last executing test programs: 13.458559701s ago: executing program 2 (id=2789): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@gettaction={0x114, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x40, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x114}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13.348838793s ago: executing program 2 (id=2791): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x33832, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d941373fc0900c5de4e8ed05380a32aee9fec3f54e6a4c47edfc5f81b8877a87f3cbb30a7af5491a2996daf5d42b10e26efeec957d974c180a1c26a3892e411340d9788cea0bb79adbaa8b7b82beb6e7bfe7997135b66258b888a08e4386cc06dd5208d098e1b9175e68494be2413b770cfcf4673cf9c4d4d50a7af97a5", @ANYRES8=r0, @ANYRES64=r4]) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1f0a00c9000001aa0101000010ffffff4cc64347000000000000000000ff0100"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="03c9002dcce6e897ef8aea15315c204134cf2a4ca9c25db50b2c59267ba9955b180f9b5ed400800000000000007d103912"], 0x31) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x1000f0000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 13.248445673s ago: executing program 0 (id=2794): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f7, &(0x7f0000000040)={'bridge_slave_0\x00', @random="4f33e363a4b1"}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syslog(0x2, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/73}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x2, 0x0, [{0x0, 0x71, &(0x7f0000000b80)=""/113}, {0x0, 0x1000, &(0x7f0000001600)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@llx, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) 12.850344144s ago: executing program 4 (id=2796): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/88, 0x1}, {&(0x7f0000000340)=""/4084, 0xff4}], 0x2, 0x0, 0x63}}], 0x1, 0x0, 0x0) 12.406031558s ago: executing program 0 (id=2797): io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="04000000000000000800290000000000080028000000000056ca065a3a178999ae86b110087018f5cbf7d5d7b08665f63201a151cad24942f83ca48fbb4a2c7aa1c6dac21c92"], 0x58}}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000002040)) 11.701997195s ago: executing program 4 (id=2800): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/179, 0xb3, 0x0, &(0x7f00000006c0)=""/20, 0x14}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @cb_func, @jmp={0x5, 0x1, 0x2, 0xe, 0xb, 0x0, 0x10}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x39, &(0x7f00000001c0)=""/57, 0x41100, 0x10, '\x00', r6, @fallback=0x2, r7, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r1, r0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r12, 0x1, 0x80, 0x6, @link_local}, 0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x4c}}, 0x0) 11.507939351s ago: executing program 1 (id=2803): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=@framed, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xffff}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) 11.363950496s ago: executing program 1 (id=2804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 11.331050255s ago: executing program 4 (id=2805): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0xa3b6, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000d40)='./file0\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x3, 0x7bd, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="2400000000000000000000000006000240000000000500030000000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg0\x00'}) socket$packet(0x11, 0x2, 0x300) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0xf0, 0xf0, 0xffffffff, 0x390, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 11.126387107s ago: executing program 1 (id=2807): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 11.081783618s ago: executing program 2 (id=2809): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='uid_map\x00') readv(r0, &(0x7f0000000180), 0x0) getpgrp(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) sync() ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000480)={0x1000000}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) 10.950739726s ago: executing program 3 (id=2810): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) syz_emit_ethernet(0x6f, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700393a060000000000"], 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 10.378075945s ago: executing program 0 (id=2811): write(0xffffffffffffffff, &(0x7f0000000040)="3a03", 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r3, 0x101, 0x2, 0x0, 0x0) r4 = getpid() r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x16) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 10.356984048s ago: executing program 3 (id=2812): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/179, 0xb3, 0x0, &(0x7f00000006c0)=""/20, 0x14}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @cb_func, @jmp={0x5, 0x1, 0x2, 0xe, 0xb, 0x0, 0x10}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x39, &(0x7f00000001c0)=""/57, 0x41100, 0x10, '\x00', r6, @fallback=0x2, r7, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r11, 0x1, 0x80, 0x6, @link_local}, 0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x0) 10.322518966s ago: executing program 1 (id=2813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x0, 0x4}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'vxcan1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) getpriority(0x2, 0x0) 10.133931765s ago: executing program 2 (id=2814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) getpgrp(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec03010000000000000000000000000a14000000fa030100ee"], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) dup(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sync() 9.497478516s ago: executing program 0 (id=2815): sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000ac0)="07d98d396058a855921d034d0fb8034a5317ce586c382c8d41f8212309f82dd261e5f9263338a10244d7b49f8608f304ee79d951cd4ca8c44b84d8b2da6feb009a0d53224f69c7a03710", 0x4a}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51", 0x12}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20004841) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 9.432239467s ago: executing program 3 (id=2816): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000dc0)) 9.334076219s ago: executing program 4 (id=2817): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@snprintf]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.283469095s ago: executing program 3 (id=2818): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [0xffffff00], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0xe0, 0x100, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x1}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0xe}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2b7, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {0x1}, {0x4000}, {0x0, 0x0, 0x0, 0x420004}]}) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) 9.185053294s ago: executing program 0 (id=2819): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.173611209s ago: executing program 2 (id=2820): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000240), 0x2000011a) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2084) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 9.119383092s ago: executing program 4 (id=2821): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x2a, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xfd}]}]}]}}]}, 0x8c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.059514085s ago: executing program 3 (id=2822): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 9.030339647s ago: executing program 0 (id=2823): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'virt_wifi0\x00', &(0x7f0000000780)=@ethtool_rxnfc={0x4b, 0x12, 0x100000000000, {0x11, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x1}, @dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x7}, {0x0, @empty, 0xcf29, 0xcddf, [0x3ff, 0x3]}, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e22, 0x4e24, 0x99}, {0x0, @random="0642bf501cce", 0x2, 0x4, [0x8, 0x6]}, 0x2, 0xfff}}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x11, 0xa, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32], 0x6, 0x2a3, &(0x7f0000000180)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r4, r4, 0x0, 0x80000000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001340)=""/102378, 0x7706c522012798af) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x12}, &(0x7f0000bbdffc)) mq_notify(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000140)='xprtrdma_frwr_sgerr\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x400, 0x250, 0x1a8, 0xffffffff, 0x1a8, 0x250, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @remote, @gre_key=0x3, @gre_key=0x8}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xb, 0x5], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x4, 0x2, 0x0, 0x6, 0x3], 0x2, 0x3}, {0xffffffffffffffff, [0x4, 0x6, 0x1, 0x1, 0x4, 0x4], 0x2, 0x3}}}}, {{@ip={@broadcast, @private=0xa010100, 0xffffff00, 0xff000000, 'vlan1\x00', 'gretap0\x00', {}, {0xff}, 0x89, 0x1, 0x8}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @loopback, @empty, @port=0x4e22, @gre_key=0x8}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x4, 0x3, 0x1, 0x2, 0x2], 0x4, 0x4}}}, @common=@unspec=@connmark={{0x30}, {0x7, 0xe001, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @multicast2, @rand_addr=0x64010100, @icmp_id=0x65, @gre_key=0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x51, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) 8.990078437s ago: executing program 1 (id=2824): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000100)=0x81, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 8.989085989s ago: executing program 4 (id=2825): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000300)={{r0}, "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"}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x44, 0x20000000, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000001300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r5 = socket$kcm(0x10, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mremap(&(0x7f000090e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000139000/0x4000)=nil) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') 