last executing test programs: 25m43.617892948s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) r6 = openat$cgroup(r5, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004000)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3004081, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000f80)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0xcfe, 0x6) 25m40.361892991s ago: executing program 2 (id=17): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) renameat2(r1, 0x0, r1, &(0x7f0000003200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 25m38.657814581s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) 25m37.08575672s ago: executing program 2 (id=22): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) accept4(r1, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)={0x20, 0x13, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x54, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xe8}]}, 0x20}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x14, &(0x7f0000000400)={0x17, 0xffffffff, 0x1}) syz_open_dev$usbfs(0x0, 0xfffffffffffff459, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffde4, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 25m35.229713349s ago: executing program 2 (id=23): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x4}, 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x73) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) setreuid(0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 25m26.575101451s ago: executing program 1 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@nop]}}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffb) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0xffff, 0x0, 0x0, {[@nop, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x1, @loopback, 0xd9}]}}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x841) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48045}, 0x0) 25m26.340855043s ago: executing program 2 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 25m12.415431538s ago: executing program 1 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="021304000032b1aed2f2a815aacbeb000000080000090100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f0000000100)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x2) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x7, 0x810000, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="4e7417f7f0afaa93ec1feb61e6ecf74becf5b64c4498ace47170e3439f9db3344aceab3d192ddef8789f7f826a9732df1f1165a989ed666ec2a96eb78b40d1fdd5d53d8c6d56a19efc82066d026cbaa27ee8352b2ab989070bacd96deb903134a387cf0cd7fa82de91ca1193f7ccbd5fb2bf8398e9e5e1bace8f81486378b42f308d9a55d3c14c642591f333cc6a6aae7abffd8de21e569c4cd0219c7b72b44c6b43a5c9b11226ac8cdb1760e405121fbe45ad7349b581cdf811c2cce1585a72ca327313353579454c3bad2460f16ba64d86984d8fd0d61be6902f1d5c92a4b1aa8ffbf256793899af036634d15895e11bbd29c1ce6f9a1114d48f9fcd624db25507c962549a97d4d21619202e112c08e486d7acc55d5ab8e591ed2da9b7e325fca61855a511c7170100f023a048978e5711eea42caa20405f64a5861b2f57e81644750a0eb3498c5ca76105ac6ab2c5c50e4f9b1ff72fcc6f3a01f98119cb4e8dafcf9e35426300018b8cc649c17fcf87999e0d6d1a4c501e9d92934f912b6740d191d9ca4c142b7782f83d3f4862989633eb043b21563a8360c47298fdbc3ce7ba271a5c317c9c66b6a535e2bfa7d7ae54c1ede664560b58e5d4de9cafb2d43cee207612e632cbab64c99b24363d2a57d064be77f0846d003dfcd2d26138a5f9b94205570e1137d5b72919551f25fcd73a5c612e4affc15a868413241eef86b65d0405de5a47384e51810784293333777efe59b8312e59f3bde54ca8a521932103473dce1d2db1f4fff7d338f98fe1243027acc019709d9eef6af6f8fcaa1b7bd6e5048955cfe725a9682bd3f5361057360fe4c163175606d89b380b295a0139dd06404aca8b1beb5a9be7e57964b74344fb1336e126d570e5cf2b64fdf6ca9d33d7b73b4c13c4ef9d1ffd2b82714a78a57b1bc630bbd6d4e63a847e1146376ed4c0585adcc053bd8acdc6df529f3b251de651d3e6398749402391c613f34a5f7e6099e76842e8d66a78cbaa590f6593bf87095bf4a1015a2cad2c13d8656db8f226387fc355a9fff471c93c3c10b265f7472523aeaa5d08f753a48b096b913f7c030d7355f68c9d71e66919373daecc64d14dba60283f49101d6360df9cfe65ea91338e31767b94a1e1463e134b6f19ba51d70da4391341231d5466dcaa39711f227d25f9b320a004243b4f8edec5d8a498b3732466e3bbb548368d20a78c172099647f5938ea6c1ff8c94a37313e871189cb9da58271add887459fc89e615e5c99a125fef828d661096f74fb8b4edb8cd703615b8c732995243b2c826b888eeeb089cf10bc187d36ece6ee30d60c46bd6fe0508aa8308dbf834fe0aaa12deaf4bb1b9337e63b13d6076c5245e27be4fd8cceb433b9608569fdc85dd6c04f37259851566f1f1983536aed757671fca1a3f6615ad5fed80ac36609c6f879f86d8c11a357a04a1113ae2d356433e11ae50169ea71ca614f7171508319cc0b7a9decdae434ed2bd3a313ab41999d09f3cfcaa80924129f77b89173b3a877b845285cbfa9e51fdc0fca6a3c72748cd88173cd8150c825bb0da72518485a3e159422dda9770dba5cb4343dbccc5fc1541e0a157a5295adb32ba7526ca16e6bca5342ce4e58e9cb567670a5acc03e2eaac39185085aba969c97174057026c1e170625c09061583142b21c91c0f8306392c2be9ed372ede666c3f1186ef70f493110e94cfebaaadba5938a29a669c94562e571e607f2fdba0c5721e2026b6a490f80afbbb5c71ac7f8a9fea566284bce2039f5b2405f811145f4ffbdd7e8febcaedfd162fc503e1a29bb63d88a465c66339f1553dde48991289451363ff349587e4099469a5052b4b337baea3cfadc28319e3a24f635d8d5ee8500503fbf1aff0bc1e6f50227cd79bc9e6c2a5ab0f0b92a1e3c6f81e3578f7ce5071e0fc77cdf1d18fe77dbf4a6bfb2587f8e8e317f98ede1f8f32a64d736f9a5c451a01cacfcc0b9099c4808840c2948cd8998abb4badbe30d93a55cfc23df97998efa139ce8681be3b4032e536db63d9c3b7ca6904ae3f0abbd740385be14fe6764c74e19d8efa9e3580252cb25d0d3e2eae1b82f4187b92173189b5f2d4d536c126e453267a6c0410b872cf0f6e2e2b82a527667f598eb0c87bf1723a63a213e22e093abb757af27a53c0f6f3e29c32aeca4c619d5c8f49d41424ddae64ab67ae7286af0fd931e93d06f711b70cc3c6a58a392392bd4623d25144e840c1539a0b8b29ad19d7768c4d2764ca5f8ee72d96a3eb5358bfcad65dc575cfdcb52c662d33321a96ab197aa4d13d984a2a18f94345373fb5dfa031967614dbf070e24c9cf11a8fe8a128aced2d75e5203099db970933abab5ef8f84b1a56c1b2384e2d9413d41226dff043fcd3d8b7bd833aa02d6016e9f756adce96405cb530e7b5d62b483d6e4a5df06cd553581bee273483c243127106df7fabf5daa98007f5178254f8b5024f994c98770cb0267b6a3bdf819d2ac74dd2b38464a6542c28c8ef9220f2dbe947efcbdac9ce81748665957b2ff1b11f73e79154dfb1729f6d6011adb99e4b30f4ae6b1409bfbed29807ad5e02150f1af53e305049ac26c2b28c8ee1f6cc40ddc48ac831ef3ed2e157cb513de06e1fe69f1d66d1a0432f75eebedee30b0523d71e36bcd0f622d95772687b59fec199087dd09c7eb88329d6aad37f3c6d4289dcb799d9349b4b8b401723ec90e06caedd02f294cafc508b03440890aeef82fae39c677d58586d973e5d8c2f00c34f12efa4c8b3b73c1b0941bf8be3ac8119e7d4ebc8e6853c459ab8a0567fbebf1e6036ed187d7f9f7ba0cb8b887389adc41dd23d027009707662ea429c71f01bdfa3f0bffdda25d2dcdc725464e3d4cf32c6f95dcf90eec4978b9af79c92a359fb5bd08776fa77b20a06ed65c64c0bb7a4e34e9e6e85d6e4f4ee34fc7a9e404bd5213f49704082558375b1a76d4e6e84e678358561425108bc7b3630d0a801971e32c037434b80add0a10d5509ef436bf9a8cb5c0a0fe125614a23688ae18dad4766b1339d7080e51af087cc2dd029dc757098d1bfb9c975af94e0d37e9a24c6a6661c99fdcdbb95d023dc016abdf81c1a09b8b4897ed1f2512aea923b362752cad64393673dcb2dce3d63e379f25c340559a98abe43589879a3537bc88526f1c8499db48bfa8d0b51118b3992930cbfc99e48d815c56aad1560c0fc25540a82e17fb931360abb23d748152280ba1603fff1cac0a041c6f9ab949a059f050144e61cbe5ffb8e272f115cbc82bd62cdfb9759a63e77d3cfdb0a25e504aa5a1e4eda15fa2e1e1a7bb18e74e62a13fce33900d760d89608c79f05b9e11be34cdffbafbdc60838f5a6f76cd8a3ff1072d90462f77abff31e054f3f552772ea750f451d091cb2fd6eef92a800a7837a28ab1be8885b6f9eb18a3093fd989f697bd23edb8075c7120ff375ac72576d625080e107843aa7523fbcea78c18b9762a89e562bf098d61b5b2f2521d709a9611e312c7691f47a503823fdf715afcc6ed3e11dcd0dd77a272cfbdbc2405e26eaf4e2698b9501279dc095c8869128af162383795ea6a14b6cd0b1cb3828b4d98cc4439d8dc51c20ae9e5328bb05a59151818d6526df969384678dd202fd4415f94b861b2ccaf8873680ca6cb9d9fd12f26c11dc6bce36cebbf7734b7bc5a16d882407e26cac42fc9e178af21478c782ac0418c2ecf1876ea2cbeb946b881e460fb81c02c2a91b859927ba4e72f7d03091b3dcc460438ee1aa7ac00f561ccafdbef63ca4286ba78b38c443d470dcfd2211ca74703d27d1cba021071da6559505ddd7f0c8b71115d7196318bff0d2a3381573f79f23c7cb8de2d2dd8d9b86268586a614880ef74c92e5fc80906f453f949afecb888337d591fad11d4efe7ed1cdac88a0569e65ef9733f0a2ab70a323ccb10fbb98df982f0ee5596665ec52a2935d0e3f9d83175b2aca4ed312e622bae00fa4171e73c168735e79bc21561ef91f83adc582bec05a44d6dcfff78556690c9b104d5e64ba7f8481c38c1b7e35038fb60f2beb7ab4a64c9426a498ac3cc1c6c192b6e95215dd8907593b523a399b583cc21808b4b7c237a069c59728f58dad4b00fcf21f70f91713b056db9b3f8a9da36fbf641e1681f6c56a45da353b116547cd4506ca1289b595b475c2596707111f05037557adf077d467b01cc787717842add3a0767d195edcb05a7598a4d1b3baee786a969e87beabf8221ce2b2f9010a85eb31911baa39f1c59f289116d8b9cd360ab400eea764537511b13c871e4b497ec78be7043cf1a737764f2dc810862d41f0c32d0a3f713e9243df3777fa053bfb646b8e1bfd6675e96404e9ffcc2bfe30d09db0684bb8ab8267a34705eb57f374cb8280964a8171c2b8b237d38d44018d79c8e375e21d55178c12bc96e429b339887a821bf0132d55e1ecb161165e9b152034ae6e468c175a71e657dfdafce9ca273ed84b4b469f2e4bd8847d0b86e8d12c19bd18083f97ee1d00b588427d09b54c1b3254e53dfe48b5c19fd6a899994fafa1b31d1f17dd20a69a3b20e9b31527c7e076ef1c9333c00c1b94d5dd71305eb096498202a276870ecd7d68e5737787b2e8ae158022397bf77829adb0b807473a139d4896e30e35aa10059e38fa8431b647dbd2ba57855a82b816d19cec134a378e9cfceb4654bfe77721c10025fa24e1149ae89822441c2fdf655e0d70bb50836352cabed3630689c35a2984671ab9c963d5860a3689c8c1562228d397d0a3cb59e8602d7e72247e29656ba04e53cd2659511274d766cb8d78755f2a3127e2c70b91dd46ba520068d80f6c4115f2b223a3f606d194f5c37bd80550ff5e9aaf4ce5ff329012239f25c12efd79a697362f90d42cac99f323f99b45b918088c2590b6cfe8a1795492d1520e51ad7a2c403901c7809616710872d0c3d67926752d308ca84916bcfcf9573501227318822d40d00742992662cd629a0cf7f688d326fbd10f201c459c7f463cb34b12f8854c4df436170e3c97840803771caf57ff87b70de5cc4a8ecf45775a4f8849df99e6eabe0bb64bb7f6af35701bf384bb04728f87a31297341a662912925e5f0806a682148efd04b099022f1aea22e3419d157dca427cea5dbbab7a0ded30641d16a83fa26e1551d4a5e8639bf175e1dd80448043539083a379aa9ab4e07f54662c9c4e45178f43cca3c61552c7db984f56d35fd41c41cf8d176d76b2ddf0a8e2c36621cd7c49b411e4dc516da4bc418b2410ff1306c639f1a17f36a62229d2cb32049022d2cffbdecf467f82c314a0388f5c74d7600e1cad70e2fedab09ec362e09c5c18d7e38fb5eb48c1dba21ca96bf9ae470de81f7231048fde18225f64f04e1f322e25e45e0a8e4240d6035bd4ac4824edf111553edb5d3e1e432460cfc48fc7783dfcf26f7e4edb510c201d097a3e4a7d24400e68c24ef57ca2e90176fc32c76b2d9d2334c0a011de42c04306664f40ba1f6d25d002e6331234b9131d6783536d49acfcd47fb83e5380df7a2c87574e26ccaf595ba6849d6f855cf19bebf271592b2bfbc2d7bf998a0012edf01fc6b00f911fd662b6c33d896f7c5c32a2f91037255a16785945e8c3a8dba19889969ec01a3da9c836365305b6c944fa95484a6a50257b9da0bd3ef7bc055c6b0abe09003200298a5ddf381e8eff042aa2eaa2f07aee41a30260fcbb042baffd6e022d725b4b7805a3550109f0d92bb33092294f2b2a84a965550e1b23d13a57f125eed60206d75db2ad5fa44f37a0d600fc7136b581a76bafd3c01ed229ad8734e1b044107713bf6c779600622ea3358ba78f1a8476d934cb9fb19f799aef8a4a232e986a5da978d14fe64e918dd34b8ba29d44f0366b527786fe469941587b0cef4a515315e78b93b52f88a3191959b66e320c2272fb115255ca0d7b88e1bca06e71f90c3dc32fdd3dd8bc1c5e71f606b648c49e9e1486fbb8f24873826faddfc876ea79a2446423f4cfe6b0e94fceaf21c6412e2f9f8e7e2ea9fef73cbb227ad9d89dcde0b92f075b57f3d82b69c297a70c4e27c143e62e13e48ae65a874381763a870cbcbddeba6fe7bf9904c492c0d433fafea50f89ea8fa66ebead1ab6e751914c45e164865ae49bb44d5db40589f5c601b8c202a62cf91ce26753e7e9656d7158a6b39e44ec92d2aacf60fd0077d14dc92bf406c99aa54971b28ed81f3f39fe8d0293e90a494b6dd9b1c90fefc859655cce4eabb4071380cc41ed628f83b0909e56456536afa595316afa012cfad467884e558565ca6f162bb8c012939800eb664c30ebbd5057c26cf67cffedef77c9af863f7293dfef1c2b7c5f54d84547606831b47e177d3edb370196afc7312325b0877676b41c625850b62b05c715fd4892e0878b36130b8e3f5bf8d8a714fc32f3b9b9b380dea0d55806c62b798947b6ad5dfe240aa95bad5407329d2a4ca1ad6fd1233507149333809b4a9d5e295f944e38a86d45c04d856d280397afff31bbe161b18f153389ec47b999b8ceb38305f801d25c60856517abd16b8e9ac4185dec46e856a0b5d95dd6d67f6e5b12a543a91493f9aa2eabbf3a5aee4218a1687919b7974d5e6f576691aafc10f105a73f676395ac6e5166b7d003f2c3737c04e7461ffda1151a7fc4776b1881460eab2877ff6204e1ed607f785a5c05ae4b171b7fed2575a75d11f73bf7d6074a011e0023fd3fa843e3c63dadb95f9ae07ad29c509e9d06e59e6b7564786a01acb67b8488d66ef21a793bfafb69df84cc2557f97b15db98ed8bdd1909c83da5890596e53f218cd980ceb75ce1b678bc222fd21c453b72852fc3aba410d666e07cf2b38c2702158768fbd489e469db093c7fefa0c27dc826db746a3c8c99e3261279c7cf79d21ae096609b8db473136c5065cfd13db955b87a7479effdf668bf10110e9f6aa8f4b711109d98e6dbab022f2f4690424e241de429c50a6de76595296a42a4bf0b2c1d9842fb0ba3ef6ef1aaf6cbb8e839764bd9677e491f23fbdc28d0ed5d9e09be429da7ed1a93e85828f9175c74446bf62baf9726e23207226b34d839a42e13c63fbef2caeba904f7b5dfa3667ade62a8e3bf5764828f9b2bdf2ea11b70e2a603d3a69b33ace06e8986fc811e03d2de5bd4bc898f67a3cb8c731ccd10ce45abf198e9455e3a0f86b81b94f0cf367b6ea410b97feae2d9411b410179903a4df9a989f25e9ed2b5a7763e11a01874039d88d9a3cb4435301f7f922f29c8729149f90e39d6f2998875728a3b0eaccb793385abbf3735f3948aae9cf5982c6d3f3bdd5061d611cdf7209392fbb1ce6e709dedfbdbb4442e243178f93b8ec384d8fabb69de31bf3232618f05945b162406708a3151222f42c54d982db53e0cb3baba85d6c13e7f1a2a8ab296a0313ed9a476605ef876f5c3f10346a33b9e6af598d865a04a5b46613d10494b1c9d51435bb551249f06595c96a525f8cb76d2ddde641f0745161f3496726e9f4b33886180e05718ee265fab07f8ffcf95a7a985f334e33db22d0907c1ffc12abe33e880ab6b1198f5fb3c9a21e58e021ca300f333ab16e7f47fad98ac28ebfbcbe405f0d8eaf08f286dd4035b1fb922f48d34914a628fa342efb64f9f1f943bc7772333887cd2e69a16f00c51c62afb8fd1f3ebecf61d166a769427aa0d36c0ccc7b461a8a1b10d241d8a32a46e010085bf3de570861546f7b03e2887ff3aa5692b2f8602912186de386e3bcc2597a18f6c2a9ff6215110a1fcbfe3b5e8a9e893750f3a7d1063004b3b2e6d109339c2a7aed0a972993d717f960fecaf9c1565d2823ead43ccf659da1f65b45892b562a55f32005e87d2f9678a01fd3bf596c0ef873fbb0754bfe87eb36f3e68925e97602881166b4f22e4b0cb40f3835011e8d6e22bedf1f96092c4e91f3b0ef46af602e7e80694719ad08bb0e6d59f29ab5da5832ddf55dc9ec64f68f22d33c7f81a9cd754e896dcbea71a5c0ab471d496b5a40281077f96374c2cd2475a0b2b82b0f8d84568df8a05cc2be840ff8319d1bfec5f086f4a9116c68645597d78b55e483a5cf1f25b423ba35bb2e03fea1aac22a0ae233182f96fb9023be57e47f79169df21adb0c00b9f6b6dd0d1f6a14eafc2b03c27a3c38bdd1057d7e0446e64759f80bfe23e765a70d4e66cf9159da4263574761d413760951935b3b4241e188550f4a61707a7ff26c48b8941a825d7a849cdcb834880d8b9241b96dcd73ad4235bfefc4aea659d2b7116eddd99c92b290ed89ef2359cdb9e2b6ba68f3206ca035d8731e7c4b667a9baee1b4a4c5b483f7793543b33cbf59629d6e51d7d7ab52266d478510c4374e3d3ec6ead98af9257434e2548e5d8ede59ccd7a0712bd61a43c5d4d98844c52d3f97925da0959dc5640f4e168e0c3f1130bc7587272e5011bfe62ed423c0a61790b3633ee059654b12a2c405dcaed5bd154113fc63b5f934d90bfd54f6d94029cb298c88b849ddc3358e0f255362da2e229725ddd33bcdc3a3f94a4181499d0924786fc0f8a41a525326735218ae0275794e260af9d83aea4bbe4a25b8dd74ca78cc973ec4c2358cdfe7c242c19a8c986050cf9b51dcdbd8937a5f85b8979e1f95b10cb7a92bfd4ccc6d0fe36b80ad89d76bc454aee3d02edd0ada94874deda4d1db16b933ece2c3fe5dfc5ef3b81acc173da43cf92ef00bad4d6d56489bb9eef0db3e8d24973118601ee04235850f35d52975b9d062afe29c77bdf4ba424fbd2a6681e7d8a72df5a7b1e893b9a8dbce598d28860e8fdb4c25928dce80d626ec1aeccae3e11ac805ec17180cca8189927c874385111cd9e6f4e018138e4a79c02fbb01bf4381ff648f19340ecbf03db5ec984e02296a0209d2c31266b34b0336f0e11b35d504d9e8c268ead0362a5b0a7289ce069784fafed6f9f69377ccd1bdab347c2a089b82fc1555a07e3ee873705b9c8bef22443b4b2ad2019e4fc153834e3e5eef0665c6d803963dd9c2f0546f25133011fe8f725744d86b33cad127bad73e3b55ae88253386246cafa7fd563e382c1659fa147537d348bf6cd973ab8715d0d1bebf57a975a88905a1df56274b30aa480b00d2da67d750e28fe98f57c64743064f56631540cf2666e04e87fc3173e5cf7407454763ce1bd064de2023767c3b41cd4cc312d3c65bd6410a3f2f898a883da2bb8d6cee72339c28d001cfc7d142711c100a424e1bd734a6701d28d38d075b73eb1a9b422a64f3bc52901d7d4c7ff6ef97c62f661820d9a173f35c34f266694363261698cef03d0e91dc42ecbdd5c7ae60fdcf0ca19afed2414d8ae7febe31e0df02d05b0713a996587f123f9ae8254338000770d939f8540129ef761a741c312bd3286ad14dd8be2360fa78e895d328b618e1c67db72a83e2cd46a009fe48342ee87371f1d14a248c1cc8cf0bcf6bda1c2fa1551e958b8006650b0bd8e56b239b9a2f3cf0070ebd397d76bdfd3d62f236fe1ea6d4e7334e0f96182f320b98b4322691f24baabaee2d3b2ccd0c899e0261e90946c1ca7ac41cf9ec3bb321783bfb3ccec02033b11fdcc32e2064c815623aeca5cd0d5376d2aedf37a5f047fc427fc0eddec5d8cbeee8bfda52390eee341a180f43f413f7ac652e5f770a7506057e731355f9a6ef597799df7720bd494b5d2c2b02b0e7fc078f1a6fbe73005bd8cb3ae3c4edb9ae8d1dba0eb9a2007e7462de675f753b2174869534fed8e9ea4eae3a09da34eca0ab9f0560e05736aaf13504bbead2bc1e0ee97e6a6c01b79b6bacb017b8bf744aa250b38af2d4862951d0b0e588c6924f880d008d246b96be8d1e577acb271f33da415ae85a4a36d47288617232d32de0d1ae8eed9cd02d4e6081a956627e3f1bfd1f3651f06d6d61473d58591816b75961ec837a65f923e39816d620dc8e80375337c781020b85e03792a4b2774926d59075040f5ecaadd4163414547d1df0e2606106a67fe9f69652a59400bc042cb81a76e4f14d380882f579627cdd5fc478d5cd89a4dbb24c4252c89146d9b0cfe7fa99a72269ff5d5f04d8c91a9e354d10cd095fe24101e51d6be20d89fe9b21601eab458d9bc0fe73698efd2192c368f87405a413817ecfd88214dea122fb0d8d139efb395246c0790e174c9d8adb10caafeb2b6a2742c966fc687cbdb853be478befda9b89b106660854a00ced9c7028a7071f40280d91daf78d26c854051f73340431d003ce66680045b1cc4480abec0331a807d631a4560478626fd41aa8c3fdcb66d75aefb6a29030b0c94be961dce67db553863464feffc8b72c3e7219003eb942d359e777a87bd2c2e1a27f58e30e0eecc10d9b2c9f0b1552ba2965503ef2f77a35d88b82abc97837874b67bf1ae656a3b2fed7d60be4de83a83da8d98994cfb9c458fd2b883d8e9751670c62eec4bec7c7873215bf99f17e9628f1ac1fbeac4004d288fe279d2bcfeb4ed7671048de8598c7a9ae328e829e4115a5ba155ea2641b1df684d457f527339ac8ea6705ac7e73590f900bd73a434e4d72d8175aca5beade289da131374c40aa72014c6446fd943e8a2f7ac9e7bb008128bde5af3d3c1e1811f7df88329700fd40a5cb12396412283978589d04019c9e019ebad5829b15098ecd0f03b5901b2f48644a13b15558abe018087240153990dd38e9e9e60ad9bf1df3f21d574383535ea5f44298a29c1e90bce931dd45f5b4d06029929dfc88923bea8c20b56bb43868804e5e28486aa345ecc9e821d24f9e02c120066ad008ab22bb6f22bbff6036bddf2dc05c50bbcfdedd621be2410f9b8de2f364c8cd259234072bf3ad45fcb418d40c81c553bfedc91f50cd322c8cf07a8f81862dd0d3d0d02ca4acf0fe7ca0da1d90e3e74740ce6a38d69de93c01e46aafe400accfe872b76f94e4a055e1849a82a520b9ac9cebc34609843fc04bdccbd220f7a9d499553cfd9809c6084ec3ea2132ea5350bd9ce7ea7af466d3bafb0aceb86a0e72b658e8b3866fe9a28c78afcb4da501ecc357d2f4c9787f72486eee8ff03aed4ddf09b247215c134c02d50106dff1082732e750f7eb804320978873d1daf87369a56b84f8bc2fe2a98a755fbd645b3ba4d2ba3691ef05832540cfe12c7e19c5ffa35a59e77cf999eb1d38ffdea79ebcbd573d1020bb37dae73ed250be1de70230aaa346865835ddc3e38ef371f102518adbc1bfd4124146686e610457c603fcfa2c4a6f74e8c904b977f4af9475d72adfceaba7db108330983b247a63b2609daba03df9f27665343ba40e475873a2c774561a8776088663377dd330ba415261bd7e25e9ebe435542a0e2243dc1bfe7d429b43036f8c1aa8081df47e007fd54f6f6eb420bc416f1c9a6d82e572d365e881ccc6e8f48ac1b338effe51c6251801ebcbecf5732601c4bf1dbb703af33738828b69392d10091813ce2b93e6b51d2d263f44de2f7f1d17441dd72d3ee4135d8591dfe4dc96c1317f488b141a92e6f750ad60874694a4959f5488342c3f306f1eab8472615abd0fd27cfa71e9c88ea9957c7431033e127a5d3a9c774500b6899f4e3b5f2fb7367ad2", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x6, {0x4, 