 0 [ 237.144602][T13310] tipc: Resetting bearer [ 237.195775][T13317] binder: 13313:13317 got transaction to invalid handle, 1 [ 237.195810][T13317] binder: 13313:13317 cannot find target node [ 237.195903][T13317] binder: 13313:13317 transaction call to 0:0 failed 132/29201/-22, code 0 size 0-24 line 3232 [ 237.380475][T13310] tipc: Disabling bearer [ 237.881255][ T6701] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.503539][T13365] syzkaller0: entered promiscuous mode [ 238.503566][T13365] syzkaller0: entered allmulticast mode [ 238.619677][T13368] syzkaller0: entered promiscuous mode [ 238.619709][T13368] syzkaller0: entered allmulticast mode [ 239.263600][T13374] binder: 13373:13374 ioctl c0306201 0 returned -14 [ 239.421507][T13383] binder: 13373:13383 got transaction to invalid handle, 1 [ 239.421546][T13383] binder: 13373:13383 cannot find target node [ 239.421635][T13383] binder: 13373:13383 transaction call to 0:0 failed 136/29201/-22, code 0 size 0-24 line 3232 [ 240.324728][ T7083] binder: undelivered TRANSACTION_ERROR: 29201 [ 240.326726][T13408] loop0: detected capacity change from 0 to 1024 [ 240.327178][T13408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.349948][T13408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.075771][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.079717][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.338355][ T6574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.419673][T13440] binder: 13437:13440 got transaction to invalid handle, 1 [ 241.419711][T13440] binder: 13437:13440 cannot find target node [ 241.419808][T13440] binder: 13437:13440 transaction call to 0:0 failed 140/29201/-22, code 0 size 0-24 line 3232 [ 241.625003][T13442] syzkaller0: entered promiscuous mode [ 241.627941][T13442] syzkaller0: entered allmulticast mode [ 241.655017][T13442] tipc: Enabled bearer , priority 0 [ 241.676991][T13441] tipc: Resetting bearer [ 241.690964][T13441] tipc: Disabling bearer [ 242.122384][ T7113] binder: undelivered TRANSACTION_ERROR: 29201 [ 242.190935][T13469] syzkaller0: entered promiscuous mode [ 242.190967][T13469] syzkaller0: entered allmulticast mode [ 242.395625][T13473] loop1: detected capacity change from 0 to 1024 [ 242.397597][T13473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.419196][T13473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.195750][ T6575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.211108][T13487] syzkaller0: entered promiscuous mode [ 243.211138][T13487] syzkaller0: entered allmulticast mode [ 243.232524][T13487] tipc: Enabled bearer , priority 0 [ 243.237584][T13486] tipc: Resetting bearer [ 243.246771][T13486] tipc: Disabling bearer [ 243.766253][T13508] binder: 13502:13508 got transaction to invalid handle, 1 [ 243.766294][T13508] binder: 13502:13508 cannot find target node [ 243.766394][T13508] binder: 13502:13508 transaction call to 0:0 failed 144/29201/-22, code 0 size 0-24 line 3232 [ 243.903715][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 243.907132][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 244.296800][ T7113] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.596292][T13540] syzkaller0: entered promiscuous mode [ 244.597832][T13540] syzkaller0: entered allmulticast mode [ 244.682424][T13540] tipc: Enabled bearer , priority 0 [ 244.705971][T13539] tipc: Resetting bearer [ 244.719449][T13539] tipc: Disabling bearer [ 245.222096][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.226901][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.607099][T13576] binder: 13569:13576 got transaction to invalid handle, 1 [ 245.607141][T13576] binder: 13569:13576 cannot find target node [ 245.607240][T13576] binder: 13569:13576 transaction call to 0:0 failed 148/29201/-22, code 0 size 0-24 line 3232 [ 245.716870][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 245.719475][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 245.819582][T13584] tipc: Enabling of bearer rejected, failed to enable media [ 246.260460][ T8536] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.098269][T13621] syzkaller0: entered promiscuous mode [ 247.098305][T13621] syzkaller0: entered allmulticast mode [ 247.444306][T13634] binder: 13628:13634 got transaction to invalid handle, 1 [ 247.444348][T13634] binder: 13628:13634 cannot find target node [ 247.444446][T13634] binder: 13628:13634 transaction call to 0:0 failed 152/29201/-22, code 0 size 0-24 line 3232 [ 248.105968][T13646] tipc: Enabling of bearer rejected, failed to enable media [ 248.134376][ T7113] binder: undelivered TRANSACTION_ERROR: 29201 [ 248.856489][ T2467] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.856545][ T2467] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.548521][T13690] tipc: Enabling of bearer rejected, failed to enable media [ 249.602617][T13709] binder: 13691:13709 got transaction to invalid handle, 1 [ 249.602655][T13709] binder: 13691:13709 cannot find target node [ 249.602753][T13709] binder: 13691:13709 transaction call to 0:0 failed 156/29201/-22, code 0 size 0-24 line 3232 [ 249.866729][T13711] syzkaller0: entered promiscuous mode [ 249.866760][T13711] syzkaller0: entered allmulticast mode [ 250.297317][ T7113] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.807453][T13746] bond0: entered promiscuous mode [ 251.808650][T13746] bond0: entered allmulticast mode [ 251.809994][T13746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.143636][T13782] binder: 13769:13782 got transaction to invalid handle, 1 [ 252.143675][T13782] binder: 13769:13782 cannot find target node [ 252.143764][T13782] binder: 13769:13782 transaction call to 0:0 failed 160/29201/-22, code 0 size 0-24 line 3232 [ 252.833994][ T7083] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.891374][T13793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.891551][T13793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.340655][T13798] syzkaller0: entered promiscuous mode [ 253.341636][T13798] syzkaller0: entered allmulticast mode [ 254.051486][T13828] bond1: entered promiscuous mode [ 254.052573][T13828] bond1: entered allmulticast mode [ 254.053719][T13828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.291970][T13843] binder: tried to use weak ref as strong ref [ 254.292008][T13843] binder: 13838:13843 Acquire 1 refcount change on invalid ref 0 ret -22 [ 254.292437][T13843] binder: 13838:13843 got transaction to invalid handle, 1 [ 254.292460][T13843] binder: 13838:13843 cannot find target node [ 254.292540][T13843] binder: 13838:13843 transaction call to 0:0 failed 163/29201/-22, code 0 size 0-24 line 3232 [ 254.987048][ T7083] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.559868][T13864] syzkaller0: entered promiscuous mode [ 255.560809][T13864] syzkaller0: entered allmulticast mode [ 256.613096][T13900] tipc: Enabled bearer , priority 0 [ 256.664864][T13899] tipc: Disabling bearer [ 256.691841][T13908] syzkaller0: entered promiscuous mode [ 256.692873][T13908] syzkaller0: entered allmulticast mode [ 256.777353][T13910] binder: tried to use weak ref as strong ref [ 256.777389][T13910] binder: 13901:13910 Acquire 1 refcount change on invalid ref 0 ret -22 [ 256.778115][T13910] binder: 13901:13910 got transaction to invalid handle, 1 [ 256.778147][T13910] binder: 13901:13910 cannot find target node [ 256.778225][T13910] binder: 13901:13910 transaction call to 0:0 failed 166/29201/-22, code 0 size 0-24 line 3232 [ 257.435783][ T8536] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.494885][T13943] syzkaller0: entered promiscuous mode [ 257.494916][T13943] syzkaller0: entered allmulticast mode [ 258.448073][T13974] syzkaller0: entered promiscuous mode [ 258.449083][T13974] syzkaller0: entered allmulticast mode [ 258.557470][T13992] netlink: 'syz.0.2385': attribute type 1 has an invalid length. [ 259.123898][T13992] bond2: entered promiscuous mode [ 259.125208][T13992] bond2: entered allmulticast mode [ 259.126089][T13992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.127941][T13995] syzkaller0: entered promiscuous mode [ 259.130080][T13995] syzkaller0: entered allmulticast mode [ 259.457980][T14027] binder: tried to use weak ref as strong ref [ 259.458010][T14027] binder: 14019:14027 Acquire 1 refcount change on invalid ref 0 ret -22 [ 259.458325][T14027] binder: 14019:14027 got transaction to invalid handle, 1 [ 259.458341][T14027] binder: 14019:14027 cannot find target node [ 259.458362][T14027] binder: 14019:14027 transaction call to 0:0 failed 169/29201/-22, code 0 size 0-24 line 3232 [ 259.678485][T14045] syzkaller0: entered promiscuous mode [ 259.680208][T14045] syzkaller0: entered allmulticast mode [ 259.987241][ T7113] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.524028][T14061] vlan2: entered allmulticast mode [ 260.538914][T14064] syzkaller0: entered promiscuous mode [ 260.538943][T14064] syzkaller0: entered allmulticast mode [ 260.571088][T14069] netlink: 'syz.3.2401': attribute type 1 has an invalid length. [ 260.585412][T14067] syzkaller0: entered promiscuous mode [ 260.586459][T14067] syzkaller0: entered allmulticast mode [ 261.181200][T14069] bond2: entered promiscuous mode [ 261.182282][T14069] bond2: entered allmulticast mode [ 261.183912][T14069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.775918][T14083] syzkaller0: entered promiscuous mode [ 261.775957][T14083] syzkaller0: entered allmulticast mode [ 262.468356][T14128] tipc: Enabled bearer , priority 0 [ 262.507730][T14126] tipc: Disabling bearer [ 262.599716][T14156] syzkaller0: entered promiscuous mode [ 262.600751][T14156] syzkaller0: entered allmulticast mode [ 262.734918][T14182] netlink: 'syz.2.2419': attribute type 1 has an invalid length. [ 263.365276][T14182] bond1: entered promiscuous mode [ 263.365303][T14182] bond1: entered allmulticast mode [ 