8.794631316s ago: executing program 1 (id=2826): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/179, 0xb3, 0x0, &(0x7f00000006c0)=""/20, 0x14}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @cb_func, @jmp={0x5, 0x1, 0x2, 0xe, 0xb, 0x0, 0x10}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x39, &(0x7f00000001c0)=""/57, 0x41100, 0x10, '\x00', r6, @fallback=0x2, r7, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r11, 0x1, 0x80, 0x6, @link_local}, 0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x0) 8.021747906s ago: executing program 3 (id=2827): write(0xffffffffffffffff, &(0x7f0000000040)="3a03", 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r3, 0x101, 0x2, 0x0, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x16) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 0s ago: executing program 2 (id=2828): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0xa3b6, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000d40)='./file0\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x3, 0x7bd, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="2400000000000000000000000006000240000000000500030000000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg0\x00'}) socket$packet(0x11, 0x2, 0x300) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0xf0, 0xf0, 0xffffffff, 0x390, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) kernel console output (not intermixed with test programs): 04971][T30448] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3139.018721][T30448] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 3139.182434][T30448] BTRFS info (device loop1): using free-space-tree [ 3139.509233][ T29] audit: type=1800 audit(1728419514.600:336): pid=30446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2546" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 3139.562757][ T29] audit: type=1800 audit(1728419514.630:337): pid=30441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2544" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 3139.634632][T29331] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3139.694342][T29968] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3139.717345][ T29] audit: type=1800 audit(1728419514.640:338): pid=30446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2546" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 3139.740974][ T29] audit: type=1800 audit(1728419514.730:339): pid=30448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2547" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3139.773033][ T29] audit: type=1800 audit(1728419514.860:340): pid=30519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2547" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3139.839087][T30482] loop3: detected capacity change from 0 to 32768 [ 3139.856509][T30482] btrfs: Deprecated parameter 'usebackuproot' [ 3139.863217][T30482] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 3139.875204][T30482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2553 (30482) [ 3139.947859][T29363] BTRFS info (device loop1): last unmount of filesystem 5315c0a8-f056-45a2-9a56-8b5f816fe54e [ 3139.966031][T30492] loop4: detected capacity change from 0 to 32768 [ 3139.987640][T30482] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3139.988839][T30492] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2554 (30492) [ 3140.031485][T30492] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 3140.041892][T30482] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 3140.044423][T30492] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 3141.272028][T30550] netlink: 'syz.1.2557': attribute type 16 has an invalid length. [ 3141.279956][T30550] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2557'. [ 3142.409983][T30482] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 3142.411145][T30492] BTRFS info (device loop4): rebuilding free space tree [ 3142.901414][T30549] loop2: detected capacity change from 0 to 2048 [ 3143.758318][T30492] BTRFS info (device loop4): disabling free space tree [ 3143.773673][T30492] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 3143.790398][T30549] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 3143.803822][T30549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3143.866399][T30492] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 3144.016157][T30482] BTRFS error (device loop3): open_ctree failed [ 3144.201989][T29362] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 3144.385987][T30578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 3144.895882][T30583] loop1: detected capacity change from 0 to 512 [ 3144.903130][T30583] EXT4-fs: Ignoring removed oldalloc option [ 3144.909103][T30583] EXT4-fs: Ignoring removed oldalloc option [ 3144.928840][T30583] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3144.948298][T30583] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2563: Parent and EA inode have the same ino 15 [ 3145.051799][T30583] EXT4-fs (loop1): Remounting filesystem read-only [ 3145.058465][T30583] EXT4-fs (loop1): 1 orphan inode deleted [ 3145.066880][T30583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 3145.804490][T29363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3146.268993][T30576] loop0: detected capacity change from 0 to 40427 [ 3146.286953][T30576] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 3146.304736][T30576] F2FS-fs (loop0): invalid crc value [ 3146.327745][T30599] loop1: detected capacity change from 0 to 1024 [ 3146.403523][T30587] loop2: detected capacity change from 0 to 32768 [ 3146.446093][T30587] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2564 (30587) [ 3147.026834][ T29] audit: type=1800 audit(1728419522.120:341): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2566" name="file1" dev="loop1" ino=25 res=0 errno=0 [ 3147.058747][T30576] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3147.076105][T30587] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3147.116914][T30587] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 3147.147084][T30587] BTRFS info (device loop2): using free-space-tree [ 3147.542839][ T29] audit: type=1800 audit(1728419522.640:342): pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2564" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 3148.136711][T30610] loop1: detected capacity change from 0 to 32768 [ 3148.228924][ T29] audit: type=1800 audit(1728419523.310:343): pid=30638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2564" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 3148.278394][T30610] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2568 (30610) [ 3148.389605][T30610] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3148.409737][T30610] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 3148.426832][T30610] BTRFS info (device loop1): using free-space-tree [ 3148.440925][T29968] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3149.173310][ T29] audit: type=1800 audit(1728419524.270:344): pid=30610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2568" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3149.312584][T30636] loop0: detected capacity change from 0 to 32768 [ 3149.371521][T30636] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2571 (30636) [ 3149.395249][T29363] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3149.426983][T30636] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 3149.437872][T30636] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 3149.665620][T30636] BTRFS info (device loop0): rebuilding free space tree [ 3149.834017][T30636] BTRFS info (device loop0): disabling free space tree [ 3149.840917][T30636] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 3149.851055][T30636] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 3149.937415][ T29] audit: type=1800 audit(1728419525.030:345): pid=30636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2571" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 3150.305280][T30683] loop4: detected capacity change from 0 to 1024 [ 3150.507745][T30672] loop3: detected capacity change from 0 to 32768 [ 3150.519690][T30672] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2574 (30672) [ 3150.524889][T30683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3150.562528][T30672] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3150.573042][T30672] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 3150.583895][T30672] BTRFS info (device loop3): using free-space-tree [ 3150.608943][T30695] loop1: detected capacity change from 0 to 764 [ 3150.681653][T30681] loop2: detected capacity change from 0 to 32768 [ 3150.689219][T30681] BTRFS: device /dev/loop2 (7:2) using temp-fsid a112ec69-8eb1-4331-840d-3c3da7d44518 [ 3150.698983][T30681] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2575 (30681) [ 3150.726808][ T29] audit: type=1800 audit(1728419525.820:346): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2574" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 3150.750562][T30681] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3150.781331][T30681] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 3150.801588][T30681] BTRFS info (device loop2): using free-space-tree [ 3150.815783][T29331] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 3150.827968][T29373] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3151.080761][T29968] BTRFS info (device loop2): last unmount of filesystem a112ec69-8eb1-4331-840d-3c3da7d44518 [ 3151.186504][T30732] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 3151.216424][T30731] loop0: detected capacity change from 0 to 1024 [ 3151.844849][ T29] audit: type=1800 audit(1728419526.930:347): pid=30736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2579" name="file1" dev="loop0" ino=25 res=0 errno=0 [ 3152.306252][T30741] loop2: detected capacity change from 0 to 128 [ 3152.358129][T30741] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3152.372741][T30741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 3152.384656][T30741] System zones: 1-3, 19-19, 35-36 [ 3152.398336][T30741] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3152.415185][T30741] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3152.547686][ T29] audit: type=1800 