0x5, 0x7, 0x6, 0x8003, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, r5, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000280)) r7 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x20000088) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000000300), &(0x7f0000000400)={0x0, 0xfb, 0x2a, 0x0, 0x5d, "117cc912e285809ca63b24ddfec9244d", "fc12ea45062c51bdba732787b46977154c4dcaa5ca"}, 0x2a, 0x1) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181041, 0x0) ioctl$COMEDI_BUFCONFIG(r8, 0x8020640d, &(0x7f0000000180)={0x0, 0x452a, 0x198, 0x9c2}) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x2, 0x1, 0xea1, 0x40, 0xfffffffffffffffd]}, &(0x7f0000000480)=0x78) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) syz_open_procfs(r0, &(0x7f0000000240)='net/psched\x00') 25m10.858248912s ago: executing program 32 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 25m10.810764213s ago: executing program 1 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(0x0, 0x402081, 0x112) getdents(r3, &(0x7f0000001880)=""/4093, 0xffd) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000180)="bbcebf2e9bb51264564aba06d72d2048", 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffffffffffe6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000240)={0x5, 0x33565348, 0x1, @stepwise={0x1, 0x724, 0x2, 0x1, 0x7ff, 0x101}}) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r7, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) timer_gettime(r7, &(0x7f0000000000)) connect$inet6(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006300)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 25m9.251173706s ago: executing program 1 (id=51): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r3, 0x1000, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv2(r1, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x20, 0x0, 0x1, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x76}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x81}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40000c4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 25m6.526445982s ago: executing program 1 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x1000, 0x5, 0x5, 0x0, 0x9, 0x8000, 0x4, 0x9}, &(0x7f0000000340)=0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$setopts(0x4206, r0, 0x0, 0x6a) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x400}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000840}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4040845}, 0x40000) recvmsg$can_bcm(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)=""/153, 0x99}, {&(0x7f0000000b40)=""/253, 0x127}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000940)=""/243, 0xf3}, {&(0x7f0000000680)=""/148, 0x94}], 0x6}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x20000000}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000100)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r9, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50000000}) 24m57.069727378s ago: executing program 1 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@nop]}}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffb) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0xffff, 0x0, 0x0, {[@nop, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x1, @loopback, 0xd9}]}}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x841) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48045}, 0x0) 24m40.997445125s ago: executing program 33 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@nop]}}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffb) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0xffff, 0x0, 0x0, {[@nop, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x1, @loopback, 0xd9}]}}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x841) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48045}, 0x0) 44.313020682s ago: executing program 6 (id=5471): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x4) 43.399772251s ago: executing program 6 (id=5474): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 40.905328195s ago: executing program 6 (id=5485): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) 40.144789735s ago: executing program 6 (id=5493): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400090527bd7000fddbdf25021800cb", @ANYRES32=r3, @ANYBLOB="080004006401010208000400ac1414bb08000200ac14143d080002007f0000010c0009000010"], 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 38.556754166s ago: executing program 6 (id=5495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 33.092674784s ago: executing program 6 (id=5516): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 16.357112647s ago: executing program 34 (id=5516): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 8.26158948s ago: executing program 4 (id=5591): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0xfffffff9}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="ea", 0x1, 0x10, &(0x7f00000001c0)={0xa, 0x4e21, 0xe1, @ipv4={'\x00', '\xff\xff', @local}, 0x50be}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x2, 0x1, [0x101]}, 0xa) 7.106593521s ago: executing program 4 (id=5597): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)=""/226, 0xe2}], 0x2, 0xfffffffe, 0x80, 0x0) 7.070173622s ago: executing program 3 (id=5599): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0xe}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.829655351s ago: executing program 5 (id=5600): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000) readv(r1, &(0x7f0000001140)=[{&(0x7f0000001000)=""/8, 0x8}], 0x1) 6.749555674s ago: executing program 4 (id=5601): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") ftruncate(0xffffffffffffffff, 0x8800000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x2}) 6.640740307s ago: executing program 3 (id=5602): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.057503653s ago: executing program 4 (id=5605): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0xc, 0x3f}) 5.63060765s ago: executing program 3 (id=5606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x1) 5.575590308s ago: executing program 5 (id=5607): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfdef) 4.844060854s ago: executing program 0 (id=5610): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 4.677977816s ago: executing program 0 (id=5611): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000003c0)={0x80, 0x1, {0x2, 0x0, 0x9, 0x1}}) tkill(r0, 0x7) 4.491525217s ago: executing program 4 (id=5612): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.491344382s ago: executing program 3 (id=5613): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$uac1(0x5, 0x82, &(0x7f0000000340)=ANY=[@ANYBLOB="12015002000000400c2018104000010203010902700003018100000904000000010100000a240142c60a0002010209040100000102000009040101010102000007240100090110092402dffe01090b4309050109ff03"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) 4.200293192s ago: executing program 0 (id=5614): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0)) 3.999215634s ago: executing program 0 (id=5615): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @remote, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c088088f51e72eb2f7e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 3.820508536s ago: executing program 5 (id=5616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 3.702028292s ago: executing program 0 (id=5617): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 2.807498106s ago: executing program 3 (id=5618): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x1, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x57}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x7}, &(0x7f0000000040)=0x8) 2.679298833s ago: executing program 4 (id=5619): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000ae3ff62791c38e3d14ec66e16bf69f66"], 0x28}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) ioctl(r0, 0x8b29, &(0x7f0000000040)) 2.403164966s ago: executing program 5 (id=5620): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) 1.852921595s ago: executing program 0 (id=5621): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.269541555s ago: executing program 5 (id=5622): socket(0x840000000002, 0x3, 0x100) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 1.256041891s ago: executing program 3 (id=5623): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r0, 0x0, 0x0, 0x80000) 0s ago: executing program 5 (id=5624): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2000002}}}, 0x10, 0x0}, 0x0) kernel console output (not intermixed with test programs): .635987][ T1565] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.686042][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.706581][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.707686][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.710996][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.739342][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.773722][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.790831][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.794155][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.831383][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.859219][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.895875][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.904384][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.929052][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.929119][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.970991][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1543.993546][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.008674][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.021014][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.072728][ T1565] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.188241][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.192503][ T1565] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.235595][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.253008][ T1565] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.277341][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.326906][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.328225][ T1565] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.332778][ T1565] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.339076][ T1565] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.362876][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.363249][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.377352][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.392260][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.392682][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.393000][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.415156][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.426893][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.434462][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.506186][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.513214][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.530682][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.530684][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.531298][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.531696][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.532041][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.532397][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.532740][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.533092][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.533455][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.569211][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.617346][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.617529][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.619998][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.620522][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.631387][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.762190][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.771458][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.792981][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.794068][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.795494][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.796418][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.808432][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.850155][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.859204][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.861120][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.862152][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.876258][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1544.947688][T21104] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1544.998994][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1545.312658][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5207'. [ 1545.405290][T21131] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5207'. [ 1545.405317][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5207'. [ 1545.573423][T21130] veth1_to_hsr: entered promiscuous mode [ 1545.580819][T21130] macvtap1: entered promiscuous mode [ 1545.588088][T21130] macvtap1: entered allmulticast mode [ 1545.588119][T21130] veth1_to_hsr: entered allmulticast mode [ 1545.970393][T21131] macvtap2: entered promiscuous mode [ 1545.970425][T21131] macvtap2: entered allmulticast mode [ 1546.852310][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.948424][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.949815][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.950375][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.950846][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.990574][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.991211][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.993471][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.994699][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.995198][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.995568][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1546.995921][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1547.200391][ T1537] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1547.274898][ T1537] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1548.069465][T15285] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1548.671425][ C1] net_ratelimit: 6610 callbacks suppressed [ 1548.671448][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1548.671916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1548.677677][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1548.678056][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1548.680889][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1548.681265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1548.681607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1548.681959][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1548.690419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1548.714263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1549.668993][T21168] loop5: detected capacity change from 0 to 32768 [ 1549.718736][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1549.729879][T21168] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5222 (21168) [ 1549.786517][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1549.845222][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1549.851346][T21168] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1549.851447][T21168] BTRFS info (device loop5): using sha256 checksum algorithm [ 1550.012737][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.045634][ T3307] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.046535][ T3307] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.047434][ T3307] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.048703][ T3307] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.050578][ T3307] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.058517][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.060119][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.061862][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.063301][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.064819][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.066027][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.067227][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.068622][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.069656][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.070851][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.072501][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.074736][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.076155][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.099799][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.106188][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.113899][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.122673][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.191707][ T3307] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.235090][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.242295][ T3307] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.267341][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.267460][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.285207][ T3307] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.295539][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.297658][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.297703][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.297735][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.336552][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.345415][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.409860][ T3307] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.541641][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.609742][ T1565] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.623020][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.624836][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.630416][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.720568][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.767741][ T1565] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.821883][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1550.826405][T21168] BTRFS info (device loop5): rebuilding free space tree [ 1551.110602][ T3381] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1551.110824][ T3381] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1551.365324][ T1565] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1551.385122][T21168] BTRFS info (device loop5): disabling free space tree [ 1551.385367][T21168] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1551.385398][T21168] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1551.427483][T13958] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1551.437100][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1551.445188][T21168] BTRFS info (device loop5): setting nodatasum [ 1551.445223][T21168] BTRFS info (device loop5): setting nodatacow [ 1551.445243][T21168] BTRFS info (device loop5): turning off barriers [ 1551.445284][T21168] BTRFS info (device loop5): force clearing of disk cache [ 1551.453776][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1552.173443][ T3307] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1553.174423][ T13] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1553.273684][ T3381] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1554.025078][ C1] net_ratelimit: 6278 callbacks suppressed [ 1554.025105][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1554.025685][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.026172][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.026611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.027109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.027556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1554.029513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1554.029933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1554.030327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1554.031178][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1555.767254][ T1565] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1555.784718][ T9412] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1556.570756][T21234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5243'. [ 1557.833450][T13958] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1557.879863][T13958] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1557.911971][ T9412] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1557.937963][T13958] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1557.988068][ T1565] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1558.275118][ T1537] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1558.712711][T15285] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1559.374786][ C1] net_ratelimit: 5820 callbacks suppressed [ 1559.374812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1559.375255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1559.375742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1559.376626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1559.377015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.377405][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1559.377805][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1559.378152][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1559.379731][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1559.380057][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.036937][T21253] loop6: detected capacity change from 0 to 512 [ 1561.060438][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.184125][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.184192][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.184221][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.252023][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.253434][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.254247][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.254999][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.256486][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.258122][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.264736][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.266554][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.438035][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.438115][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.439129][ T1582] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1561.616022][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1561.625472][T21253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.625652][T21253] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1561.666031][T21253] EXT4-fs (loop6): shut down requested (1) [ 1561.791160][T15285] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1564.373558][T14736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.481527][T14736] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1564.730164][ C1] net_ratelimit: 8112 callbacks suppressed [ 1564.730191][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1564.730615][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.731025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.731446][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1564.731823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1564.733209][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1564.734282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1564.734737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.735326][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1564.735820][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1565.672369][T21277] overlayfs: failed to clone upperpath [ 1567.054523][ T37] kernel read not supported for file bpf-prog (pid: 37 comm: kworker/1:1) [ 1568.777987][T21306] loop6: detected capacity change from 0 to 32768 [ 1568.789106][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.815950][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.825598][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.827405][T21309] netlink: 'syz.3.5272': attribute type 83 has an invalid length. [ 1568.842545][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.851963][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.867593][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.876052][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.890566][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.926465][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.927319][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.928078][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.928788][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.963594][ T1537] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1568.972968][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.982171][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1568.991869][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.020964][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.031837][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.039992][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.055025][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.125717][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.126415][T21306] JBD2: Ignoring recovery information on journal [ 1569.157873][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.157926][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.157952][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.157977][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158002][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158027][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158053][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158078][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158103][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158128][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158152][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158176][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158209][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158234][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158259][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158283][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158309][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158333][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158358][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158382][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158407][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158431][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158455][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158480][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158504][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158530][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158554][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158578][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158602][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158628][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158655][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158680][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158706][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158730][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158754][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158778][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158803][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158826][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158850][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158874][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158899][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158924][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158948][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158973][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.158997][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159022][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159046][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159070][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159104][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159135][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159159][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159184][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159217][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159241][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159283][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159307][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.159332][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183705][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183755][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183802][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183827][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183852][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183876][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183900][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183926][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183951][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.183975][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184000][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184025][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184049][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184073][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184097][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184123][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184147][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184171][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184202][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184226][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184250][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184274][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184298][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184323][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184348][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184372][