263.366192][T14182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.396641][T14210] syzkaller0: entered promiscuous mode [ 263.397613][T14210] syzkaller0: entered allmulticast mode [ 263.888066][T14237] tipc: Enabled bearer , priority 0 [ 263.921069][T14235] tipc: Disabling bearer [ 263.922768][T14266] netlink: 'syz.1.2432': attribute type 1 has an invalid length. [ 263.933429][T14266] bond5: entered promiscuous mode [ 263.933452][T14266] bond5: entered allmulticast mode [ 263.933602][T14266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.164545][T14282] syzkaller0: entered promiscuous mode [ 264.166576][T14282] syzkaller0: entered allmulticast mode [ 264.356976][T14304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.362662][T14304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.966514][T14308] syzkaller0: entered promiscuous mode [ 264.967639][T14308] syzkaller0: entered allmulticast mode [ 265.018543][T14330] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 265.037926][T14330] bond6: entered promiscuous mode [ 265.037955][T14330] bond6: entered allmulticast mode [ 265.038108][T14330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.042135][T14329] tipc: Enabled bearer , priority 0 [ 265.070506][T14327] tipc: Disabling bearer [ 265.163324][T14347] syzkaller0: entered promiscuous mode [ 265.163356][T14347] syzkaller0: entered allmulticast mode [ 265.556123][T14362] syzkaller0: entered promiscuous mode [ 265.556160][T14362] syzkaller0: entered allmulticast mode [ 266.032683][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.032871][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.265438][ T6586] Bluetooth: hci4: command 0x0406 tx timeout [ 266.360786][T14370] syzkaller0: entered promiscuous mode [ 266.362133][T14370] syzkaller0: entered allmulticast mode [ 266.373736][T14385] syzkaller0: entered promiscuous mode [ 266.375263][T14385] syzkaller0: entered allmulticast mode [ 266.378002][T14383] tipc: Enabled bearer , priority 0 [ 266.406018][T14382] tipc: Resetting bearer [ 266.411937][T14391] netlink: 'syz.3.2459': attribute type 1 has an invalid length. [ 266.412267][T14382] tipc: Disabling bearer [ 266.442112][T14391] bond3: entered promiscuous mode [ 266.443054][T14391] bond3: entered allmulticast mode [ 266.444370][T14391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.593143][T14410] syzkaller0: entered promiscuous mode [ 266.593176][T14410] syzkaller0: entered allmulticast mode [ 266.972316][T14423] syzkaller0: entered promiscuous mode [ 266.973580][T14423] syzkaller0: entered allmulticast mode [ 266.979963][T14425] syzkaller0: entered promiscuous mode [ 266.979992][T14425] syzkaller0: entered allmulticast mode [ 267.519659][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2474'. [ 267.712071][T14436] syzkaller0: entered promiscuous mode [ 267.712099][T14436] syzkaller0: entered allmulticast mode [ 267.724802][T14430] tipc: Enabled bearer , priority 0 [ 267.736507][T14429] tipc: Resetting bearer [ 267.743810][T14429] tipc: Disabling bearer [ 267.753176][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.759854][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.828099][T14462] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.889941][T14467] syzkaller0: entered promiscuous mode [ 267.889970][T14467] syzkaller0: entered allmulticast mode [ 268.206072][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 268.229613][T14482] syzkaller0: entered promiscuous mode [ 268.230597][T14482] syzkaller0: entered allmulticast mode [ 268.985166][ T8536] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 268.987935][T14493] syzkaller0: entered promiscuous mode [ 268.988594][T14493] syzkaller0: entered allmulticast mode [ 268.990189][T14501] tipc: Enabled bearer , priority 0 [ 269.027317][T14485] tipc: Resetting bearer [ 269.034551][T14485] tipc: Disabling bearer [ 269.064848][T14516] syzkaller0: entered promiscuous mode [ 269.067176][T14516] syzkaller0: entered allmulticast mode [ 269.073086][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 269.175226][ T8536] usb 1-1: Using ep0 maxpacket: 8 [ 269.177936][ T8536] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 269.179324][ T8536] usb 1-1: config 179 has no interface number 0 [ 269.179361][ T8536] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 269.179388][ T8536] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 269.179405][ T8536] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 269.179419][ T8536] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 269.179432][ T8536] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 269.179444][ T8536] usb 1-1: config 179 interface 65 has no altsetting 0 [ 269.179458][ T8536] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 269.179469][ T8536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.199116][ T8536] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input52 [ 269.478448][T14533] syzkaller0: entered promiscuous mode [ 269.478486][T14533] syzkaller0: entered allmulticast mode [ 269.565537][T10310] input input52: unable to receive magic message: -110 [ 269.717361][ T7113] usb 1-1: USB disconnect, device number 15 [ 269.717474][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 270.492245][T14566] tipc: Enabling of bearer rejected, failed to enable media [ 270.496618][T14560] syzkaller0: entered promiscuous mode [ 270.498591][T14560] syzkaller0: entered allmulticast mode [ 270.650904][T14582] syzkaller0: entered promiscuous mode [ 270.650936][T14582] syzkaller0: entered allmulticast mode [ 271.416965][T14613] binder: 14607:14613 tried to acquire reference to desc 0, got 1 instead [ 271.417146][T14613] binder: 14607:14613 got transaction with invalid data ptr [ 271.417182][T14613] binder: 14607:14613 transaction call to 14607:0 failed 174/29201/-14, code 0 size 0-24 line 3492 [ 271.568492][T14615] syzkaller1: entered promiscuous mode [ 271.569646][T14615] syzkaller1: entered allmulticast mode [ 271.590239][T14617] syzkaller0: entered promiscuous mode [ 271.590278][T14617] syzkaller0: entered allmulticast mode [ 271.615514][T14621] syzkaller0: entered promiscuous mode [ 271.615543][T14621] syzkaller0: entered allmulticast mode [ 271.617173][T14621] tipc: Enabled bearer , priority 0 [ 271.974729][ T6639] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.270185][T14620] tipc: Resetting bearer [ 272.276854][T14620] tipc: Disabling bearer [ 272.291796][T14642] syzkaller0: entered promiscuous mode [ 272.291819][T14642] syzkaller0: entered allmulticast mode [ 272.951587][T14662] syzkaller0: entered promiscuous mode [ 272.951633][T14662] syzkaller0: entered allmulticast mode [ 273.059214][T14691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.061937][T14691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.123413][T14697] syzkaller0: entered promiscuous mode [ 273.123450][T14697] syzkaller0: entered allmulticast mode [ 273.416377][T14691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.416547][T14691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.826936][T14711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.829263][T14711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.948006][T14704] tipc: Enabled bearer , priority 0 [ 273.976368][T14698] tipc: Disabling bearer [ 274.353397][T14730] syzkaller0: entered promiscuous mode [ 274.355827][T14730] syzkaller0: entered allmulticast mode [ 274.363210][T14734] syzkaller0: entered promiscuous mode [ 274.363238][T14734] syzkaller0: entered allmulticast mode [ 274.484154][T14747] syzkaller0: entered promiscuous mode [ 274.484188][T14747] syzkaller0: entered allmulticast mode [ 274.497695][T14747] tipc: Enabled bearer , priority 0 [ 274.507699][T14748] syzkaller0: entered promiscuous mode [ 274.508751][T14748] syzkaller0: entered allmulticast mode [ 275.372823][T14746] tipc: Resetting bearer [ 275.380687][T14746] tipc: Disabling bearer [ 275.466511][T14769] syzkaller0: entered promiscuous mode [ 275.467463][T14769] syzkaller0: entered allmulticast mode [ 275.490134][T14775] syzkaller0: entered promiscuous mode [ 275.491069][T14775] syzkaller0: entered allmulticast mode [ 275.676036][ T8536] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 275.965287][ T8536] usb 1-1: Using ep0 maxpacket: 8 [ 275.977489][ T8536] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 275.979324][ T8536] usb 1-1: config 179 has no interface number 0 [ 275.980392][ T8536] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 275.982244][ T8536] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 275.984162][ T8536] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 275.986530][ T8536] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 275.988426][ T8536] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 275.990884][ T8536] usb 1-1: config 179 interface 65 has no altsetting 0 [ 275.992450][ T8536] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 275.994161][ T8536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.060455][ T8536] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input53 [ 276.146713][T10310] input input53: unable to receive magic message: -110 [ 276.184189][T14791] syzkaller0: entered promiscuous mode [ 276.185109][T14791] syzkaller0: entered allmulticast mode [ 276.271524][ T7083] usb 1-1: USB disconnect, device number 16 [ 276.901617][T14809] syzkaller0: entered promiscuous mode [ 276.901644][T14809] syzkaller0: entered allmulticast mode [ 276.910127][T14812] syzkaller0: entered promiscuous mode [ 276.912381][T14812] syzkaller0: entered allmulticast mode [ 277.540409][T14844] syzkaller0: entered promiscuous mode [ 277.540436][T14844] syzkaller0: entered allmulticast mode [ 277.601618][T14856] syzkaller0: entered promiscuous mode [ 277.601658][T14856] syzkaller0: entered allmulticast mode [ 277.607713][T14858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.607959][T14858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.010907][T14875] syzkaller0: entered promiscuous mode [ 278.016310][T14875] syzkaller0: entered allmulticast mode [ 278.903843][T14906] syzkaller0: entered promiscuous mode [ 278.905013][T14906] syzkaller0: entered allmulticast mode [ 279.831038][T14940] syzkaller0: entered promiscuous mode [ 279.831077][T14940] syzkaller0: entered allmulticast mode [ 279.959412][T14962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.959594][T14962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.960608][T14959] syzkaller0: entered promiscuous mode [ 279.960629][T14959] syzkaller0: entered allmulticast mode [ 280.004461][T14966] syzkaller0: entered promiscuous mode [ 280.005362][T14966] syzkaller0: entered allmulticast mode [ 280.014156][T14964] syzkaller0: entered promiscuous mode [ 280.014186][T14964] syzkaller0: entered allmulticast mode [ 281.409828][T14984] syzkaller0: entered promiscuous mode [ 281.412431][T14984] syzkaller0: entered allmulticast mode [ 281.427913][T14989] syzkaller0: entered promiscuous mode [ 281.428958][T14989] syzkaller0: entered allmulticast mode [ 281.449657][T14991] syzkaller0: entered promiscuous mode [ 281.449685][T14991] syzkaller0: entered allmulticast mode [ 282.171089][T15011] syzkaller0: entered promiscuous mode [ 282.172243][T15011] syzkaller0: entered allmulticast mode [ 282.179841][T15019] syzkaller0: entered promiscuous mode [ 282.179869][T15019] syzkaller0: entered allmulticast mode [ 282.826913][T15052] syzkaller0: entered promiscuous mode [ 282.826947][T15052] syzkaller0: entered allmulticast mode [ 282.915011][T15066] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 282.915035][T15066] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 282.916900][T15066] vhci_hcd vhci_hcd.0: Device attached [ 282.920661][T15069] vhci_hcd: cannot find the pending unlink 11 [ 282.922151][T15069] vhci_hcd: connection closed [ 282.941925][ T4867] vhci_hcd vhci_hcd.1: stop threads [ 282.942297][ T4867] vhci_hcd vhci_hcd.1: release socket [ 282.942327][ T4867] vhci_hcd vhci_hcd.1: disconnect device [ 283.444071][T15086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.446619][T15086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.492600][T15075] syzkaller0: entered promiscuous mode [ 283.492627][T15075] syzkaller0: entered allmulticast mode [ 283.543904][T15088] syzkaller0: entered promiscuous mode [ 283.543941][T15088] syzkaller0: entered allmulticast mode [ 283.626095][T15094] syzkaller0: entered promiscuous mode [ 283.626123][T15094] syzkaller0: entered allmulticast mode [ 283.654558][T15096] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 283.665604][T15096] bond2: entered promiscuous mode [ 283.665632][T15096] bond2: entered allmulticast mode [ 283.665827][T15096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.853773][T15120] syzkaller0: entered promiscuous mode [ 283.853805][T15120] syzkaller0: entered allmulticast mode [ 283.857686][T15119] syzkaller1: entered promiscuous mode [ 283.858598][T15119] syzkaller1: entered allmulticast mode [ 284.467302][T15123] syzkaller0: entered promiscuous mode [ 284.467329][T15123] syzkaller0: entered allmulticast mode [ 284.488093][T15133] syzkaller0: entered promiscuous mode [ 284.488124][T15133] syzkaller0: entered allmulticast mode [ 284.529923][T15140] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 284.568623][T15146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.571092][T15146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.103787][T15140] bond3: entered promiscuous mode [ 285.107303][T15140] bond3: entered allmulticast mode [ 285.107633][T15140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.138371][T15152] syzkaller0: entered promiscuous mode [ 285.138403][T15152] syzkaller0: entered allmulticast mode [ 285.776087][T15181] syzkaller0: entered promiscuous mode [ 285.777278][T15181] syzkaller0: entered allmulticast mode [ 285.789528][T15190] tipc: Enabled bearer , priority 0 [ 285.795823][T15173] tipc: Resetting bearer [ 285.804992][T15173] tipc: Disabling bearer [ 285.832950][T15194] syzkaller0: entered promiscuous mode [ 285.833018][T15194] syzkaller0: entered allmulticast mode [ 285.923313][T15210] netlink: 'syz.2.2669': attribute type 1 has an invalid length. [ 286.145112][ T6680] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 286.295949][ T6680] usb 1-1: Using ep0 maxpacket: 32 [ 286.303841][ T6680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.305710][ T6680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.307241][ T6680] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 286.309166][ T6680] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 286.310572][ T6680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.316657][ T6680] usb 1-1: config 0 descriptor?? [ 286.507992][T15210] bond3: entered promiscuous mode [ 286.509020][T15210] bond3: entered allmulticast mode [ 286.509376][T15210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.510153][T15213] syzkaller0: entered promiscuous mode [ 286.510164][T15213] syzkaller0: entered allmulticast mode [ 286.541878][T15225] syzkaller0: entered promiscuous mode [ 286.542916][T15225] syzkaller0: entered allmulticast mode [ 286.568326][T15231] syzkaller0: entered promiscuous mode [ 286.569398][T15231] syzkaller0: entered allmulticast mode [ 286.681938][T15245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.682142][T15245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.688186][ T6582] Bluetooth: hci4: Malformed LE Event: 0x1b [ 286.734155][ T6680] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0002/input/input54 [ 286.744662][ T6680] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0002/input/input55 [ 286.763419][ T6680] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 286.772049][T15252] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2679' sets config #0 [ 286.800028][T15255] netlink: 'syz.2.2680': attribute type 1 has an invalid length. [ 286.833647][T15255] bond4: entered promiscuous mode [ 286.833676][T15255] bond4: entered allmulticast mode [ 286.834105][T15255] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.871248][T15258] syzkaller0: entered promiscuous mode [ 286.872239][T15258] syzkaller0: entered allmulticast mode [ 286.934386][ T6680] usb 1-1: USB disconnect, device number 17 [ 287.669967][T15287] syzkaller0: entered promiscuous mode [ 287.669999][T15287] syzkaller0: entered allmulticast mode [ 287.722472][T15296] netlink: 'syz.0.2691': attribute type 1 has an invalid length. [ 287.739915][T15296] bond4: entered promiscuous mode [ 287.741007][T15296] bond4: entered allmulticast mode [ 287.742376][T15296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.769473][T15302] binder: 15300:15302 tried to acquire reference to desc 0, got 1 instead [ 287.769641][T15302] binder: 15300:15302 got transaction with invalid parent offset or type [ 287.769683][T15302] binder: 15300:15302 transaction call to 15300:0 failed 179/29201/-22, code 0 size 96-24 line 3598 [ 287.769883][ T6639] binder: undelivered TRANSACTION_ERROR: 29201 [ 287.799028][T15307] syzkaller0: entered promiscuous mode [ 287.799051][T15307] syzkaller0: entered allmulticast mode [ 287.806798][T15307] tipc: Enabled bearer , priority 0 [ 287.835794][T15306] tipc: Resetting bearer [ 287.842084][T15306] tipc: Disabling bearer [ 288.006529][T15327] syzkaller0: entered promiscuous mode [ 288.007494][T15327] syzkaller0: entered allmulticast mode [ 288.026321][ T7083] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 288.195112][ T7083] usb 1-1: Using ep0 maxpacket: 32 [ 288.197137][ T7083] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 288.198546][ T7083] usb 1-1: config 0 has no interface number 0 [ 288.199523][ T7083] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 288.202442][ T7083] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 288.203990][ T7083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.205704][ T7083] usb 1-1: Product: syz [ 288.206373][ T7083] usb 1-1: Manufacturer: syz [ 288.207161][ T7083] usb 1-1: SerialNumber: syz [ 288.209216][ T7083] usb 1-1: config 0 descriptor?? [ 288.210459][T15305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.242451][T15349] syzkaller0: entered promiscuous mode [ 288.242476][T15349] syzkaller0: entered allmulticast mode [ 288.249771][T15349] tipc: Enabled bearer , priority 0 [ 288.277732][T15348] tipc: Resetting bearer [ 288.285448][T15348] tipc: Disabling bearer [ 288.301210][T15353] syzkaller0: entered promiscuous mode [ 288.301234][T15353] syzkaller0: entered allmulticast mode [ 288.333119][T15355] syzkaller0: entered promiscuous mode [ 288.335771][T15355] syzkaller0: entered allmulticast mode [ 288.381282][T15361] syzkaller0: entered promiscuous mode [ 288.381334][T15361] syzkaller0: entered allmulticast mode [ 288.393795][T15365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.397128][T15365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.417714][T15305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.547427][T15391] syzkaller0: entered promiscuous mode [ 288.548379][T15391] syzkaller0: entered allmulticast mode [ 288.557836][T15391] tipc: Enabled bearer , priority 0 [ 288.576074][T15389] tipc: Resetting bearer [ 288.582711][T15389] tipc: Disabling bearer [ 288.644630][T15395] syzkaller0: entered promiscuous mode [ 288.644660][T15395] syzkaller0: entered allmulticast mode [ 288.672255][T15397] syzkaller0: entered promiscuous mode [ 288.672281][T15397] syzkaller0: entered allmulticast mode [ 288.834818][T15406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.835019][T15406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.940953][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.941144][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.032470][T15428] syzkaller0: entered promiscuous mode [ 289.032494][T15428] syzkaller0: entered allmulticast mode [ 289.104070][T15432] syzkaller0: entered promiscuous mode [ 289.104094][T15432] syzkaller0: entered allmulticast mode [ 289.463578][T15460] syzkaller0: entered promiscuous mode [ 289.464588][T15460] syzkaller0: entered allmulticast mode [ 289.487476][T15464] syzkaller0: entered promiscuous mode [ 289.487499][T15464] syzkaller0: entered allmulticast mode [ 289.563534][T15466] syzkaller0: entered promiscuous mode [ 289.563561][T15466] syzkaller0: entered allmulticast mode [ 289.775597][T15477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.777239][T15477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.871608][T15490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.871815][T15490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.922476][T15493] tipc: Enabled bearer , priority 0 [ 289.922817][T15493] syzkaller0: entered promiscuous mode [ 289.922829][T15493] syzkaller0: entered allmulticast mode [ 289.926076][T15493] tipc: Resetting bearer [ 289.927185][T15492] tipc: Resetting bearer [ 289.932513][T15492] tipc: Disabling bearer [ 290.022763][T15495] syzkaller0: entered promiscuous mode [ 290.022803][T15495] syzkaller0: entered allmulticast mode [ 290.036306][ T7083] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 290.036343][ T7083] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 290.036564][ T7083] asix 1-1:0.188: probe with driver asix failed with error -71 [ 290.044406][ T7083] usb 1-1: USB disconnect, device number 18 [ 290.163029][T15501] syzkaller0: entered promiscuous mode [ 290.164030][T15501] syzkaller0: entered allmulticast mode [ 290.294215][T15510] netlink: 'syz.3.2769': attribute type 1 has an invalid length. [ 290.311727][T15510] bond4: entered promiscuous mode [ 290.313257][T15513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.314901][T15513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.319549][T15510] bond4: entered allmulticast mode [ 290.320837][T15510] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.344178][T15518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.346324][T15518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.394290][T15526] tipc: Enabled bearer , priority 0 [ 290.397401][T15526] syzkaller0: entered promiscuous mode [ 290.398604][T15526] syzkaller0: entered allmulticast mode [ 290.402373][T15526] tipc: Resetting bearer [ 290.404504][T15525] tipc: Resetting bearer [ 290.411150][T15525] tipc: Disabling bearer [ 290.418214][T15529] syzkaller0: entered promiscuous mode [ 290.418247][T15529] syzkaller0: entered allmulticast mode [ 290.580623][T15540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.582297][T15540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.585771][T15539] syzkaller0: entered promiscuous mode [ 290.586775][T15539] syzkaller0: entered allmulticast mode [ 290.595627][T15542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.597241][T15542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.729148][T15546] netlink: 'syz.0.2782': attribute type 1 has an invalid length. [ 290.734540][T15546] bond5: entered promiscuous mode [ 290.734565][T15546] bond5: entered allmulticast mode [ 290.734708][T15546] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.024783][T15583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.026992][T15583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.088231][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.089861][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.113976][T15592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.115326][T15592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.145189][ T6680] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 291.306281][ T6680] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.306320][ T6680] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 291.306328][ T6680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.307682][ T6680] usb 1-1: config 0 descriptor?? [ 291.313142][ T6680] pwc: Askey VC010 type 2 USB webcam detected. [ 291.632879][T15611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.633069][T15611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.712821][ T6680] pwc: recv_control_msg error -32 req 02 val 2b00 [ 291.713918][ T6680] pwc: recv_control_msg error -32 req 02 val 2700 [ 291.715498][ T6680] pwc: recv_control_msg error -32 req 02 val 2c00 [ 291.715864][ T6680] pwc: recv_control_msg error -32 req 04 val 1000 [ 291.718120][ T6680] pwc: recv_control_msg error -32 req 04 val 1300 [ 291.718832][ T6680] pwc: recv_control_msg error -32 req 04 val 1400 [ 291.719204][ T6680] pwc: recv_control_msg error -32 req 02 val 2000 [ 291.719996][ T6680] pwc: recv_control_msg error -32 req 02 val 2100 [ 291.722547][ T6680] pwc: recv_control_msg error -32 req 04 val 1500 [ 291.723075][ T6680] pwc: recv_control_msg error -32 req 02 val 2500 [ 291.724166][ T6680] pwc: recv_control_msg error -32 req 02 val 2400 [ 291.726698][ T6680] pwc: recv_control_msg error -32 req 02 val 2600 [ 291.727813][ T6680] pwc: recv_control_msg error -32 req 02 val 2900 [ 291.743751][T15623] overlayfs: missing 'lowerdir' [ 291.761948][T15625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.765827][T15625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.774485][T15627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.775301][T15627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.931374][ T6680] pwc: recv_control_msg error -71 req 04 val 1100 [ 291.931625][ T6680] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.934489][ T6680] pwc: Registered as video11. [ 291.937595][ T6680] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input56 [ 291.940427][ T6680] usb 1-1: USB disconnect, device number 19 [ 292.152227][T15633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.154394][T15633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.166057][T15636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.166222][T15636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.290238][T15638] syzkaller1: entered promiscuous mode [ 292.290275][T15638] syzkaller1: entered allmulticast mode [ 292.376359][T15653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.376532][T15653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.439321][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.444593][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.695208][ T7083] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 292.697799][T15672] tipc: Enabled bearer , priority 0 [ 292.698293][T15672] syzkaller0: entered promiscuous mode [ 292.698305][T15672] syzkaller0: entered allmulticast mode [ 292.701483][T15672] tipc: Resetting bearer [ 292.703505][ T6582] Bluetooth: hci1: unknown advertising packet type: 0x7c [ 292.703542][ T6582] Bluetooth: hci1: unknown advertising packet type: 0x7a [ 292.704853][T15671] tipc: Resetting bearer [ 292.714118][T15671] tipc: Disabling bearer [ 292.849443][ T7083] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 292.851251][ T7083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.852941][ T7083] usb 1-1: Product: syz [ 292.853783][ T7083] usb 1-1: Manufacturer: syz [ 292.854612][ T7083] usb 1-1: SerialNumber: syz [ 292.857383][ T7083] usb 1-1: config 0 descriptor?? [ 292.916503][T15695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.917252][T15695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.240735][ T6586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.244229][ T6586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.247666][ T6586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.249578][ T6586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.251360][ T6586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.273400][T15705] ip6_vti0 speed is unknown, defaulting to 1000 [ 293.287292][T15710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.287462][T15710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.363712][ T7083] airspy 1-1:0.0: Board ID: 00 [ 293.363739][ T7083] airspy 1-1:0.0: Firmware version: [ 293.502933][ T2705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.502973][ T2705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.539434][T15705] chnl_net:caif_netlink_parms(): no params data found [ 293.570401][ T2705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.572435][ T2705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.574061][T15718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.574620][T15718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.586225][T15705] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.587499][T15705] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.589066][T15705] bridge_slave_0: entered allmulticast mode [ 293.590713][T15705] bridge_slave_0: entered promiscuous mode [ 293.592744][T15705] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.594199][T15705] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.596802][T15705] bridge_slave_1: entered allmulticast mode [ 293.598452][T15705] bridge_slave_1: entered promiscuous mode [ 293.606496][T15705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.609184][T15705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.624434][ T2705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.626600][ T2705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.630296][T15705] team0: Port device team_slave_0 added [ 293.632245][T15705] team0: Port device team_slave_1 added [ 293.639111][T15705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.640305][T15705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.644522][T15705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.652865][ T2705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.654619][ T2705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.658009][T15705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.659317][T15705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.663358][T15705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.675874][T15705] hsr_slave_0: entered promiscuous mode [ 293.677452][T15705] hsr_slave_1: entered promiscuous mode [ 293.678742][T15705] debugfs: 'hsr0' already exists in 'hsr' [ 293.679672][T15705] Cannot create hsr debugfs directory [ 293.701879][T15720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.702071][T15720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.772817][ T2705] bridge_slave_1: left allmulticast mode [ 293.774446][ T2705] bridge_slave_1: left promiscuous mode [ 293.776638][ T2705] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.781007][ T2705] bridge_slave_0: left allmulticast mode [ 293.782206][ T2705] bridge_slave_0: left promiscuous mode [ 293.783316][ T2705] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.808363][T15722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.808544][T15722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.025608][ T2705] bond0 (unregistering): Released all slaves [ 294.066252][ T2705] bond1 (unregistering): Released all slaves [ 294.111296][ T2705] bond2 (unregistering): Released all slaves [ 294.153034][ T2705] bond3 (unregistering): Released all slaves [ 294.192633][ T2705] bond4 (unregistering): Released all slaves [ 294.282291][ T2705] tipc: Left network mode [ 294.345272][T15748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.346964][T15748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.374969][ T7083] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 294.378255][ T7083] airspy 1-1:0.0: Registered as swradio1 [ 294.379295][ T7083] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 294.382998][ T7083] usb 1-1: USB disconnect, device number 20 [ 294.471816][T15759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.477512][T15759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.512009][T15705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.526889][T15705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.529822][T15705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.532793][T15705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.571006][T15705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.592566][ T2705] hsr_slave_0: left promiscuous mode [ 294.593856][ T2705] hsr_slave_1: left promiscuous mode [ 294.605270][ T2705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.607187][ T2705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.612612][ T2705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.613827][ T2705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.620621][ T2705] veth1_macvtap: left promiscuous mode [ 294.621604][ T2705] veth0_macvtap: left promiscuous mode [ 294.622581][ T2705] veth1_vlan: left promiscuous mode [ 294.623855][ T2705] veth0_vlan: left promiscuous mode [ 294.807685][ T2705] team0 (unregistering): Port device team_slave_1 removed [ 294.821169][ T2705] team0 (unregistering): Port device team_slave_0 removed [ 294.983471][T15786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.983657][T15786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.303930][T15705] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.315367][ T4867] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.315415][ T4867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.315834][ T6586] Bluetooth: hci5: command tx timeout [ 295.326261][T15788] syzkaller0: entered promiscuous mode [ 295.327304][T15788] syzkaller0: entered allmulticast mode [ 295.333542][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.333581][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.341339][T15795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.341510][T15795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.577720][T15797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.582028][T15797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.991096][T15803] syzkaller0: entered promiscuous mode [ 295.991127][T15803] syzkaller0: entered allmulticast mode [ 296.001477][T15802] syzkaller0: entered promiscuous mode [ 296.001499][T15802] syzkaller0: entered allmulticast mode [ 296.010790][T15799] tipc: Enabled bearer , priority 0 [ 296.101510][T15815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.101681][T15815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.605334][T15798] tipc: Resetting bearer [ 296.614488][T15798] tipc: Disabling bearer [ 296.676652][T15705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.718352][T15705] veth0_vlan: entered promiscuous mode [ 296.723525][T15705] veth1_vlan: entered promiscuous mode [ 296.740171][T15705] veth0_macvtap: entered promiscuous mode [ 296.744195][T15705] veth1_macvtap: entered promiscuous mode [ 296.754875][T15705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.758528][T15705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.761516][ T5914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.761744][ T5914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.761786][ T5914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.761810][ T5914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.818385][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.818408][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.850859][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.852300][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.385182][ T6586] Bluetooth: hci5: command tx timeout [ 297.486706][T15844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.488853][T15844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.612535][T15848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.614701][T15848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.793564][T15850] pim6reg1: entered promiscuous mode [ 297.793596][T15850] pim6reg1: entered allmulticast mode [ 298.201050][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.201227][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.217811][T15862] syzkaller0: entered promiscuous mode [ 298.217846][T15862] syzkaller0: entered allmulticast mode [ 298.884460][T15869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.885954][T15869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.465115][ T6586] Bluetooth: hci5: command tx timeout [ 299.485205][ T6639] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 299.560480][T15881] binder: 15880:15881 tried to acquire reference to desc 0, got 1 instead [ 299.562116][T15881] binder: 15880:15881 got transaction with invalid offsets ptr [ 299.562154][T15881] binder: 15880:15881 transaction async to 15880:0 failed 186/29201/-14, code 0 size 0-1792 line 3428 [ 299.562346][ T6701] binder: undelivered TRANSACTION_ERROR: 29201 [ 299.636941][ T6639] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.637322][ T6639] usb 1-1: not running at top speed; connect to a high speed hub [ 299.638044][ T6639] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.638054][ T6639] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.640212][ T6639] usb 1-1: string descriptor 0 read error: -22 [ 299.640254][ T6639] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.640264][ T6639] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.645988][ T6639] usb 1-1: 0:2 : does not exist [ 299.942513][T15896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.944425][T15896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.474209][T15902] syzkaller0: entered promiscuous mode [ 300.475594][T15902] syzkaller0: entered allmulticast mode [ 300.519099][T15906] netlink: 'syz.1.2884': attribute type 2 has an invalid length. [ 300.519131][T15906] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2884'. [ 300.661760][ T6639] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 300.666476][ T6639] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 300.668858][ T6639] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 300.711080][ T6639] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 300.721698][ T6639] usb 1-1: USB disconnect, device number 21 [ 301.260148][ T6586] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 301.331403][T15933] syzkaller0: entered promiscuous mode [ 301.333111][T15933] syzkaller0: entered allmulticast mode [ 301.535112][ T7083] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 301.555597][ T6586] Bluetooth: hci5: command tx timeout [ 301.688338][ T7083] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.690196][ T7083] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 301.690215][ T7083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.695353][ T7083] usb 1-1: config 0 descriptor?? [ 301.705866][ T7083] pwc: Askey VC010 type 2 USB webcam detected. [ 301.721451][ T6582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.723155][ T6582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.723839][ T6582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.724615][ T6582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.724977][ T6582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.750506][T15954] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.756901][T15956] syzkaller0: entered promiscuous mode [ 301.756928][T15956] syzkaller0: entered allmulticast mode [ 301.841429][T15954] chnl_net:caif_netlink_parms(): no params data found [ 302.068850][T15954] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.074001][T15954] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.074083][T15954] bridge_slave_0: entered allmulticast mode [ 302.074547][T15954] bridge_slave_0: entered promiscuous mode [ 302.075621][T15954] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.075637][T15954] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.075684][T15954] bridge_slave_1: entered allmulticast mode [ 302.076090][T15954] bridge_slave_1: entered promiscuous mode [ 302.101105][ T7083] pwc: recv_control_msg