audit(1728419527.640:348): pid=30741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2580" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 3153.553144][T30743] loop0: detected capacity change from 0 to 32768 [ 3153.560111][T30743] btrfs: Deprecated parameter 'usebackuproot' [ 3153.569453][T30743] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 3153.579084][T30743] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2581 (30743) [ 3153.598065][T30743] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3153.609777][T30743] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 3153.656697][T14869] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 3153.720314][T30743] BTRFS warning (device loop0): couldn't read tree root [ 3153.791961][T30743] BTRFS warning (device loop0): try to load backup roots slot 1 [ 3153.860487][T16633] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 3153.882600][T30743] BTRFS warning (device loop0): couldn't read tree root [ 3153.899848][T30743] BTRFS warning (device loop0): try to load backup roots slot 2 [ 3153.919626][T10686] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 3153.930733][T30743] BTRFS warning (device loop0): couldn't read tree root [ 3153.950997][T30743] BTRFS warning (device loop0): try to load backup roots slot 3 [ 3154.012066][T17179] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 3154.024461][T29362] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3154.048165][T30743] BTRFS info (device loop0): rebuilding free space tree [ 3154.097374][T30743] BTRFS info (device loop0): disabling free space tree [ 3154.110264][T30743] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 3154.141178][T30743] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 3154.185088][T29968] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3154.253829][T29331] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3154.268058][T17179] usb 4-1: Using ep0 maxpacket: 32 [ 3154.297508][T17179] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3154.309746][T17179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3154.326913][T17179] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3154.339827][T17179] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 3154.349034][T17179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3154.362379][T17179] usb 4-1: config 0 descriptor?? [ 3154.431935][T18480] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 3154.593855][T18480] usb 2-1: Using ep0 maxpacket: 32 [ 3154.600996][T18480] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3154.606240][T30777] loop4: detected capacity change from 0 to 32768 [ 3154.619256][T30777] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2586 (30777) [ 3154.641937][T13950] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3154.653583][T18480] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3154.663583][T30777] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3154.671824][T18480] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3154.682437][T18480] usb 2-1: Product: syz [ 3154.691961][T18480] usb 2-1: Manufacturer: syz [ 3154.693615][T30777] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 3154.701823][T18480] usb 2-1: SerialNumber: syz [ 3154.715747][T30777] BTRFS info (device loop4): using free-space-tree [ 3154.721378][T18480] usb 2-1: config 0 descriptor?? [ 3154.740611][T30784] loop2: detected capacity change from 0 to 32768 [ 3154.741947][T30779] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3154.759377][T30784] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2589 (30784) [ 3154.764103][T18480] chaoskey 2-1:0.0: Unable to register with hwrng [ 3154.784121][T30769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3154.794000][T30769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3154.835263][T13950] usb 1-1: Using ep0 maxpacket: 32 [ 3154.835772][T30784] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3154.850713][T17179] usbhid 4-1:0.0: can't add hid device: -71 [ 3154.850788][T17179] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3154.855822][T17179] usb 4-1: USB disconnect, device number 26 [ 3154.872226][T30784] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 3154.888140][T30784] BTRFS info (device loop2): using free-space-tree [ 3154.929908][T13950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3154.941233][T13950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3154.951624][T13950] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3154.961052][T13950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3154.977819][T13950] usb 1-1: config 0 descriptor?? [ 3155.008764][T13950] hub 1-1:0.0: USB hub found [ 3155.030202][T30777] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 3155.080913][T29362] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3155.150310][ T29] audit: type=1800 audit(1728419530.240:349): pid=30784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2589" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 3155.219943][T29968] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3155.223617][T13950] hub 1-1:0.0: 1 port detected [ 3155.308829][T30823] loop2: detected capacity change from 0 to 1024 [ 3155.896761][ T29] audit: type=1800 audit(1728419530.990:350): pid=30829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2591" name="file1" dev="loop2" ino=25 res=0 errno=0 [ 3156.007938][T30828] loop3: detected capacity change from 0 to 32768 [ 3156.017342][T30828] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2592 (30828) [ 3156.033846][T30828] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3156.065209][T30828] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 3156.084244][T30828] BTRFS info (device loop3): using free-space-tree [ 3156.110008][T30825] loop4: detected capacity change from 0 to 32768 [ 3156.120799][T30825] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2590 (30825) [ 3156.200793][T30825] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3156.225312][T30825] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 3156.230212][T30839] loop2: detected capacity change from 0 to 764 [ 3156.247525][T30825] BTRFS info (device loop4): using free-space-tree [ 3156.331264][ T29] audit: type=1800 audit(1728419531.420:351): pid=30828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2592" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 3156.396764][T13950] usb 1-1: USB disconnect, device number 14 [ 3156.403381][ T29] audit: type=1800 audit(1728419531.470:352): pid=30828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2592" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 3156.438558][T29362] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3156.472400][T29373] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3156.687662][T30872] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 3156.709952][T30869] loop3: detected capacity change from 0 to 512 [ 3156.716849][T30869] EXT4-fs: Ignoring removed i_version option [ 3156.736049][T30869] EXT4-fs: Ignoring removed nobh option [ 3156.760023][T30869] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 3156.814311][T30869] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 3156.857686][T30869] EXT4-fs (loop3): 1 truncate cleaned up [ 3156.875504][T30869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3156.990401][ T29] audit: type=1800 audit(1728419532.080:353): pid=30869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2595" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 3156.996842][T30878] loop0: detected capacity change from 0 to 1024 [ 3157.125958][T30878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3158.688464][T29373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3159.066110][T30896] loop3: detected capacity change from 0 to 32768 [ 3159.084982][T30896] btrfs: Deprecated parameter 'usebackuproot' [ 3159.098199][T30896] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 3159.121312][T30896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2599 (30896) [ 3159.159339][T30896] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3159.184524][T30896] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 3159.252332][T10686] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 3159.269981][T30896] BTRFS warning (device loop3): couldn't read tree root [ 3159.281000][T30896] BTRFS warning (device loop3): try to load backup roots slot 1 [ 3159.301156][T29331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3159.313308][T10686] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 3159.368158][T30896] BTRFS warning (device loop3): couldn't read tree root [ 3159.391897][T30896] BTRFS warning (device loop3): try to load backup roots slot 2 [ 3159.412421][T16633] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 3159.430544][T30896] BTRFS warning (device loop3): couldn't read tree root [ 3159.439621][T30896] BTRFS warning (device loop3): try to load backup roots slot 3 [ 3159.459185][T30896] BTRFS info (device loop3): rebuilding free space tree [ 3159.488158][T30896] BTRFS info (device loop3): disabling free space tree [ 3159.498504][T30896] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 3159.508736][T30896] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 3159.577051][T29373] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3159.666748][T30925] loop3: detected capacity change from 0 to 1024 [ 3159.771857][T14137] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3159.941862][ T29] audit: type=1800 audit(1728419535.010:354): pid=30927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2603" name="file1" dev="loop3" ino=25 res=0 errno=0 [ 3160.252065][T14137] usb 5-1: Using ep0 maxpacket: 32 [ 3160.259211][T14137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3160.269669][T14137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3160.280750][T14137] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3160.293685][T14137] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 3160.303457][T14137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3160.314467][T14137] usb 5-1: config 0 descriptor?? [ 3160.567310][T30939] loop3: detected capacity change from 0 to 764 [ 3160.729819][T30921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3160.741238][T30921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3160.752720][T14137] usbhid 