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184396][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184419][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184444][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184468][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184492][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184517][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184541][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184566][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184590][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184614][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184638][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184663][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184687][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184712][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184737][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184761][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184786][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184809][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184834][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184858][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184882][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184907][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184931][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184955][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.184979][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185003][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185027][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185051][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185076][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185100][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185124][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185148][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185172][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185203][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185227][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185251][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185275][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185299][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185323][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185346][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185370][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185395][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185418][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185442][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185467][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185508][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185532][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.185556][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.289662][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.447085][ T38] audit: type=1800 audit(1778270492.565:442): pid=21313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5274" name="bus" dev="tmpfs" ino=7764 res=0 errno=0 [ 1569.481423][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.493667][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.493727][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517382][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517450][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517480][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517508][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517535][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517565][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517591][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517619][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517648][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517676][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517704][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517733][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517762][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517791][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517819][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517847][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517874][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517901][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517928][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517955][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.517981][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518011][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518039][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518067][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518095][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518132][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518160][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518187][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518216][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518242][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518270][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518296][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518322][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518349][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518376][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518404][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518432][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518460][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518485][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518513][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518542][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518569][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518596][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518625][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518653][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518682][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518709][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518737][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518762][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518790][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518836][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518862][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.518891][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.523969][T13959] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.524024][T13959] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.524052][T13959] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.524079][T13959] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.540902][T13959] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.618763][T13959] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.661152][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739486][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739527][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739556][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739585][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739614][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739641][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739668][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739696][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739726][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739753][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739782][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739808][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739835][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739864][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739891][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739920][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739946][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.739974][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740001][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740028][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740055][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740083][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740111][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740138][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740166][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740193][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740222][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740249][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740278][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740306][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740332][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740360][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740388][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740414][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740453][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740481][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740509][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740537][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740566][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740593][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740622][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740649][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740677][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740703][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740731][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740759][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740785][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740812][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740840][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740869][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740916][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740945][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.740973][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.808466][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.819769][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.880906][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917210][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917250][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917280][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917309][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917338][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917366][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917393][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917421][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917448][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917477][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917505][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917534][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917563][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917589][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917616][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917644][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917671][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917697][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917726][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1569.917755][ T1582] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1569.930122][ T1537] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1570.027264][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1570.034616][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1570.040140][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1570.052121][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1570.058698][T21306] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1570.085959][ C1] net_ratelimit: 7827 callbacks suppressed [ 1570.085982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1570.086377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1570.086776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1570.087185][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1570.087572][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1570.088806][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1570.089766][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1570.090180][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1570.091045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1570.091405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1570.245955][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1570.493451][ T1565] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1570.548842][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1570.606795][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1570.925608][T21318] loop5: detected capacity change from 0 to 64 [ 1570.963598][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1570.994988][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1570.995057][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.031033][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.042977][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.087448][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.420863][ T1582] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.420914][ T1582] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.420940][ T1582] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.428920][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.429780][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.439447][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.439496][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.439539][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.474306][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.493653][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.505117][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1571.774466][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.800507][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.800990][T21318] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 1571.806029][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.872983][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.877971][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.887344][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.960409][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1571.999582][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.002091][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.019737][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.022430][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.022475][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.035749][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.061892][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.168645][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.276106][ T9412] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1572.293099][ T3381] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1572.293160][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.315755][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1572.315820][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1572.315853][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1572.315885][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1572.318859][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.448732][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.453017][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.453395][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1572.461715][ T9391] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1572.471288][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.480176][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.493027][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.501638][T15285] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1572.529721][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.529771][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.529802][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.529842][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.529939][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.529998][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.546228][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.546275][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.573663][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.573707][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.573732][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.573755][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.573778][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.573802][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.573825][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1572.824516][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1572.951311][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1573.020121][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1573.023533][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1573.054225][ T9391] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1573.057670][ T150] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1573.081344][ T1582] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1573.432752][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5282'. [ 1573.483031][ T10] hid_parser_main: 91 callbacks suppressed [ 1573.483064][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1573.853682][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1573.925603][ T1537] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1574.143767][T14736] ocfs2: Unmounting device (7,6) on (node local) [ 1574.279411][T14736] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1575.278608][ T38] audit: type=1326 audit(1778270498.009:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21350 comm="syz.6.5278" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8caa1cdd9 code=0x0 [ 1575.441978][ C1] net_ratelimit: 5067 callbacks suppressed [ 1575.442004][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1575.443733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1575.444103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1575.444497][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1575.444889][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1575.445270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1575.446548][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1575.447793][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1575.448215][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1575.448616][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1575.989772][T21366] overlayfs: failed to clone upperpath [ 1577.935137][T21386] loop5: detected capacity change from 0 to 2048 [ 1578.669519][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1578.669826][T21386] loop5: p3 < > p4 < > [ 1578.669864][T21386] loop5: partition table partially beyond EOD, truncated [ 1578.707143][T21386] loop5: p3 start 4284289 is beyond EOD, truncated [ 1579.318494][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1579.376646][T21251] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1580.421115][T21417] loop5: detected capacity change from 0 to 512 [ 1580.462680][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1580.487429][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1580.562526][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1580.562919][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1580.585682][ T13] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1580.681767][ T38] audit: type=1326 audit(1778270503.069:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1580.682554][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1580.686053][ T38] audit: type=1326 audit(1778270503.069:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1580.686824][ T38] audit: type=1326 audit(1778270503.069:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1580.787271][ T38] audit: type=1326 audit(1778270503.163:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1580.787385][ T38] audit: type=1326 audit(1778270503.163:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1580.787438][ T38] audit: type=1326 audit(1778270503.163:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1580.787488][ T38] audit: type=1326 audit(1778270503.163:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1580.799477][ C1] net_ratelimit: 6480 callbacks suppressed [ 1580.799503][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.799943][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.800433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1580.801851][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1580.802324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1580.802761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1580.804828][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1580.805256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.805845][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1580.806385][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1580.960007][ T38] audit: type=1326 audit(1778270503.331:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1580.960071][ T38] audit: type=1326 audit(1778270503.331:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1580.960112][ T38] audit: type=1326 audit(1778270503.331:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.3.5314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7facadb3cdd9 code=0x7ffc0000 [ 1581.258766][T21251] udevd[21251]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1581.277341][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.277402][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.301283][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.301371][ T1537] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.373626][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.376430][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.496028][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.498290][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.521369][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.534860][ T9412] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.537820][ T3381] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1581.662768][T21417] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.5309: corrupted xattr block 95: invalid header [ 1581.662813][T21417] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1581.749830][ C1] EXT4-fs (loop5): initial error at time 1778270504: ext4_expand_extra_isize_ea:2810: inode 11 [ 1581.749876][ C1] EXT4-fs (loop5): last error at time 1778270504: ext4_expand_extra_isize_ea:2810: inode 11 [ 1581.930339][ T158] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1582.184664][T21417] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5309: bg 0: block 7: invalid block bitmap [ 1582.184707][T21417] loop5: lost filesystem error report for type 5 error -117 [ 1582.367492][ T158] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1582.503125][T21417] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1582.503159][T21417] loop5: lost filesystem error report for type 5 error -117 [ 1582.558020][ T158] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1582.587557][T21417] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.5309: corrupted xattr block 95: invalid header [ 1582.587603][T21417] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1582.925379][ T158] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1582.940747][T21417] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 1582.940857][T21417] EXT4-fs (loop5): 1 orphan inode deleted [ 1583.078828][T21417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1583.079280][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1583.082522][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1583.203463][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1583.203605][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1584.754160][T21456] loop6: detected capacity change from 0 to 131072 [ 1584.776331][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.777662][T21456] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 1584.777691][T21456] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1584.782227][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.789745][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.790113][T21456] F2FS-fs (loop6): invalid crc value [ 1584.790875][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.791211][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.794049][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.795483][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.796558][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.806049][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.917239][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.933519][T21456] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1584.942418][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1584.942491][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.030452][ T9412] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1585.038747][T21456] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1585.038788][T21456] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1585.164739][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.190386][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.216030][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.248923][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.263753][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.323247][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.344722][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.371904][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.387773][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.410377][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.441539][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.474056][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.498667][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.516383][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.524511][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.530440][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.550694][ T3381] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1585.666215][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1585.667092][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1585.667981][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1585.720245][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1585.720909][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.792852][ T158] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1585.809346][T15285] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.838500][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.853739][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.879001][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.916330][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.941258][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.947272][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1585.972097][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.138819][ T9412] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1586.200679][ C1] net_ratelimit: 5398 callbacks suppressed [ 1586.200706][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.201133][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.201488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1586.201878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1586.203369][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1586.204402][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1586.204852][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.205268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.205960][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.206456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.431434][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.474937][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.480196][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.543946][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.572142][T15285] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1586.633182][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.649115][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.664807][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.664864][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.664920][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.665018][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.815964][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.959485][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.965936][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.966146][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.971631][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.971700][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.971837][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.971886][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1586.971951][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1587.188077][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1587.199438][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1587.200134][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1587.208548][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1587.208627][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1588.508670][ T13] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1589.143823][ T13] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1589.215776][ T1537] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1590.294619][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5351'. [ 1591.119071][ T1537] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1591.558644][ C1] net_ratelimit: 4936 callbacks suppressed [ 1591.558669][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1591.559054][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1591.559411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1591.599509][ T1537] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1591.675236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1591.675457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.675665][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.675872][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1591.720734][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1591.721940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1591.730371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1591.829296][ T1537] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1592.022367][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1592.236970][ T4996] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1592.432409][ T4996] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1592.432445][ T4996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.432468][ T4996] usb 6-1: Product: syz [ 1592.432486][ T4996] usb 6-1: Manufacturer: syz [ 1592.432503][ T4996] usb 6-1: SerialNumber: syz [ 1592.503253][ T4996] usb 6-1: config 0 descriptor?? [ 1593.093026][ T4996] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1593.595002][ T4996] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1593.808598][ T4996] usb 6-1: USB disconnect, device number 12 [ 1593.888713][T14736] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1595.165030][T21566] loop6: detected capacity change from 0 to 256 [ 1595.177317][T21566] exfat: Deprecated parameter 'namecase' [ 1595.177377][T21566] exfat: Deprecated parameter 'namecase' [ 1595.192488][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.198510][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.200808][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.203452][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.211076][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.213693][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.219890][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.221697][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.869422][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.891685][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.891751][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.891779][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.891807][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.891834][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.891861][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.891887][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.892816][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1595.963288][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1596.106211][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5375'. [ 