error -32 req 02 val 2b00 [ 302.103351][ T7083] pwc: recv_control_msg error -32 req 02 val 2700 [ 302.106859][ T7083] pwc: recv_control_msg error -32 req 02 val 2c00 [ 302.109183][ T7083] pwc: recv_control_msg error -32 req 04 val 1000 [ 302.111649][ T7083] pwc: recv_control_msg error -32 req 04 val 1300 [ 302.111713][ T1565] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.111741][ T1565] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.120326][ T7083] pwc: recv_control_msg error -32 req 04 val 1400 [ 302.123170][ T7083] pwc: recv_control_msg error -32 req 02 val 2000 [ 302.125145][ T7083] pwc: recv_control_msg error -32 req 02 val 2100 [ 302.126621][ T7083] pwc: recv_control_msg error -32 req 04 val 1500 [ 302.142024][T15954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.143202][T15954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.176705][ T1565] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.176737][ T1565] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.186791][T15954] team0: Port device team_slave_0 added [ 302.188100][T15954] team0: Port device team_slave_1 added [ 302.194432][T15954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.194452][T15954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.194464][T15954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.196306][T15954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.196318][T15954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.196334][T15954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.207734][T15954] hsr_slave_0: entered promiscuous mode [ 302.208203][T15954] hsr_slave_1: entered promiscuous mode [ 302.208419][T15954] debugfs: 'hsr0' already exists in 'hsr' [ 302.208429][T15954] Cannot create hsr debugfs directory [ 302.247101][ T1565] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.247142][ T1565] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.298018][ T1565] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.298055][ T1565] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.329422][ T7083] pwc: recv_control_msg error -71 req 02 val 2400 [ 302.331524][ T7083] pwc: recv_control_msg error -71 req 02 val 2600 [ 302.333515][ T7083] pwc: recv_control_msg error -71 req 02 val 2900 [ 302.334950][ T7083] pwc: recv_control_msg error -71 req 02 val 2800 [ 302.336337][ T7083] pwc: recv_control_msg error -71 req 04 val 1100 [ 302.337828][ T7083] pwc: recv_control_msg error -71 req 04 val 1200 [ 302.341260][ T7083] pwc: Registered as video11. [ 302.343627][ T7083] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57 [ 302.347266][ T7083] usb 1-1: USB disconnect, device number 22 [ 302.349151][T15973] syzkaller0: entered promiscuous mode [ 302.349180][T15973] syzkaller0: entered allmulticast mode [ 302.438583][ T1565] bridge_slave_1: left allmulticast mode [ 302.438612][ T1565] bridge_slave_1: left promiscuous mode [ 302.438922][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.444015][ T1565] bridge_slave_0: left allmulticast mode [ 302.444190][ T1565] bridge_slave_0: left promiscuous mode [ 302.444348][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.576355][ T2705] smc: removing ib device syz2 [ 303.016173][ T1565] bond0 (unregistering): Released all slaves [ 303.073463][ T1565] bond1 (unregistering): Released all slaves [ 303.134891][ T1565] bond2 (unregistering): Released all slaves [ 303.189840][ T1565] bond3 (unregistering): Released all slaves [ 303.256556][ T1565] bond4 (unregistering): Released all slaves [ 303.320676][ T1565] bond5 (unregistering): Released all slaves [ 303.371355][ T1565] bond6 (unregistering): Released all slaves [ 303.469000][ T1565] tipc: Left network mode [ 303.479537][T16010] syzkaller0: entered promiscuous mode [ 303.480501][T16010] syzkaller0: entered allmulticast mode [ 303.490126][T16013] binder: 16012:16013 tried to acquire reference to desc 0, got 1 instead [ 303.491764][T16013] binder: 16012:16013 got transaction with out-of-order buffer fixup [ 303.493090][T16013] binder: 16013:16012 failed to fixup parent [ 303.494113][T16013] binder: 16012:16013 transaction call to 16012:0 failed 191/29201/-22, code 0 size 112-24 line 3698 [ 303.506404][ T8536] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.731533][T16049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.734434][T16049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.785137][ T6582] Bluetooth: hci3: command tx timeout [ 303.815463][ T1565] hsr_slave_0: left promiscuous mode [ 303.816736][ T1565] hsr_slave_1: left promiscuous mode [ 303.832380][ T1565] veth1_macvtap: left promiscuous mode [ 303.833358][ T1565] veth0_macvtap: left promiscuous mode [ 303.834287][ T1565] veth1_vlan: left promiscuous mode [ 303.835266][ T1565] veth0_vlan: left promiscuous mode [ 304.050192][ T1565] team0 (unregistering): Port device team_slave_1 removed [ 304.064037][ T1565] team0 (unregistering): Port device team_slave_0 removed [ 304.203352][T16046] tipc: Cannot configure node identity twice [ 304.217143][T16069] syzkaller0: entered promiscuous mode [ 304.217168][T16069] syzkaller0: entered allmulticast mode [ 304.651831][T16097] fuse: Bad value for 'fd' [ 305.229058][T15954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.233410][T15954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.244328][T15954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.249647][T15954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.265702][ T6586] Bluetooth: Unexpected continuation frame (len 67) [ 305.293993][T15954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.303891][T15954] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.314182][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.314259][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.322371][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.322419][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.387670][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.389634][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.430128][T15954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.444104][T15954] veth0_vlan: entered promiscuous mode [ 305.446958][T15954] veth1_vlan: entered promiscuous mode [ 305.455143][ T8536] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 305.458695][T15954] veth0_macvtap: entered promiscuous mode [ 305.460794][T15954] veth1_macvtap: entered promiscuous mode [ 305.466161][T15954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.470392][T15954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.479620][ T4472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.479660][ T4472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.479674][ T4472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.479686][ T4472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.518415][ T4867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.520142][ T4867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.530772][ T4867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.532260][ T4867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.580654][T16128] tipc: Started in network mode [ 305.580685][T16128] tipc: Node identity 5e3ecdfc136e, cluster identity 4711 [ 305.580733][T16128] tipc: Enabled bearer , priority 0 [ 305.589051][T16128] syzkaller0: entered promiscuous mode [ 305.589080][T16128] syzkaller0: entered allmulticast mode [ 305.589808][T16128] tipc: Resetting bearer [ 305.591928][T16127] tipc: Resetting bearer [ 305.608238][ T8536] usb 1-1: Using ep0 maxpacket: 32 [ 305.609305][ T8536] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 305.609419][ T8536] usb 1-1: config 0 has no interface number 0 [ 305.609435][ T8536] usb 1-1: config 0 interface 182 has no altsetting 0 [ 305.616356][ T8536] usb 1-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 305.616382][ T8536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.616505][ T8536] usb 1-1: Product: syz [ 305.616518][ T8536] usb 1-1: Manufacturer: syz [ 305.616528][ T8536] usb 1-1: SerialNumber: syz [ 305.624459][ T8536] usb 1-1: config 0 descriptor?? [ 305.625636][ T8536] hub 1-1:0.182: bad descriptor, ignoring hub [ 305.625649][ T8536] hub 1-1:0.182: probe with driver hub failed with error -5 [ 305.747183][T16126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.747717][T16126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.843533][ T8536] kaweth 1-1:0.182: Firmware present in device. [ 305.865760][ T6586] Bluetooth: hci3: command tx timeout [ 306.050575][ T8536] kaweth 1-1:0.182: Statistics collection: 0 [ 306.050614][ T8536] kaweth 1-1:0.182: Multicast filter limit: 0 [ 306.050628][ T8536] kaweth 1-1:0.182: MTU: 0 [ 306.050635][ T8536] kaweth 1-1:0.182: Read MAC address 00:00:00:00:00:00 [ 306.100443][T16130] [ 306.100860][T16130] ===================================================== [ 306.101920][T16130] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 306.103002][T16130] syzkaller #0 Tainted: G L [ 306.103823][T16130] ----------------------------------------------------- [ 306.104878][T16130] syz.4.2949/16130 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 306.106090][T16130] ffff800097626150 (&p->sequence){+.-.}-{0:0}, at: __fprop_add_percpu_max+0x130/0x1f4 [ 306.107431][T16130] [ 306.107431][T16130] and this task is already holding: [ 306.108552][T16130] ffff0000f43fc140 (&xa->xa_lock#10){-.-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8 [ 306.110070][T16130] which would create a new lock dependency: [ 306.110982][T16130] (&xa->xa_lock#10){-.-.}-{3:3} -> (&p->sequence){+.-.}-{0:0} [ 306.112159][T16130] [ 306.112159][T16130] but this new dependency connects a HARDIRQ-irq-safe lock: [ 306.113576][T16130] (&xa->xa_lock#10){-.-.