5-1:0.0: can't add hid device: -71 [ 3160.758737][T14137] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3160.777151][T14137] usb 5-1: USB disconnect, device number 20 [ 3160.826033][T30943] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 3161.369413][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.377730][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.450917][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.494414][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.510168][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.535200][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.543646][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.551592][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.560155][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.635433][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.694778][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.716364][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.733568][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.750150][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.758186][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.767769][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.775622][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.803950][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3161.827459][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.085765][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.130285][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.152472][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.174591][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.201803][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.226318][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.311914][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.319392][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.330562][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.341877][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.350833][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.358313][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.367117][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.374658][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.382586][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.390176][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.398160][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.407039][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.768623][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.784530][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.808682][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.823849][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.831325][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.838795][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.846903][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.854423][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.862944][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.871833][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.891698][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.911027][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.929038][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.936841][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.944530][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.952496][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.960132][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.967846][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3162.977629][T17179] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 3163.087742][T17179] hid-generic 0001:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3163.700812][T30970] loop4: detected capacity change from 0 to 32768 [ 3163.721377][T30970] btrfs: Deprecated parameter 'usebackuproot' [ 3163.739180][T30970] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 3163.752832][T30970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2614 (30970) [ 3163.790973][T30970] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3163.835897][T30970] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 3163.867945][T30975] loop3: detected capacity change from 0 to 128 [ 3163.901338][T30975] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3163.927853][T30975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 3163.938593][T30975] System zones: 1-3, 19-19, 35-36 [ 3163.946821][T30975] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3163.960245][T30975] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3164.014765][T10686] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 3164.033669][T30970] BTRFS warning (device loop4): couldn't read tree root [ 3164.051068][T30970] BTRFS warning (device loop4): try to load backup roots slot 1 [ 3164.067231][T10686] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 3164.106738][T30970] BTRFS warning (device loop4): couldn't read tree root [ 3164.113809][T30970] BTRFS warning (device loop4): try to load backup roots slot 2 [ 3164.121886][T10686] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 3164.132821][T30970] BTRFS warning (device loop4): couldn't read tree root [ 3164.139778][T30970] BTRFS warning (device loop4): try to load backup roots slot 3 [ 3164.151809][T30970] BTRFS info (device loop4): rebuilding free space tree [ 3164.174846][T30970] BTRFS info (device loop4): disabling free space tree [ 3164.190447][T30970] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 3164.202643][T30970] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 3164.674652][T29362] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3164.868709][T29373] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3164.888179][T29369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3164.916037][T29369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3164.951800][T29369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3164.997053][T31006] xt_limit: Overflow, try lower: 0/0 [ 3165.165517][T29369] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3165.191255][T29369] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3165.224087][T29369] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3165.350137][T31013] loop2: detected capacity change from 0 to 764 [ 3165.481875][T17179] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 3165.497393][T31004] chnl_net:caif_netlink_parms(): no params data found [ 3165.585237][T31004] bridge0: port 1(bridge_slave_0) entered blocking state [ 3165.603582][T31004] bridge0: port 1(bridge_slave_0) entered disabled state [ 3165.610809][T31004] bridge_slave_0: entered allmulticast mode [ 3165.629771][T31004] bridge_slave_0: entered promiscuous mode [ 3165.637654][T31023] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 3165.649323][T17179] usb 4-1: Using ep0 maxpacket: 32 [ 3165.659138][T31004] bridge0: port 2(bridge_slave_1) entered blocking state [ 3165.687562][T31004] bridge0: port 2(bridge_slave_1) entered disabled state [ 3165.690698][T17179] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3165.695117][T31004] bridge_slave_1: entered allmulticast mode [ 3165.711682][T31004] bridge_slave_1: entered promiscuous mode [ 3165.714640][T17179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3165.731214][T17179] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3165.747123][T17179] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 3165.756600][T17179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3165.768686][T17179] usb 4-1: config 0 descriptor?? [ 3165.789125][T31004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3165.816580][T31004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3165.828170][T31025] netlink: 'syz.4.2622': attribute type 10 has an invalid length. [ 3165.848059][T31025] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 3165.865774][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.873984][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.882829][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.889500][T31004] team0: Port device team_slave_0 added [ 3165.891510][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.905600][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.906199][T31004] team0: Port device team_slave_1 added [ 3165.913371][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.926914][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.934651][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.946320][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.954067][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.961570][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.963110][T31004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3165.969608][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.985381][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3165.985678][T31004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3165.994063][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.030631][T31004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3166.045975][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.056440][T31004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3166.063657][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.071170][T31004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3166.098538][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.106280][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.114040][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.121510][T31004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3166.134477][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.142253][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.158637][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.169308][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.177026][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.184494][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.187730][T31009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3166.204847][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.212338][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.219744][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.227317][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.234776][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.242406][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.245164][T31004] hsr_slave_0: entered promiscuous mode [ 3166.249795][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.256077][T31009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3166.262999][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.278123][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.278442][T31004] hsr_slave_1: entered promiscuous mode [ 3166.285557][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285584][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285607][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285629][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285652][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285675][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285699][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285723][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285746][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285770][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285794][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.285816][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.311935][T17179] usbhid 4-1:0.0: can't add hid device: -71 [ 3166.314546][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.314574][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.314598][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.314620][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.314642][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.336819][T31004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3166.344190][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.344217][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.351926][T17179] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3166.359031][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.366410][T31004] Cannot create hsr debugfs directory [ 3166.373681][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.419585][T17179] usb 4-1: USB disconnect, device number 27 [ 3166.424874][ T9] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 3166.492081][ T9] hid-generic 0001:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3166.659341][T31004] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3166.684136][T31004] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3167.144179][T31004] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3167.185440][T31035] input: syz0 as /devices/virtual/input/input31 [ 3167.243730][T31004] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3167.271906][T18478] Bluetooth: hci3: command tx timeout [ 3167.379822][T31004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3167.399557][T31004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3167.503788][T31039] loop2: detected capacity change from 0 to 128 [ 3167.515060][T31004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3167.527010][T31039] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3167.548408][T31037] loop3: detected capacity change from 0 to 32768 [ 3167.557834][T31037] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2625 (31037) [ 3167.584350][T31004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3167.602005][T31039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 3167.609987][T31039] System zones: 1-3, 19-19, 35-36 [ 3167.658296][T31039] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3167.704475][T31037] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3167.724941][T31039] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3167.741979][T31037] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 3167.750662][T31037] BTRFS info (device loop3): using free-space-tree [ 3167.771495][T31004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3167.859832][T31004] 8021q: adding VLAN 0 to HW filter on device team0 [ 3167.870028][T31042] loop4: detected capacity change from 0 to 32768 [ 3167.902750][T14869] bridge0: port 1(bridge_slave_0) entered blocking state [ 3167.909876][T14869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3167.918838][T14869] bridge0: port 2(bridge_slave_1) entered blocking state [ 3167.925956][T14869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3167.926073][T31042] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2627 (31042) [ 3167.959012][T31042] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3167.974525][T31042] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 3168.093155][T31042] BTRFS info (device loop4): using free-space-tree [ 3168.458106][T29968] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3168.498390][T31004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3168.546991][T31004] veth0_vlan: entered promiscuous mode [ 3168.559411][T31004] veth1_vlan: entered promiscuous mode [ 3168.578740][ T29] audit: type=1800 audit(1728419543.670:355): pid=31037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2625" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 3168.622939][T31004] veth0_macvtap: entered promiscuous mode [ 3168.644990][T31004] veth1_macvtap: entered promiscuous mode [ 3168.658627][ T29] audit: type=1800 audit(1728419543.670:356): pid=31037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2625" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 3168.683870][T29373] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3168.706624][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.736132][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.764914][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.784557][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.800576][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.811849][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.824441][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.835015][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.846414][T31071] loop2: detected capacity change from 0 to 40427 [ 3168.847089][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.862090][T31071] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 3168.874599][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.885219][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.895929][T31071] F2FS-fs (loop2): invalid crc value [ 3168.901310][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.903353][T31071] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3168.913675][T31004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3168.948705][ T29] audit: type=1800 audit(1728419544.020:357): pid=31042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2627" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 3168.951033][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3168.998906][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.009611][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3169.038269][T31071] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3169.064799][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.077223][ T29] audit: type=1800 audit(1728419544.170:358): pid=31071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2628" name="bus" dev="loop2" ino=17 res=0 errno=0 [ 3169.102328][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3169.115645][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.126560][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3169.138928][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.149764][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3169.162339][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.176032][T31004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3169.187110][T31004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.209531][T29362] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3169.223138][T31004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3169.241950][T31071] overlayfs: missing 'lowerdir' [ 3169.248856][T31004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3169.257880][T31004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3169.266926][T31004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3169.276491][T31004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3169.287360][T29968] syz-executor: attempt to access beyond end of device [ 3169.287360][T29968] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 3169.332458][T29968] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 3169.339505][T29968] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 3169.346666][T29968] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 3169.365202][T31093] 9pnet_fd: Insufficient options for proto=fd [ 3169.430154][T18478] Bluetooth: hci3: command tx timeout [ 3169.663030][T13952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3169.681818][T13952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3169.689315][T13952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3169.711866][T29968] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 3169.721780][T13952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3170.460498][T31104] netlink: 'syz.3.2633': attribute type 10 has an invalid length. [ 3170.932137][T29369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3170.953947][T31108] loop2: detected capacity change from 0 to 32768 [ 3170.961011][T31108] btrfs: Deprecated parameter 'usebackuproot' [ 3170.967167][T31108] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 3170.969856][T29369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3170.984145][T29369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3170.997042][T31108] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2631 (31108) [ 3170.997340][T29369] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3171.019451][T29369] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3171.026736][T29369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3171.060067][T31108] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3171.122154][T31106] loop3: detected capacity change from 0 to 32768 [ 3171.127619][T31108] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 3171.138924][T31106] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2634 (31106) [ 