1596.106238][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5375'. [ 1596.908645][ C1] net_ratelimit: 6518 callbacks suppressed [ 1596.908670][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1596.909078][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.909492][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.909873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1596.910257][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1596.912092][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1596.913107][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1596.913564][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.913978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.914459][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1597.695561][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.696225][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.734584][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.734684][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.763655][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.763731][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.785598][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.785652][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.785681][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.785709][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.785735][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.785762][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.785787][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.785825][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.806780][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.806845][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.810124][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.811586][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.811641][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.828968][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.829027][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.829644][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.830006][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.833693][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.834029][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1597.835037][T21566] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1597.835728][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1598.147719][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 1598.147744][ T38] audit: type=1800 audit(1778270519.233:463): pid=21591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5379" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1599.279508][T14736] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1599.281096][ T4996] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1599.454319][ T4996] usb 6-1: Using ep0 maxpacket: 16 [ 1599.462602][ T4996] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1599.462633][ T4996] usb 6-1: config 0 has no interface number 0 [ 1599.499516][ T4996] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1599.499553][ T4996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.499575][ T4996] usb 6-1: Product: syz [ 1599.499592][ T4996] usb 6-1: Manufacturer: syz [ 1599.499608][ T4996] usb 6-1: SerialNumber: syz [ 1599.543644][ T4996] usb 6-1: config 0 descriptor?? [ 1599.678288][ T4996] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1601.323549][ T4996] gspca_spca1528: reg_w err -71 [ 1601.329456][ T4996] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1601.360611][ T4996] usb 6-1: USB disconnect, device number 13 [ 1602.271319][ C1] net_ratelimit: 5441 callbacks suppressed [ 1602.271345][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1602.271710][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.272088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.272627][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.273025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1602.273427][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1602.274802][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1602.275349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1602.275756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1602.277479][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1602.520353][T21647] 9pnet: p9_errstr2errno: server reported unknown error ½p [ 1603.827435][T21660] loop5: detected capacity change from 0 to 128 [ 1603.898132][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1603.905002][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1603.966970][T21660] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1603.969231][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.057693][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.073546][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.095771][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.107033][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.135564][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.135628][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.135658][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.135684][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.135710][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.135738][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.183797][ T150] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.187742][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.188096][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.189251][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.226343][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.227466][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.227515][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.231405][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.231440][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.231462][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.231484][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.231505][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.231526][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.235656][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.240086][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.247008][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.251663][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.251911][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.261395][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.380601][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.383364][T21660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1604.383595][ T9391] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1604.397808][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1604.407965][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1605.459507][T21671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1605.789553][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1605.801195][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1605.801274][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1605.801314][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1605.892063][ T9391] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1605.916560][T15285] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1605.996620][T21664] loop6: detected capacity change from 0 to 131072 [ 1606.017536][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.024265][T21664] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 1606.024296][T21664] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1606.050941][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.051898][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.052153][T21664] F2FS-fs (loop6): invalid crc value [ 1606.052379][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.052814][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.117108][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.130816][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.130919][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.134447][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.136026][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.150388][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.150496][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.160308][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.244966][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.253191][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.254849][T21664] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1606.255218][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.265647][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.281755][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.285234][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.286118][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.301767][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.308362][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1606.324087][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.348503][T21664] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1606.348541][T21664] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1606.355512][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.360595][ T9412] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.368616][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.389183][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.407311][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.533489][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.540622][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.542203][ T38] audit: type=1800 audit(1778270527.259:464): pid=21664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5409" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 1606.547346][ T13] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1606.561161][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1606.590391][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.631998][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1606.677545][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.688270][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.699100][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.730784][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.795513][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.796668][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.799482][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.849505][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.872862][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.877265][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.906479][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.939368][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.939436][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.939475][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.939532][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1606.939631][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.075528][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.099320][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.099407][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.099438][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.100896][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.102779][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.105130][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.105299][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.266060][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.296270][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.296393][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.296479][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.314703][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.351808][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1607.622686][ C1] net_ratelimit: 4787 callbacks suppressed [ 1607.622714][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1607.623124][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1607.624439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1607.625365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1607.625763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.626160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.626549][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.626948][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1607.627342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1607.628722][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1608.545804][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1609.141526][ T9391] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1610.180005][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1610.612143][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1610.649554][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1610.662364][ T10] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 1610.662397][ T10] usb 6-1: config 2 has no interface number 0 [ 1610.662451][ T10] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1610.662483][ T10] usb 6-1: config 2 interface 88 has no altsetting 0 [ 1610.969450][ T10] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1610.969486][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.969509][ T10] usb 6-1: Product: syz [ 1610.969527][ T10] usb 6-1: Manufacturer: syz [ 1610.969543][ T10] usb 6-1: SerialNumber: syz [ 1611.131663][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1611.227914][T21708] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1611.466704][T21708] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1611.995694][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1612.346794][ T150] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1612.386295][ T10] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1612.432231][ T10] asix 6-1:2.88: probe with driver asix failed with error -71 [ 1612.534979][ T10] usb 6-1: USB disconnect, device number 14 [ 1612.978695][ C1] net_ratelimit: 6392 callbacks suppressed [ 1612.978721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1612.979175][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.979633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.980065][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1612.980699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1612.982345][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1612.984367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1612.984832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.985298][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1612.985744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1614.205253][T14736] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1614.459225][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5440'. [ 1614.459262][T21751] netlink: 'syz.5.5440': attribute type 5 has an invalid length. [ 1614.459288][T21751] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5440'. [ 1615.567132][T21751] geneve2: entered promiscuous mode [ 1615.567154][T21751] geneve2: entered allmulticast mode [ 1615.587903][ T67] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1615.593083][ T67] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1615.593139][ T67] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1615.593178][ T67] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1618.062785][T21786] bridge0: entered allmulticast mode [ 1618.133639][T21786] pim6reg: entered allmulticast mode [ 1618.136427][T21788] loop6: detected capacity change from 0 to 128 [ 1618.242257][T21786] pim6reg: left allmulticast mode [ 1618.242518][T21786] bridge0: left allmulticast mode [ 1618.288598][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.328676][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.332304][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.351824][ C1] net_ratelimit: 5570 callbacks suppressed [ 1618.351851][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1618.352467][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1618.383562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1618.384005][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1618.384382][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1618.392134][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1618.393012][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1618.408901][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1618.409502][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1618.410095][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1618.605005][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.607116][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.645604][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.806614][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.810634][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.810695][ T3381] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.839068][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.840230][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.841234][ T1582] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1618.919564][ T13] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1619.452369][T21788] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1619.452589][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1619.483292][T21788] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.882871][ T5715] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1620.009196][T14736] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1620.114161][ T5715] usb 6-1: Using ep0 maxpacket: 8 [ 1620.127036][ T5715] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1620.127072][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.127095][ T5715] usb 6-1: Product: syz [ 1620.127111][ T5715] usb 6-1: Manufacturer: syz [ 1620.127129][ T5715] usb 6-1: SerialNumber: syz [ 1620.169035][ T5715] usb 6-1: config 0 descriptor?? [ 1620.186388][ T5715] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1620.297571][ T1582] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1620.366840][T14736] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1621.567551][ T5715] gspca_sonixj: reg_w1 err -71 [ 1621.646774][ T5715] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1622.109633][ T5715] usb 6-1: USB disconnect, device number 15 [ 1623.701948][ C1] net_ratelimit: 5242 callbacks suppressed [ 1623.701972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1623.702352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1623.703048][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1623.704168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1623.705065][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1623.705476][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1623.705859][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1623.706289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1623.706760][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1623.707176][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1624.702395][T21851] fuse: fd is not a fuse device [ 1624.757803][T20138] Bluetooth: hci0: command 0x0406 tx timeout [ 1625.958769][T21869] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5480'. [ 1626.293072][T21849] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1626.783141][T21869] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1627.675406][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5493'. [ 1627.677943][T21894] netlink: 'syz.6.5493': attribute type 9 has an invalid length. [ 1627.677966][T21894] netlink: 47 bytes leftover after parsing attributes in process `syz.6.5493'. [ 1629.057535][ C1] net_ratelimit: 4807 callbacks suppressed [ 1629.057560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1629.057892][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1629.058229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1629.059360][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1629.059732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1629.060112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1629.061797][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1629.062258][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1629.062649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1629.063092][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1629.717806][T21912] loop6: detected capacity change from 0 to 32768 [ 1629.719308][T21912] btrfs: Deprecated parameter 'usebackuproot' [ 1629.719566][T21912] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1629.725892][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1629.726655][T21912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5495 (21912) [ 1629.818198][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1629.877505][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1629.877780][T21912] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1629.877817][T21912] BTRFS info (device loop6): using crc32c checksum algorithm [ 1629.909401][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1629.916748][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1629.921744][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1629.933517][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1629.947687][ T1537] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1629.975532][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.211563][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.285906][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.297404][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.308317][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.329447][ T67] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1630.330316][T21912] BTRFS error (device loop6): failed to load root extent [ 1630.330360][T21912] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1630.361532][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.365983][ T13] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1630.366949][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.463075][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.466950][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.472363][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.480446][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.487518][T13958] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.504427][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.508256][T21912] BTRFS warning (device loop6): couldn't read tree root [ 1630.508286][T21912] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1630.510544][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.512617][ T1537] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1630.512727][T21912] BTRFS warning (device loop6): couldn't read tree root [ 1630.512755][T21912] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1630.513028][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.513812][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.665162][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.665889][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.666473][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.700546][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.718222][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.720034][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.752359][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.753027][T21912] BTRFS info (device loop6): rebuilding free space tree [ 1630.909910][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1630.911673][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1630.912725][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.913689][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.972121][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1630.975892][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.021693][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.033822][ T150] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.058335][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.064530][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.108772][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.114398][ T150] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1631.177322][ T13] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.182082][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.279353][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.292986][ T9391] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.309608][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.342769][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.342824][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.342856][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.342897][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.343114][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 1631.465836][T21912] BTRFS info (device loop6): checking UUID tree [ 1631.466799][T21912] BTRFS info (device loop6): enabling ssd optimizations [ 1631.466824][T21912] BTRFS info (device loop6): turning on async discard [ 1631.466841][T21912] BTRFS info (device loop6): enabling free space tree [ 1631.466858][T21912] BTRFS info (device loop6): force clearing of disk cache [ 1631.466874][T21912] BTRFS info (device loop6): enabling auto defrag [ 1631.466891][T21912] BTRFS info (device loop6): trying to use backup root at mount time [ 1631.466956][T21912] BTRFS info (device loop6): use zstd compression, level 3 [ 1632.273521][T21952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5506'. [ 1632.539643][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1632.618172][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1632.860855][T21958] netlink: 'syz.4.5508': attribute type 1 has an invalid length. [ 1633.899031][T21958] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1634.411256][ C1] net_ratelimit: 5635 callbacks suppressed [ 1634.411281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1634.411689][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1634.412092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1634.412493][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1634.413902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1634.414417][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1634.414851][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1634.416649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1634.417039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1634.417427][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1637.208401][ T13] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1637.208472][ T13] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1638.633635][T22003] netlink: 'syz.4.5522': attribute type 1 has an invalid length. [ 1638.633662][T22003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5522'. [ 1639.767508][ C1] net_ratelimit: 8030 callbacks suppressed [ 1639.767533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1639.767944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1639.768711][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1639.769611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1639.770471][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1639.770862][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1639.771266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1639.771656][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1639.772059][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1639.772473][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1643.458592][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5548'. [ 1643.458634][T22067] netlink: 'syz.0.5548': attribute type 8 has an invalid length. [ 1643.534984][T22067] geneve2: entered promiscuous mode [ 1643.535013][T22067] geneve2: entered allmulticast mode [ 1645.123555][ C1] net_ratelimit: 5465 callbacks suppressed [ 1645.123581][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1645.124650][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1645.125144][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.125593][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.126027][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.126469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1645.126907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1645.201335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1645.201787][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1645.202190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1645.735731][ T150] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1645.848961][ T150] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1645.995871][ T150] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1646.119793][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1646.510834][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1647.056559][T13958] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 1648.888188][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1648.888315][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1650.351509][T14736] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1650.479482][ C1] net_ratelimit: 6760 callbacks suppressed [ 1650.479509][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1650.479906][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.480316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.483442][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.483977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1650.484518][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1650.486180][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1650.486680][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1650.487153][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1650.489223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1654.369114][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5578'. [ 1654.491826][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1654.653122][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1654.658111][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1654.715329][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1654.717693][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1655.061444][T22154] loop5: detected capacity change from 0 to 2048 [ 1655.123776][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.135647][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.135695][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.135719][T13958] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.147792][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.149763][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.154763][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.167703][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.167947][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.168650][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1655.175394][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.183566][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.187828][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.196360][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.202968][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.219508][ T9391] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.236438][ T150] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.258863][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.268944][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1655.835463][ C1] net_ratelimit: 4741 callbacks suppressed [ 1655.835488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1655.836009][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1655.836254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.836488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.836693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.837009][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1655.837228][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1655.837930][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1655.838161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1655.838376][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1656.296542][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1656.296610][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1656.302156][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1656.536711][ T1537] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1656.557713][T22154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0500-000000000000 r/w without journal. Quota mode: none. [ 1657.259149][ T5629] Bluetooth: hci5: command tx timeout [ 1657.476216][T22170] bridge1: entered allmulticast mode [ 1657.741848][T15285] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0500-000000000000. [ 1657.898053][ T3307] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1657.943520][ T1537] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1657.991334][T15285] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1659.495256][ T5629] Bluetooth: hci5: command tx timeout [ 1661.191673][ C1] net_ratelimit: 7747 callbacks suppressed [ 1661.191699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1661.192773][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1661.193745][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1661.194202][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1661.194627][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1661.202323][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1661.202744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1661.203286][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1661.204823][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1661.205337][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1661.766608][ T5629] Bluetooth: hci5: command tx timeout [ 1664.443613][ T5629] Bluetooth: hci5: command tx timeout [ 1666.554750][ C1] net_ratelimit: 7287 callbacks suppressed [ 1666.554776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1666.556232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1666.556649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1666.557027][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1666.657930][T22268] netlink: 'syz.3.5623': attribute type 2 has an invalid length. [ 1666.695464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.695843][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.703956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:60:10:76:85:d0, vlan:0) [ 1666.704315][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.704654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.712778][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1667.975564][ C0] [ 1667.975580][ C0] ====================================================== [ 1667.975590][ C0] WARNING: possible circular locking dependency detected [ 1667.975600][ C0] syzkaller #0 Not tainted [ 1667.975612][ C0] ------------------------------------------------------ [ 1667.975621][ C0] syz.3.5623/22268 is trying to acquire lock: [ 1667.975631][ C0] ffff88806f350b60 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 1667.975700][ C0] [ 1667.975700][ C0] but task is already holding lock: [ 1667.975708][ C0] ffff888042a4c8a0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 1667.975760][ C0] [ 1667.975760][ C0] which lock already depends on the new lock. [ 1667.975760][ C0] [ 1667.975767][ C0] [ 1667.975767][ C0] the existing dependency chain (in reverse order) is: [ 1667.975774][ C0] [ 1667.975774][ C0] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 1667.975802][ C0] rt_spin_lock+0x83/0x400 [ 1667.975830][ C0] __sk_receive_skb+0x1f1/0x9e0 [ 1667.975853][ C0] phonet_rcv+0x781/0xc40 [ 1667.975868][ C0] process_backlog+0x5e1/0xc60 [ 1667.975891][ C0] __napi_poll+0xab/0x550 [ 1667.975910][ C0] net_rx_action+0x696/0xe00 [ 1667.975932][ C0] handle_softirqs+0x1de/0x6d0 [ 1667.975955][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1667.975976][ C0] netif_rx+0xb9/0xf0 [ 1667.975992][ C0] pn_send+0x62a/0x8e0 [ 1667.976005][ C0] pn_skb_send+0x218/0x530 [ 1667.976018][ C0] pipe_snd_status+0x1f1/0x320 [ 1667.976034][ C0] pipe_do_rcv+0xf15/0x16a0 [ 1667.976049][ C0] __sk_receive_skb+0x962/0x9e0 [ 1667.976078][ C0] pep_do_rcv+0x685/0xaa0 [ 1667.976094][ C0] __release_sock+0x2a9/0x3d0 [ 1667.976112][ C0] release_sock+0x1be/0x290 [ 1667.976133][ C0] pep_sock_accept+0xd47/0x11e0 [ 1667.976148][ C0] pn_socket_accept+0xc1/0x310 [ 1667.976171][ C0] do_accept+0x6ca/0x930 [ 1667.976194][ C0] __sys_accept4+0x139/0x230 [ 1667.976215][ C0] __x64_sys_accept4+0x9a/0xb0 [ 1667.976237][ C0] do_syscall_64+0x15f/0xf80 [ 1667.976256][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.976271][ C0] [ 1667.976271][ C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 1667.976297][ C0] __lock_acquire+0x15a5/0x2d10 [ 1667.976314][ C0] lock_acquire+0x106/0x350 [ 1667.976329][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 1667.976351][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 1667.976373][ C0] pep_do_rcv+0x685/0xaa0 [ 1667.976388][ C0] __sk_receive_skb+0x962/0x9e0 [ 1667.976410][ C0] phonet_rcv+0x781/0xc40 [ 1667.976423][ C0] process_backlog+0x5e1/0xc60 [ 1667.976445][ C0] __napi_poll+0xab/0x550 [ 1667.976464][ C0] net_rx_action+0x696/0xe00 [ 1667.976485][ C0] handle_softirqs+0x1de/0x6d0 [ 1667.976506][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1667.976528][ C0] netif_rx+0xb9/0xf0 [ 1667.976543][ C0] pn_send+0x62a/0x8e0 [ 1667.976556][ C0] pn_skb_send+0x218/0x530 [ 1667.976569][ C0] pep_sock_close+0x2c1/0x5b0 [ 1667.976589][ C0] pn_socket_release+0x9b/0xc0 [ 1667.976610][ C0] __sock_release+0xb9/0x250 [ 1667.976629][ C0] sock_close+0x1c/0x30 [ 1667.976647][ C0] __fput+0x461/0xa70 [ 1667.976665][ C0] task_work_run+0x1d9/0x270 [ 1667.976682][ C0] get_signal+0x11eb/0x1330 [ 1667.976703][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 1667.976720][ C0] exit_to_user_mode_loop+0x8c/0x4d0 [ 1667.976735][ C0] do_syscall_64+0x33e/0xf80 [ 1667.976753][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.976768][ C0] [ 1667.976768][ C0] other info that might help us debug this: [ 1667.976768][ C0] [ 1667.976774][ C0] Possible unsafe locking scenario: [ 1667.976774][ C0] [ 1667.976779][ C0] CPU0 CPU1 [ 1667.976785][ C0] ---- ---- [ 1667.976790][ C0] lock(slock-AF_PHONET); [ 1667.976802][ C0] lock(slock-AF_PHONET/1); [ 1667.976818][ C0] lock(slock-AF_PHONET); [ 1667.976836][ C0] lock(slock-AF_PHONET/1); [ 1667.976858][ C0] [ 1667.976858][ C0] *** DEADLOCK *** [ 1667.976858][ C0] [ 1667.976862][ C0] 7 locks held by syz.3.5623/22268: [ 1667.976873][ C0] #0: ffff888040d0c638 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 1667.976920][ C0] #1: ffff888042a4c098 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 1667.976958][ C0] #2: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1667.977001][ C0] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 1667.977044][ C0] #4: ffff888042a4c8a0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 1667.977095][ C0] #5: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1667.977138][ C0] #6: ffff888042a4c958 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 1667.977175][ C0] [ 1667.977175][ C0] stack backtrace: [ 1667.977186][ C0] CPU: 0 UID: 0 PID: 22268 Comm: syz.3.5623 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1667.977206][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1667.977216][ C0] Call Trace: [ 1667.977222][ C0] [ 1667.977230][ C0] dump_stack_lvl+0xe8/0x150 [ 1667.977251][ C0] print_circular_bug+0x2e1/0x300 [ 1667.977273][ C0] check_noncircular+0x12e/0x150 [ 1667.977296][ C0] __lock_acquire+0x15a5/0x2d10 [ 1667.977314][ C0] ? rcu_is_watching+0x15/0xb0 [ 1667.977340][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 1667.977362][ C0] lock_acquire+0x106/0x350 [ 1667.977378][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 1667.977401][ C0] ? sk_filter_trim_cap+0x8f1/0xce0 [ 1667.977425][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 1667.977448][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 1667.977470][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 1667.977490][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 1667.977508][ C0] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 1667.977533][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1667.977559][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 1667.977585][ C0] pep_do_rcv+0x685/0xaa0 [ 1667.977603][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 1667.977623][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 1667.977640][ C0] ? phonet_rcv+0x781/0xc40 [ 1667.977654][ C0] __sk_receive_skb+0x962/0x9e0 [ 1667.977680][ C0] phonet_rcv+0x781/0xc40 [ 1667.977697][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1667.977723][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 1667.977740][ C0] ? process_backlog+0x271/0xc60 [ 1667.977763][ C0] ? process_backlog+0x271/0xc60 [ 1667.977785][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 1667.977800][ C0] process_backlog+0x5e1/0xc60 [ 1667.977829][ C0] __napi_poll+0xab/0x550 [ 1667.977852][ C0] net_rx_action+0x696/0xe00 [ 1667.977880][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1667.977903][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1667.977924][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1667.977946][ C0] ? enqueue_to_backlog+0x340/0xcb0 [ 1667.977971][ C0] handle_softirqs+0x1de/0x6d0 [ 1667.977997][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1667.978021][ C0] netif_rx+0xb9/0xf0 [ 1667.978040][ C0] pn_send+0x62a/0x8e0 [ 1667.978057][ C0] pn_skb_send+0x218/0x530 [ 1667.978080][ C0] pep_sock_close+0x2c1/0x5b0 [ 1667.978098][ C0] pn_socket_release+0x9b/0xc0 [ 1667.978122][ C0] __sock_release+0xb9/0x250 [ 1667.978142][ C0] ? __pfx_sock_close+0x10/0x10 [ 1667.978162][ C0] sock_close+0x1c/0x30 [ 1667.978182][ C0] __fput+0x461/0xa70 [ 1667.978204][ C0] task_work_run+0x1d9/0x270 [ 1667.978224][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1667.978243][ C0] ? task_work_add+0x395/0x440 [ 1667.978262][ C0] ? __pfx_task_work_add+0x10/0x10 [ 1667.978281][ C0] get_signal+0x11eb/0x1330 [ 1667.978309][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 1667.978327][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1667.978352][ C0] exit_to_user_mode_loop+0x8c/0x4d0 [ 1667.978367][ C0] ? rcu_is_watching+0x15/0xb0 [ 1667.978386][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.978403][ C0] do_syscall_64+0x33e/0xf80 [ 1667.978423][ C0] ? trace_irq_disable+0x3b/0x140 [ 1667.978447][ C0] ? clear_bhb_loop+0x40/0x90 [ 1667.978466][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.978482][ C0] RIP: 0033:0x7facadb3cdd9 [ 1667.978497][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.978512][ C0] RSP: 002b:00007facabd96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1667.978530][ C0] RAX: 0000000000000000 RBX: 00007facaddb5fa0 RCX: 00007facadb3cdd9 [ 1667.978542][ C0] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005 [ 1667.978553][ C0] RBP: 00007facadbd2d69 R08: 0000000000000000 R09: 0000000000000000 [ 1667.978564][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1667.978575][ C0] R13: 00007facaddb6038 R14: 00007facaddb5fa0 R15: 00007fff6c2eda68 [ 1667.978593][ C0] [ 1667.999750][ T1582] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.329393][ T1582] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.590397][ T1582] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.897688][ T1582] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.413980][ T1582] veth1_to_bridge: left promiscuous mode [ 1671.414203][ T1582] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1671.497484][ T1582] bridge_slave_1: left allmulticast mode [ 1671.497518][ T1582] bridge_slave_1: left promiscuous mode [ 1671.497682][ T1582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.583507][ T1582] bridge_slave_0: left allmulticast mode [ 1671.583539][ T1582] bridge_slave_0: left promiscuous mode [ 1671.583734][ T1582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.232532][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1672.302828][T22138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.303172][T22138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.303417][T22138] bridge_slave_0: entered allmulticast mode [ 1672.305163][T22138] bridge_slave_0: entered promiscuous mode [ 1672.310617][T22138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.311035][T22138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.311312][T22138] bridge_slave_1: entered allmulticast mode [ 1672.313419][T22138] bridge_slave_1: entered promiscuous mode [ 1672.425318][T22138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.439484][T22138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.484114][T22138] team0: Port device team_slave_0 added [ 1672.488679][T22138] team0: Port device team_slave_1 added [ 1672.535722][T22138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.535912][T22138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.535962][T22138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.537740][T22138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.537752][T22138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.537770][T22138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.677443][T22138] hsr_slave_0: entered promiscuous mode [ 1672.679223][T22138] hsr_slave_1: entered promiscuous mode [ 1672.680614][T22138] debugfs: 'hsr0' already exists in 'hsr' [ 1672.680637][T22138] Cannot create hsr debugfs directory [ 1673.022988][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1673.707216][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1673.893164][ T1582] hsr_slave_0: left promiscuous mode [ 1673.934553][ T1582] hsr_slave_1: left promiscuous mode [ 1673.935311][ T1582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1673.935330][ T1582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1673.999543][ T1582] veth1_to_hsr: left allmulticast mode [ 1673.999658][ T1582] veth1_to_hsr: left promiscuous mode [ 1673.999719][ T1582] veth1_macvtap: left promiscuous mode [ 1673.999754][ T1582] veth0_macvtap: left promiscuous mode [ 1673.999851][ T1582] veth1_vlan: left promiscuous mode [ 1673.999915][ T1582] veth0_vlan: left promiscuous mode [ 1674.876569][ T1582] team0 (unregistering): Port device team_slave_1 removed [ 1674.897505][ T1582] team0 (unregistering): Port device team_slave_0 removed [ 1675.155132][T22138] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1675.189921][T22138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1675.200523][T22138] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1675.232481][T22138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1675.233751][T22138] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1675.277506][T22138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1675.278336][T22138] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1675.392601][T22138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1675.683775][T22138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.736431][T22138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.790323][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.790419][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.793771][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1675.805050][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.805161][ T9412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.536215][T22138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.710838][T22138] veth0_vlan: entered promiscuous mode [ 1676.722649][T22138] veth1_vlan: entered promiscuous mode [ 1676.756022][T22138] veth0_macvtap: entered promiscuous mode [ 1676.768890][T22138] veth1_macvtap: entered promiscuous mode [ 1676.791373][T22138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.806812][T22138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.818983][ T1582] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.819699][ T1582] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.819748][ T1582] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.819783][ T1582] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.966331][T22138] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 1676.994505][ T1582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.994531][ T1582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.997231][T22138] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 1677.039719][ T9412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.039743][ T9412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50