}-{3:3} [ 306.113610][T16130] [ 306.113610][T16130] ... which became HARDIRQ-irq-safe at: [ 306.115547][T16130] lock_acquire+0x140/0x2e0 [ 306.116268][T16130] _raw_spin_lock_irqsave+0x5c/0x7c [ 306.117028][T16130] __folio_end_writeback+0x10c/0x6f8 [ 306.117849][T16130] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 306.118842][T16130] folio_end_writeback+0xd8/0x248 [ 306.119620][T16130] end_buffer_async_write+0x20c/0x350 [ 306.120459][T16130] end_bio_bh_io_sync+0xb0/0x184 [ 306.121201][T16130] bio_endio+0x8d4/0x910 [ 306.121815][T16130] blk_mq_end_request_batch+0x49c/0x105c [ 306.122679][T16130] nvme_irq+0x1ec/0x240 [ 306.123374][T16130] __handle_irq_event_percpu+0x20c/0x8e4 [ 306.124199][T16130] handle_irq_event+0x9c/0x1d0 [ 306.124904][T16130] handle_fasteoi_irq+0x328/0x8d8 [ 306.125668][T16130] generic_handle_domain_irq+0xe0/0x140 [ 306.126483][T16130] gic_handle_irq+0x6c/0x18c [ 306.127157][T16130] call_on_irq_stack+0x30/0x48 [ 306.127971][T16130] do_interrupt_handler+0xd4/0x138 [ 306.128744][T16130] el1_interrupt+0x3c/0x60 [ 306.129389][T16130] el1h_64_irq_handler+0x18/0x24 [ 306.130095][T16130] el1h_64_irq+0x6c/0x70 [ 306.130698][T16130] exit_to_user_mode_loop+0x6c/0x18c [ 306.131487][T16130] el0_interrupt+0x18c/0x2bc [ 306.132147][T16130] __el0_irq_handler_common+0x18/0x24 [ 306.132965][T16130] el0t_64_irq_handler+0x10/0x1c [ 306.133706][T16130] el0t_64_irq+0x198/0x19c [ 306.134384][T16130] [ 306.134384][T16130] to a HARDIRQ-irq-unsafe lock: [ 306.135423][T16130] (&p->sequence){+.-.}-{0:0} [ 306.135445][T16130] [ 306.135445][T16130] ... which became HARDIRQ-irq-unsafe at: [ 306.137188][T16130] ... [ 306.137195][T16130] lock_acquire+0x140/0x2e0 [ 306.138220][T16130] fprop_new_period+0x3b8/0x718 [ 306.138903][T16130] writeout_period+0x94/0x11c [ 306.139627][T16130] call_timer_fn+0x19c/0x814 [ 306.140282][T16130] __run_timer_base+0x51c/0x76c [ 306.141052][T16130] run_timer_softirq+0x11c/0x194 [ 306.141806][T16130] handle_softirqs+0x31c/0xc88 [ 306.142535][T16130] __do_softirq+0x14/0x20 [ 306.143194][T16130] ____do_softirq+0x14/0x20 [ 306.143819][T16130] call_on_irq_stack+0x30/0x48 [ 306.144527][T16130] do_softirq_own_stack+0x20/0x2c [ 306.145247][T16130] __irq_exit_rcu+0x1b0/0x478 [ 306.145945][T16130] irq_exit_rcu+0x14/0x84 [ 306.146569][T16130] el1_interrupt+0x40/0x60 [ 306.147172][T16130] el1h_64_irq_handler+0x18/0x24 [ 306.147888][T16130] el1h_64_irq+0x6c/0x70 [ 306.148550][T16130] _raw_spin_unlock_irqrestore+0x44/0x98 [ 306.149334][T16130] debug_check_no_obj_freed+0x454/0x470 [ 306.150161][T16130] __free_frozen_pages+0x4b8/0xcb0 [ 306.150899][T16130] free_frozen_pages+0x14/0x20 [ 306.151605][T16130] __free_slab+0x100/0x1a4 [ 306.152236][T16130] free_slab+0x28/0x160 [ 306.152837][T16130] __put_partials+0x188/0x1f4 [ 306.153572][T16130] put_cpu_partial+0x1d0/0x244 [ 306.154244][T16130] __slab_free+0x1dc/0x23c [ 306.154891][T16130] ___cache_free+0x150/0x170 [ 306.155584][T16130] qlink_free+0x48/0x94 [ 306.156230][T16130] qlist_free_all+0x44/0xb8 [ 306.156897][T16130] kasan_quarantine_reduce+0x118/0x124 [ 306.157677][T16130] __kasan_slab_alloc+0x2c/0x88 [ 306.158368][T16130] kmem_cache_alloc_noprof+0x344/0x680 [ 306.159139][T16130] getname_flags+0xb4/0x470 [ 306.159800][T16130] vfs_fstatat+0x48/0x150 [ 306.160464][T16130] __arm64_sys_newfstatat+0x100/0x180 [ 306.161250][T16130] invoke_syscall+0x98/0x254 [ 306.161949][T16130] el0_svc_common+0xe8/0x23c [ 306.162654][T16130] do_el0_svc+0x48/0x58 [ 306.163300][T16130] el0_svc+0x5c/0x26c [ 306.163877][T16130] el0t_64_sync_handler+0x84/0x12c [ 306.164650][T16130] el0t_64_sync+0x198/0x19c [ 306.165354][T16130] [ 306.165354][T16130] other info that might help us debug this: [ 306.165354][T16130] [ 306.166847][T16130] Possible interrupt unsafe locking scenario: [ 306.166847][T16130] [ 306.168030][T16130] CPU0 CPU1 [ 306.168771][T16130] ---- ---- [ 306.169541][T16130] lock(&p->sequence); [ 306.170097][T16130] local_irq_disable(); [ 306.171072][T16130] lock(&xa->xa_lock#10); [ 306.172069][T16130] lock(&p->sequence); [ 306.173056][T16130] [ 306.173548][T16130] lock(&xa->xa_lock#10); [ 306.174207][T16130] [ 306.174207][T16130] *** DEADLOCK *** [ 306.174207][T16130] [ 306.175332][T16130] 5 locks held by syz.4.2949/16130: [ 306.176068][T16130] #0: ffff0000f83a0d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1fc/0x2a0 [ 306.177321][T16130] #1: ffff0000c7dc4420 (sb_writers#21){.+.+}-{0:0}, at: vfs_writev+0x21c/0x7cc [ 306.178752][T16130] #2: ffff0000f43fc048 (&sb->s_type->i_mutex_key#39){+.+.}-{4:4}, at: fuse_fsync+0xf0/0x2b8 [ 306.180193][T16130] #3: ffff0000f43fc538 (&fi->lock){+.+.}-{3:3}, at: fuse_iomap_writeback_range+0x674/0x149c [ 306.181742][T16130] #4: ffff0000f43fc140 (&xa->xa_lock#10){-.-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8 [ 306.183356][T16130] [ 306.183356][T16130] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 306.184820][T16130] -> (&xa->xa_lock#10){-.-.}-{3:3} { [ 306.185640][T16130] IN-HARDIRQ-W at: [ 306.186275][T16130] lock_acquire+0x140/0x2e0 [ 306.187192][T16130] _raw_spin_lock_irqsave+0x5c/0x7c [ 306.188180][T16130] __folio_end_writeback+0x10c/0x6f8 [ 306.189204][T16130] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 306.190366][T16130] folio_end_writeback+0xd8/0x248 [ 306.191295][T16130] end_buffer_async_write+0x20c/0x350 [ 306.192349][T16130] end_bio_bh_io_sync+0xb0/0x184 [ 306.193308][T16130] bio_endio+0x8d4/0x910 [ 306.194132][T16130] blk_mq_end_request_batch+0x49c/0x105c [ 306.195161][T16130] nvme_irq+0x1ec/0x240 [ 306.196114][T16130] __handle_irq_event_percpu+0x20c/0x8e4 [ 306.197207][T16130] handle_irq_event+0x9c/0x1d0 [ 306.198184][T16130] handle_fasteoi_irq+0x328/0x8d8 [ 306.199248][T16130] generic_handle_domain_irq+0xe0/0x140 [ 306.200305][T16130] gic_handle_irq+0x6c/0x18c [ 306.201240][T16130] call_on_irq_stack+0x30/0x48 [ 306.202141][T16130] do_interrupt_handler+0xd4/0x138 [ 306.203199][T16130] el1_interrupt+0x3c/0x60 [ 306.204087][T16130] el1h_64_irq_handler+0x18/0x24 [ 306.205096][T16130] el1h_64_irq+0x6c/0x70 [ 306.205915][T16130] exit_to_user_mode_loop+0x6c/0x18c [ 306.206926][T16130] el0_interrupt+0x18c/0x2bc [ 306.207863][T16130] __el0_irq_handler_common+0x18/0x24 [ 306.208886][T16130] el0t_64_irq_handler+0x10/0x1c [ 306.209825][T16130] el0t_64_irq+0x198/0x19c [ 306.210811][T16130] IN-SOFTIRQ-W at: [ 306.211421][T16130] lock_acquire+0x140/0x2e0 [ 306.212357][T16130] _raw_spin_lock_irqsave+0x5c/0x7c [ 306.213340][T16130] __folio_end_writeback+0x10c/0x6f8 [ 306.214302][T16130] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 306.215434][T16130] folio_end_writeback+0xd8/0x248 [ 306.216450][T16130] ext4_finish_bio+0x570/0x8a4 [ 306.217382][T16130] ext4_end_bio+0x360/0x610 [ 306.218302][T16130] bio_endio+0x8d4/0x910 [ 306.219169][T16130] blk_update_request+0x474/0xba8 [ 306.220115][T16130] blk_mq_end_request+0x54/0x88 [ 306.221113][T16130] lo_complete_rq+0x124/0x274 [ 306.222000][T16130] blk_done_softirq+0x11c/0x168 [ 306.222999][T16130] handle_softirqs+0x31c/0xc88 [ 306.223948][T16130] run_ksoftirqd+0x70/0xc0 [ 306.224866][T16130] smpboot_thread_fn+0x4d8/0x9cc [ 306.225793][T16130] kthread+0x5fc/0x75c [ 306.226583][T16130] ret_from_fork+0x10/0x20 [ 306.227382][T16130] INITIAL USE at: [ 306.227921][T16130] lock_acquire+0x140/0x2e0 [ 306.228820][T16130] _raw_spin_lock_irq+0x58/0x70 [ 306.229678][T16130] shmem_add_to_page_cache+0x564/0xa24 [ 306.230619][T16130] shmem_alloc_and_add_folio+0x758/0x10c4 [ 306.231621][T16130] shmem_get_folio_gfp+0x4d4/0x159c [ 306.232573][T16130] shmem_read_folio_gfp+0x8c/0xf0 [ 306.233554][T16130] drm_gem_get_pages+0x1cc/0x7c0 [ 306.234522][T16130] drm_gem_shmem_get_pages_locked+0x1d4/0x364 [ 306.235689][T16130] drm_gem_shmem_pin_locked+0x1f8/0x410 [ 306.236757][T16130] drm_gem_shmem_vmap_locked+0x3cc/0x658 [ 306.237775][T16130] drm_gem_shmem_object_vmap+0x28/0x38 [ 306.238763][T16130] drm_gem_vmap+0x104/0x1d8 [ 306.239591][T16130] drm_client_buffer_vmap+0x68/0xb0 [ 306.240556][T16130] drm_fbdev_shmem_driver_fbdev_probe+0x1f4/0x700 [ 306.241727][T16130] __drm_fb_helper_initial_config_and_unlock+0x108c/0x1728 [ 306.243025][T16130] drm_fb_helper_initial_config+0x3c/0x58 [ 306.244159][T16130] drm_fbdev_client_hotplug+0x154/0x22c [ 306.245158][T16130] drm_client_register+0x13c/0x1d4 [ 306.246077][T16130] drm_fbdev_client_setup+0x194/0x3d0 [ 306.247156][T16130] drm_client_setup+0x114/0x228 [ 306.248128][T16130] vkms_create+0x370/0x420 [ 306.249067][T16130] vkms_init+0x64/0x9c [ 306.249871][T16130] do_one_initcall+0x248/0x9b4 [ 306.250806][T16130] do_initcall_level+0x128/0x1c4 [ 306.251754][T16130] do_initcalls+0x70/0xd0 [ 306.252705][T16130] do_basic_setup+0x78/0x8c [ 306.253624][T16130] kernel_init_freeable+0x268/0x39c [ 306.254598][T16130] kernel_init+0x24/0x1dc [ 306.255443][T16130] ret_from_fork+0x10/0x20 [ 306.256340][T16130] } [ 306.256673][T16130] ... key at: [] xa_init_flags.__key+0x0/0x20 [ 306.257858][T16130] [ 306.257858][T16130] the dependencies between the lock to be acquired [ 306.257869][T16130] and HARDIRQ-irq-unsafe lock: [ 306.259737][T16130] -> (&p->sequence){+.-.