3171.192586][T31106] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3171.272226][T31106] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 3171.282474][T31106] BTRFS info (device loop3): using free-space-tree [ 3171.408671][T20684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3171.424697][T31112] loop1: detected capacity change from 0 to 32768 [ 3171.436364][T31112] BTRFS: device /dev/loop1 (7:1) using temp-fsid a90ac94d-1654-4813-9ad3-b76e7ba133f2 [ 3171.521028][T18478] Bluetooth: hci3: command tx timeout [ 3171.883230][T31112] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2635 (31112) [ 3171.897779][T20684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3171.909584][T16628] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 3171.923435][T31112] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3171.939910][T31112] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 3171.947663][T31108] BTRFS warning (device loop2): couldn't read tree root [ 3171.949748][T31112] BTRFS info (device loop1): using free-space-tree [ 3171.980421][ T29] audit: type=1800 audit(1728419547.070:359): pid=31106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2634" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 3172.008780][T31108] BTRFS warning (device loop2): try to load backup roots slot 1 [ 3172.111480][T20684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3172.128453][T13952] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 3172.144726][T31108] BTRFS warning (device loop2): couldn't read tree root [ 3172.151694][T31108] BTRFS warning (device loop2): try to load backup roots slot 2 [ 3172.330385][T20684] bond0: (slave netdevsim0): Releasing backup interface [ 3172.376355][T20684] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3172.479097][T10686] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 3172.485432][T31109] chnl_net:caif_netlink_parms(): no params data found [ 3172.489709][T31108] BTRFS warning (device loop2): couldn't read tree root [ 3172.503821][T31108] BTRFS warning (device loop2): try to load backup roots slot 3 [ 3172.525474][T29373] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3172.580184][T31108] BTRFS info (device loop2): rebuilding free space tree [ 3172.625837][ T29] audit: type=1800 audit(1728419547.720:360): pid=31112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2635" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3172.653910][T31108] BTRFS info (device loop2): disabling free space tree [ 3172.679223][T31108] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 3172.724204][T31004] BTRFS info (device loop1): last unmount of filesystem a90ac94d-1654-4813-9ad3-b76e7ba133f2 [ 3172.747421][T20684] bridge_slave_1: left allmulticast mode [ 3172.754822][T20684] bridge_slave_1: left promiscuous mode [ 3172.760461][T20684] bridge0: port 2(bridge_slave_1) entered disabled state [ 3172.788451][T31108] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 3172.880558][ T29] audit: type=1804 audit(1728419547.970:361): pid=31108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2631" name="/newroot/35/file0/bus" dev="loop2" ino=257 res=1 errno=0 [ 3172.906106][T20684] bridge_slave_0: left allmulticast mode [ 3172.912422][T20684] bridge_slave_0: left promiscuous mode [ 3172.918185][T20684] bridge0: port 1(bridge_slave_0) entered disabled state [ 3173.011970][ T29] audit: type=1804 audit(1728419548.020:362): pid=31108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2631" name="/newroot/35/file0/bus" dev="loop2" ino=257 res=1 errno=0 [ 3173.126455][T18478] Bluetooth: hci5: command tx timeout [ 3173.618298][T18478] Bluetooth: hci3: command tx timeout [ 3173.784871][T29968] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3175.264500][T31208] netlink: 'syz.3.2641': attribute type 16 has an invalid length. [ 3175.272538][T31208] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2641'. [ 3175.306882][T31209] 9pnet_fd: Insufficient options for proto=fd [ 3175.322473][T18478] Bluetooth: hci5: command tx timeout [ 3175.485732][T31215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3175.594393][T31215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3175.606933][T20684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3175.630843][T20684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3175.654642][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3175.672935][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3175.680685][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3176.600241][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3176.607748][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3176.615360][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3176.622935][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3176.630391][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3176.638090][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.588073][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.595614][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.595795][T18478] Bluetooth: hci5: command tx timeout [ 3177.603130][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.616078][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.623644][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.631047][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.642652][T20684] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 3177.659163][T20684] bond0 (unregistering): Released all slaves [ 3177.691901][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.699862][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.784767][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.792318][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.799790][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.809376][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.817167][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.824620][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.832122][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.839536][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.847227][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.854716][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.862300][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.870486][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.877969][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.885607][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.893078][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.900496][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.907945][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.915624][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.923365][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.938697][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.946255][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.953726][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.961132][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.968766][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.976696][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.984586][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.992057][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3177.999463][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.006939][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.014369][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.027000][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.034473][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.042003][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.049401][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.056963][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.064415][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.073246][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.090734][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.098418][ T9] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 3178.112752][ T9] hid-generic 0001:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3178.561545][T31219] netlink: 'syz.3.2644': attribute type 10 has an invalid length. [ 3178.574521][T31238] loop2: detected capacity change from 0 to 1024 [ 3178.649216][T31238] hfsplus: extend alloc file! (8192,65536,366) [ 3178.671368][T31109] bridge0: port 1(bridge_slave_0) entered blocking state [ 3178.690662][T31109] bridge0: port 1(bridge_slave_0) entered disabled state [ 3179.508163][T31247] netlink: 'syz.3.2649': attribute type 16 has an invalid length. [ 3179.516597][T31247] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2649'. [ 3179.523944][T31109] bridge_slave_0: entered allmulticast mode [ 3179.536602][T31109] bridge_slave_0: entered promiscuous mode [ 3179.545168][T31109] bridge0: port 2(bridge_slave_1) entered blocking state [ 3179.556245][T31109] bridge0: port 2(bridge_slave_1) entered disabled state [ 3180.522307][T18478] Bluetooth: hci5: command tx timeout [ 3180.526774][T31109] bridge_slave_1: entered allmulticast mode [ 3180.538836][T31109] bridge_slave_1: entered promiscuous mode [ 3180.705321][T31109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3180.788993][T20684] hsr_slave_0: left promiscuous mode [ 3180.814585][T31262] input: syz0 as /devices/virtual/input/input32 [ 3180.863817][T20684] hsr_slave_1: left promiscuous mode [ 3180.876204][T20684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3180.904251][T20684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3180.925779][T20684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3180.977181][T20684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3180.989553][T20684] veth1_macvtap: left promiscuous mode [ 3180.989582][T20684] veth0_macvtap: left promiscuous mode [ 3180.989634][T20684] veth1_vlan: left promiscuous mode [ 3180.989667][T20684] veth0_vlan: left promiscuous mode [ 3181.885277][T20684] team0 (unregistering): Port device team_slave_1 removed [ 3181.900290][T20684] team0 (unregistering): Port device team_slave_0 removed [ 3182.072937][T31109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3182.436487][T31285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 3182.464098][T31109] team0: Port device team_slave_0 added [ 3182.477386][T31109] team0: Port device team_slave_1 added [ 