}-{0:0} { [ 306.260522][T16130] HARDIRQ-ON-W at: [ 306.261079][T16130] lock_acquire+0x140/0x2e0 [ 306.262088][T16130] fprop_new_period+0x3b8/0x718 [ 306.263037][T16130] writeout_period+0x94/0x11c [ 306.263951][T16130] call_timer_fn+0x19c/0x814 [ 306.264896][T16130] __run_timer_base+0x51c/0x76c [ 306.265886][T16130] run_timer_softirq+0x11c/0x194 [ 306.266850][T16130] handle_softirqs+0x31c/0xc88 [ 306.267799][T16130] __do_softirq+0x14/0x20 [ 306.268666][T16130] ____do_softirq+0x14/0x20 [ 306.269591][T16130] call_on_irq_stack+0x30/0x48 [ 306.270513][T16130] do_softirq_own_stack+0x20/0x2c [ 306.271506][T16130] __irq_exit_rcu+0x1b0/0x478 [ 306.272389][T16130] irq_exit_rcu+0x14/0x84 [ 306.273219][T16130] el1_interrupt+0x40/0x60 [ 306.274160][T16130] el1h_64_irq_handler+0x18/0x24 [ 306.275127][T16130] el1h_64_irq+0x6c/0x70 [ 306.275859][T16130] _raw_spin_unlock_irqrestore+0x44/0x98 [ 306.276931][T16130] debug_check_no_obj_freed+0x454/0x470 [ 306.278004][T16130] __free_frozen_pages+0x4b8/0xcb0 [ 306.278908][T16130] free_frozen_pages+0x14/0x20 [ 306.279836][T16130] __free_slab+0x100/0x1a4 [ 306.280733][T16130] free_slab+0x28/0x160 [ 306.281625][T16130] __put_partials+0x188/0x1f4 [ 306.282535][T16130] put_cpu_partial+0x1d0/0x244 [ 306.283512][T16130] __slab_free+0x1dc/0x23c [ 306.284421][T16130] ___cache_free+0x150/0x170 [ 306.285355][T16130] qlink_free+0x48/0x94 [ 306.286256][T16130] qlist_free_all+0x44/0xb8 [ 306.287164][T16130] kasan_quarantine_reduce+0x118/0x124 [ 306.288201][T16130] __kasan_slab_alloc+0x2c/0x88 [ 306.289098][T16130] kmem_cache_alloc_noprof+0x344/0x680 [ 306.290172][T16130] getname_flags+0xb4/0x470 [ 306.291015][T16130] vfs_fstatat+0x48/0x150 [ 306.291856][T16130] __arm64_sys_newfstatat+0x100/0x180 [ 306.292854][T16130] invoke_syscall+0x98/0x254 [ 306.293771][T16130] el0_svc_common+0xe8/0x23c [ 306.294703][T16130] do_el0_svc+0x48/0x58 [ 306.295575][T16130] el0_svc+0x5c/0x26c [ 306.296378][T16130] el0t_64_sync_handler+0x84/0x12c [ 306.297386][T16130] el0t_64_sync+0x198/0x19c [ 306.298339][T16130] IN-SOFTIRQ-W at: [ 306.298953][T16130] lock_acquire+0x140/0x2e0 [ 306.299852][T16130] fprop_new_period+0x3b8/0x718 [ 306.300847][T16130] writeout_period+0x94/0x11c [ 306.301734][T16130] call_timer_fn+0x19c/0x814 [ 306.302687][T16130] __run_timer_base+0x51c/0x76c [ 306.303596][T16130] run_timer_softirq+0x11c/0x194 [ 306.304607][T16130] handle_softirqs+0x31c/0xc88 [ 306.305557][T16130] __do_softirq+0x14/0x20 [ 306.306419][T16130] ____do_softirq+0x14/0x20 [ 306.307291][T16130] call_on_irq_stack+0x30/0x48 [ 306.308246][T16130] do_softirq_own_stack+0x20/0x2c [ 306.309189][T16130] __irq_exit_rcu+0x1b0/0x478 [ 306.310112][T16130] irq_exit_rcu+0x14/0x84 [ 306.310996][T16130] el1_interrupt+0x40/0x60 [ 306.311882][T16130] el1h_64_irq_handler+0x18/0x24 [ 306.312846][T16130] el1h_64_irq+0x6c/0x70 [ 306.313688][T16130] _raw_spin_unlock_irqrestore+0x44/0x98 [ 306.314737][T16130] debug_check_no_obj_freed+0x454/0x470 [ 306.315797][T16130] __free_frozen_pages+0x4b8/0xcb0 [ 306.316685][T16130] free_frozen_pages+0x14/0x20 [ 306.317615][T16130] __free_slab+0x100/0x1a4 [ 306.318502][T16130] free_slab+0x28/0x160 [ 306.319334][T16130] __put_partials+0x188/0x1f4 [ 306.320263][T16130] put_cpu_partial+0x1d0/0x244 [ 306.321182][T16130] __slab_free+0x1dc/0x23c [ 306.322081][T16130] ___cache_free+0x150/0x170 [ 306.323032][T16130] qlink_free+0x48/0x94 [ 306.323949][T16130] qlist_free_all+0x44/0xb8 [ 306.324894][T16130] kasan_quarantine_reduce+0x118/0x124 [ 306.326019][T16130] __kasan_slab_alloc+0x2c/0x88 [ 306.326965][T16130] kmem_cache_alloc_noprof+0x344/0x680 [ 306.328006][T16130] getname_flags+0xb4/0x470 [ 306.328845][T16130] vfs_fstatat+0x48/0x150 [ 306.329697][T16130] __arm64_sys_newfstatat+0x100/0x180 [ 306.330750][T16130] invoke_syscall+0x98/0x254 [ 306.331678][T16130] el0_svc_common+0xe8/0x23c [ 306.332606][T16130] do_el0_svc+0x48/0x58 [ 306.333407][T16130] el0_svc+0x5c/0x26c [ 306.334249][T16130] el0t_64_sync_handler+0x84/0x12c [ 306.335200][T16130] el0t_64_sync+0x198/0x19c [ 306.336061][T16130] INITIAL USE at: [ 306.336610][T16130] lock_acquire+0x140/0x2e0 [ 306.337485][T16130] fprop_new_period+0x3b8/0x718 [ 306.338515][T16130] writeout_period+0x94/0x11c [ 306.339417][T16130] call_timer_fn+0x19c/0x814 [ 306.340343][T16130] __run_timer_base+0x51c/0x76c [ 306.341280][T16130] run_timer_softirq+0x11c/0x194 [ 306.342281][T16130] handle_softirqs+0x31c/0xc88 [ 306.343245][T16130] __do_softirq+0x14/0x20 [ 306.344129][T16130] ____do_softirq+0x14/0x20 [ 306.345045][T16130] call_on_irq_stack+0x30/0x48 [ 306.345998][T16130] do_softirq_own_stack+0x20/0x2c [ 306.347012][T16130] __irq_exit_rcu+0x1b0/0x478 [ 306.347993][T16130] irq_exit_rcu+0x14/0x84 [ 306.348902][T16130] el1_interrupt+0x40/0x60 [ 306.349768][T16130] el1h_64_irq_handler+0x18/0x24 [ 306.350725][T16130] el1h_64_irq+0x6c/0x70 [ 306.351616][T16130] _raw_spin_unlock_irqrestore+0x44/0x98 [ 306.352718][T16130] debug_check_no_obj_freed+0x454/0x470 [ 306.353788][T16130] __free_frozen_pages+0x4b8/0xcb0 [ 306.354851][T16130] free_frozen_pages+0x14/0x20 [ 306.355731][T16130] __free_slab+0x100/0x1a4 [ 306.356620][T16130] free_slab+0x28/0x160 [ 306.357382][T16130] __put_partials+0x188/0x1f4 [ 306.358253][T16130] put_cpu_partial+0x1d0/0x244 [ 306.359191][T16130] __slab_free+0x1dc/0x23c [ 306.360068][T16130] ___cache_free+0x150/0x170 [ 306.360954][T16130] qlink_free+0x48/0x94 [ 306.361862][T16130] qlist_free_all+0x44/0xb8 [ 306.362725][T16130] kasan_quarantine_reduce+0x118/0x124 [ 306.363760][T16130] __kasan_slab_alloc+0x2c/0x88 [ 306.364751][T16130] kmem_cache_alloc_noprof+0x344/0x680 [ 306.365857][T16130] getname_flags+0xb4/0x470 [ 306.366709][T16130] vfs_fstatat+0x48/0x150 [ 306.367611][T16130] __arm64_sys_newfstatat+0x100/0x180 [ 306.368688][T16130] invoke_syscall+0x98/0x254 [ 306.369566][T16130] el0_svc_common+0xe8/0x23c [ 306.370395][T16130] do_el0_svc+0x48/0x58 [ 306.371209][T16130] el0_svc+0x5c/0x26c [ 306.372077][T16130] el0t_64_sync_handler+0x84/0x12c [ 306.373045][T16130] el0t_64_sync+0x198/0x19c [ 306.373956][T16130] INITIAL READ USE at: [ 306.374623][T16130] lock_acquire+0x140/0x2e0 [ 306.375552][T16130] fprop_fraction_percpu+0xac/0x270 [ 306.376647][T16130] __wb_calc_thresh+0xfc/0x3b0 [ 306.377698][T16130] domain_over_bg_thresh+0xb8/0x1f0 [ 306.378746][T16130] wb_over_bg_thresh+0xf8/0x17c [ 306.379797][T16130] wb_workfn+0xa30/0xdc0 [ 306.380751][T16130] process_one_work+0x7c0/0x1558 [ 306.381807][T16130] worker_thread+0x958/0xed8 [ 306.382795][T16130] kthread+0x5fc/0x75c [ 306.383642][T16130] ret_from_fork+0x10/0x20 [ 306.384584][T16130] } [ 306.384985][T16130] ... key at: [] fprop_global_init.__key.1+0x0/0x20 [ 306.386371][T16130] ... acquired at: [ 306.386921][T16130] fprop_fraction_percpu+0xf0/0x270 [ 306.387694][T16130] __fprop_add_percpu_max+0x130/0x1f4 [ 306.388508][T16130] __wb_writeout_add+0xbc/0x27c [ 306.389286][T16130] __folio_end_writeback+0x380/0x6f8 [ 306.390080][T16130] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 306.391044][T16130] folio_end_writeback+0xd8/0x248 [ 306.391777][T16130] iomap_finish_folio_write+0x1c0/0x2a4 [ 306.392629][T16130] fuse_flush_writepages+0x578/0x788 [ 306.393475][T16130] fuse_iomap_writeback_range+0x744/0x149c [ 306.394386][T16130] iomap_writeback_folio+0x1064/0x1fc4 [ 306.395240][T16130] iomap_writepages+0x128/0x25c [ 306.396003][T16130] fuse_writepages+0x208/0x2bc [ 306.396785][T16130] do_writepages+0x270/0x468 [ 306.397522][T16130] file_write_and_wait_range+0x1d0/0x2c4 [ 306.398414][T16130] fuse_fsync+0x100/0x2b8 [ 306.399044][T16130] vfs_fsync_range+0x160/0x19c [ 306.399782][T16130] fuse_file_write_iter+0xa20/0xb88 [ 306.400595][T16130] do_iter_readv_writev+0x4bc/0x720 [ 306.401433][T16130] vfs_writev+0x29c/0x7cc [ 306.402112][T16130] do_writev+0x128/0x290 [ 306.402731][T16130] __arm64_sys_writev+0x80/0x94 [ 306.403476][T16130] invoke_syscall+0x98/0x254 [ 306.404181][T16130] el0_svc_common+0xe8/0x23c [ 306.404884][T16130] do_el0_svc+0x48/0x58 [ 306.405509][T16130] el0_svc+0x5c/0x26c [ 306.406132][T16130] el0t_64_sync_handler+0x84/0x12c [ 306.406969][T16130] el0t_64_sync+0x198/0x19c [ 306.407630][T16130] [ 306.407964][T16130] [ 306.407964][T16130] stack backtrace: [ 306.408782][T16130] CPU: 0 UID: 0 PID: 16130 Comm: syz.4.2949 Tainted: G L syzkaller #0 PREEMPT [ 306.410359][T16130] Tainted: [L]=SOFTLOCKUP [ 306.410988][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 306.412411][T16130] Call trace: [ 306.412919][T16130] show_stack+0x2c/0x3c (C) [ 306.413589][T16130] __dump_stack+0x30/0x40 [ 306.414220][T16130] dump_stack_lvl+0xd8/0x12c [ 306.414891][T16130] dump_stack+0x1c/0x28 [ 306.415503][T16130] __lock_acquire+0x3058/0x30a4 [ 306.416208][T16130] lock_acquire+0x140/0x2e0 [ 306.416856][T16130] fprop_fraction_percpu+0xf0/0x270 [ 306.417636][T16130] __fprop_add_percpu_max+0x130/0x1f4 [ 306.418442][T16130] __wb_writeout_add+0xbc/0x27c [ 306.419171][T16130] __folio_end_writeback+0x380/0x6f8 [ 306.420029][T16130] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 306.420939][T16130] folio_end_writeback+0xd8/0x248 [ 306.421703][T16130] iomap_finish_folio_write+0x1c0/0x2a4 [ 306.422521][T16130] fuse_flush_writepages+0x578/0x788 [ 306.423324][T16130] fuse_iomap_writeback_range+0x744/0x149c [ 306.424207][T16130] iomap_writeback_folio+0x1064/0x1fc4 [ 306.425013][T16130] iomap_writepages+0x128/0x25c [ 306.425779][T16130] fuse_writepages+0x208/0x2bc [ 306.426491][T16130] do_writepages+0x270/0x468 [ 306.427198][T16130] file_write_and_wait_range+0x1d0/0x2c4 [ 306.428106][T16130] fuse_fsync+0x100/0x2b8 [ 306.428754][T16130] vfs_fsync_range+0x160/0x19c [ 306.429490][T16130] fuse_file_write_iter+0xa20/0xb88 [ 306.430230][T16130] do_iter_readv_writev+0x4bc/0x720 [ 306.431058][T16130] vfs_writev+0x29c/0x7cc [ 306.431701][T16130] do_writev+0x128/0x290 [ 306.432363][T16130] __arm64_sys_writev+0x80/0x94 [ 306.433096][T16130] invoke_syscall+0x98/0x254 [ 306.433816][T16130] el0_svc_common+0xe8/0x23c [ 306.434523][T16130] do_el0_svc+0x48/0x58 [ 306.435169][T16130] el0_svc+0x5c/0x26c [ 306.435759][T16130] el0t_64_sync_handler+0x84/0x12c [ 306.436506][T16130] el0t_64_sync+0x198/0x19c [ 306.505399][ T6582] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 306.505910][ T6586] Bluetooth: hci1: command 0x1003 tx timeout [ 306.596860][T16127] tipc: Disabling bearer [ 306.599564][ T6701] tipc: Node number set to 1297141244 [ 306.647878][ T8536] kaweth 1-1:0.182: Error setting SOFS wait [ 306.647961][ T8536] kaweth 1-1:0.182: probe with driver kaweth failed with error -5 [ 306.665443][ T8536] usb 1-1: USB disconnect, device number 23 [ 307.945065][ T6582] Bluetooth: hci3: command tx timeout [ 310.025073][ T6582] Bluetooth: hci3: command tx timeout [ 310.275358][ T2467] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.275394][ T2467] ieee802154 phy1 wpan1: encryption failed: -22