3182.572334][T31109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3182.587910][T31109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3182.757788][T31300] netlink: 'syz.3.2656': attribute type 16 has an invalid length. [ 3182.765865][T31300] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2656'. [ 3182.885784][T31109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3182.903519][T31109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3182.973198][T31109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3183.002021][T31109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3183.125430][T31315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3183.146930][T31315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3183.161854][T31305] netlink: 'syz.1.2658': attribute type 10 has an invalid length. [ 3183.185261][T31305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 3183.234892][T31109] hsr_slave_0: entered promiscuous mode [ 3183.258550][T31109] hsr_slave_1: entered promiscuous mode [ 3183.274062][T31109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3183.289493][T31109] Cannot create hsr debugfs directory [ 3183.348666][T31297] loop4: detected capacity change from 0 to 32768 [ 3183.366359][T31297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2657 (31297) [ 3183.415674][T31297] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3183.458348][T31297] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 3183.973341][T31297] BTRFS info (device loop4): using free-space-tree [ 3184.477435][T31297] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 3185.023729][T29362] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3185.804793][T31377] loop2: detected capacity change from 0 to 1024 [ 3185.901649][T31379] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 3186.484304][T31109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3186.491380][ T29] audit: type=1800 audit(1728419561.180:363): pid=31382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2668" name="file1" dev="loop2" ino=25 res=0 errno=0 [ 3186.515959][T31109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3186.525395][T31109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3186.547115][T31109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3187.163302][T31393] netlink: 'syz.2.2671': attribute type 10 has an invalid length. [ 3187.193478][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.200923][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.218684][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.227124][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.236720][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.245711][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.254737][T31398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3187.255235][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.274721][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.282539][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.297720][T31109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3187.304917][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.329902][T31398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3187.340660][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.348484][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.356125][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.363749][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.371160][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.434335][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.441874][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.449279][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.456750][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.464202][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.471599][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.479149][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.486622][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.494528][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.502383][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.509783][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.517367][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.525347][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.532791][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.540199][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.547678][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.553564][T31109] 8021q: adding VLAN 0 to HW filter on device team0 [ 3187.555130][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.569101][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.576558][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.583994][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.591396][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.599362][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.607437][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.615067][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.622531][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.629948][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.638044][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.645504][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.653052][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.660456][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.668505][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.676106][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.683615][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.691018][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.699178][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.707041][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.714527][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.722527][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.731182][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state [ 3187.732704][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.738292][ T5326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3187.745703][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.754408][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 3187.760391][T29525] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 3187.767328][ T5326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3188.204715][T29525] hid-generic 0001:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3188.223138][T31109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3188.268776][T31392] dccp_close: ABORT with 32 bytes unread [ 3188.308317][T31398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3188.465332][T31398] bond0: (slave netdevsim0): Releasing backup interface [ 3188.486914][T31398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3189.032099][T31398] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3189.207830][T31398] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3189.268564][T31433] loop1: detected capacity change from 0 to 32768 [ 3189.282226][T31433] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2675 (31433) [ 3189.296350][T31398] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3189.310727][T31398] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3189.332693][T31109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3189.358348][T31109] veth0_vlan: entered promiscuous mode [ 3189.370517][T31109] veth1_vlan: entered promiscuous mode [ 3189.391911][T31109] veth0_macvtap: entered promiscuous mode [ 3189.400728][T31109] veth1_macvtap: entered promiscuous mode [ 3189.414556][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3189.425126][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.435049][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3189.446279][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.481831][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3189.502762][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.512734][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3189.525627][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.535543][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3189.546580][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.556891][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3189.567375][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.588005][T31433] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3189.594906][T31109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3189.603653][T31433] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 3189.607503][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3189.624705][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.634748][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3189.645143][T31433] BTRFS info (device loop1): using free-space-tree [ 3189.652542][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.662716][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3189.673461][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.683946][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3189.694686][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3189.818163][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3189.970022][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3190.100524][T31109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3190.111261][T31109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3190.124492][T31109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3190.160691][ T29] audit: type=1800 audit(1728419565.250:364): pid=31433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2675" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3190.189981][ T29] audit: type=1800 audit(1728419565.260:365): pid=31433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2675" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3190.191126][T31448] bond0: entered promiscuous mode [ 3190.238178][T31448] bond_slave_0: entered promiscuous mode [ 3190.246031][T31448] bond_slave_1: entered promiscuous mode [ 3190.259106][T31004] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3190.271005][T31448] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 3190.283797][T31448] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3190.333323][T31448] bond0: left promiscuous mode [ 3190.364897][T31448] bond_slave_0: left promiscuous mode [ 3190.375463][T31448] bond_slave_1: left promiscuous mode [ 3190.392561][T31448] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 3190.446045][T31469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3190.506881][T31475] Process accounting resumed [ 3190.874051][T31109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3190.883009][T31109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3190.891789][T31109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3190.900494][T31109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3190.947818][T31460] dccp_close: ABORT with 32 bytes unread [ 3191.058688][T31469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3191.255577][T20684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3191.306564][ T5326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3191.331973][T20684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3191.374826][ T5326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3191.516692][T31469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3191.651061][T31494] bridge_slave_0: left allmulticast mode [ 3191.657047][T31494] bridge_slave_0: left promiscuous mode [ 3191.664113][T31494] bridge0: port 1(bridge_slave_0) entered disabled state [ 3191.677105][T31494] bridge_slave_1: left allmulticast mode [ 3191.683027][T31494] bridge_slave_1: left promiscuous mode [ 3191.688887][T31494] bridge0: port 2(bridge_slave_1) entered disabled state [ 3191.704236][T31494] bond0: (slave bond_slave_0): Releasing backup interface [ 3191.717109][T31494] bond0: (slave bond_slave_1): Releasing backup interface [ 3191.730850][T31494] team0: Port device team_slave_0 removed [ 3191.748060][T31494] team0: Port device team_slave_1 removed [ 3191.756459][T31494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3191.765132][T31494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3191.775874][T31494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3191.785212][T31494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3191.805119][T31494] bond0: (slave netdevsim0): Releasing backup interface [ 3191.858122][T31469] bond0: (slave netdevsim0): Releasing backup interface [ 3191.875577][T31469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3192.058762][T31469] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3192.067606][T31522] loop4: detected capacity change from 0 to 1024 [ 3192.111565][T31469] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3192.188494][T31530] loop0: detected capacity change from 0 to 764 [ 3192.202893][T31522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3192.215237][T31469] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3192.218576][T31469] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3193.482837][T31562] netlink: 'syz.2.2691': attribute type 16 has an invalid length. [ 3193.490817][T31562] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2691'. [ 3193.859444][T29362] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3193.882618][T31566] input: syz0 as /devices/virtual/input/input33 [ 3194.313537][T31571] xt_limit: Overflow, try lower: 0/0 [ 3194.452660][T31571] loop3: detected capacity change from 0 to 40427 [ 3194.464898][T31571] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3194.472718][T31571] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3194.513253][T31571] F2FS-fs (loop3): invalid crc value [ 3194.545658][T31571] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3194.579172][T31571] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3194.586277][T31571] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3194.643792][T31586] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 3194.702085][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3194.864127][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 3194.920428][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3194.941690][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3194.982175][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3194.982835][T31573] loop2: detected capacity change from 0 to 40427 [ 3195.026109][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3195.062052][T31573] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 3195.067470][ T9] usb 5-1: config 0 descriptor?? [ 3195.084929][T31573] F2FS-fs (loop2): invalid crc value [ 3195.093317][T31573] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3195.109007][ T9] hub 5-1:0.0: USB hub found [ 3195.217097][T31603] netlink: 'syz.3.2697': attribute type 16 has an invalid length. [ 3195.225431][T31603] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2697'. [ 3195.484013][ T9] hub 5-1:0.0: 1 port detected [ 3195.509098][T31573] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3195.532491][ T29] audit: type=1800 audit(1728419570.630:366): pid=31573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2695" name="bus" dev="loop2" ino=17 res=0 errno=0 [ 3195.564340][T31573] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x58c/0x1220 [ 3195.614933][T29968] syz-executor: attempt to access beyond end of device [ 3195.614933][T29968] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 3195.649513][T29968] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 3195.667870][T31590] loop1: detected capacity change from 0 to 32768 [ 3195.676875][T29968] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 3195.684392][T29968] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 3195.697089][T31590] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2696 (31590) [ 3195.710085][T29968] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 3195.740761][T31590] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3195.766630][T31590] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 3195.784005][T31590] BTRFS info (device loop1): using free-space-tree [ 3196.448703][T29525] hub 5-1:0.0: activate --> -90 [ 3196.959060][ T29] audit: type=1800 audit(1728419572.030:367): pid=31590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2696" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3197.092545][ T29] audit: type=1800 audit(1728419572.110:368): pid=31590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2696" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3197.162597][T31004] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 3197.403153][T31642] dccp_close: ABORT with 32 bytes unread [ 3197.594005][T29525] usb 5-1-port1: over-current condition [ 3197.599600][T29525] usb 5-1-port1: config error [ 3197.793114][T29525] usb 5-1-port1: cannot disable (err = -71) [ 3197.799171][T14137] usb 5-1: USB disconnect, device number 21 [ 3197.858770][T31666] netlink: 'syz.2.2707': attribute type 16 has an invalid length. [ 3197.866804][T31666] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2707'. [ 3198.803036][T31659] loop0: detected capacity change from 0 to 32768 [ 3198.811413][T31659] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2706 (31659) [ 3198.852930][T31659] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3198.865974][T31659] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 3198.887809][T31659] BTRFS info (device loop0): using free-space-tree [ 3198.931926][T31691] binder: BINDER_SET_CONTEXT_MGR already set [ 3198.937998][T31691] binder: 31690:31691 ioctl 4018620d 20000040 returned -16 [ 3199.321647][T31682] loop4: detected capacity change from 0 to 32768 [ 3199.329961][T31682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2713 (31682) [ 3199.350357][ T29] audit: type=1800 audit(1728419574.440:369): pid=31659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2706" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 3199.376816][T31682] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3199.387837][T31682] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 3199.400666][T31682] BTRFS info (device loop4): using free-space-tree [ 3199.605767][T31109] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3199.679759][T31717] netlink: 'syz.3.2717': attribute type 16 has an invalid length. [ 3199.687832][T31717] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2717'. [ 3199.754067][T31682] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 3199.831524][T29362] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3200.335898][T31734] bridge_slave_0: left allmulticast mode [ 3200.364636][T31734] bridge_slave_0: left promiscuous mode [ 3200.392331][T31734] bridge0: port 1(bridge_slave_0) entered disabled state [ 3200.404778][T31734] bridge_slave_1: left allmulticast mode [ 3200.417480][T31734] bridge_slave_1: left promiscuous mode [ 3200.424126][T31734] bridge0: port 2(bridge_slave_1) entered disabled state [ 3200.439865][T31734] bond0: (slave bond_slave_0): Releasing backup interface [ 3200.454919][T31734] bond0: (slave bond_slave_1): Releasing backup interface [ 3200.476317][T31734] team0: Port device team_slave_0 removed [ 3200.501236][T31734] team0: Port device team_slave_1 removed [ 3200.513408][T31734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3200.529662][T31734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3200.550333][T31734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3200.580309][T31734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3200.697889][T31742] netlink: 'syz.4.2721': attribute type 1 has an invalid length. [ 3200.709619][T31742] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2721'. [ 3201.999089][T15938] Bluetooth: hci2: command 0x0406 tx timeout [ 3202.005195][T15935] Bluetooth: hci7: command 0x0406 tx timeout [ 3202.176230][T31757] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 3203.403160][T31758] netlink: 'syz.0.2725': attribute type 16 has an invalid length. [ 3203.411398][T31758] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2725'. [ 3203.618908][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 3204.386480][T31780] netlink: 'syz.1.2731': attribute type 16 has an invalid length. [ 3204.398912][T31780] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2731'. [ 3206.013211][T31783] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 3206.020705][T31783] macsec1: entered promiscuous mode [ 3206.026776][T31783] macsec1: entered allmulticast mode [ 3206.034363][T31783] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 3206.071174][T31787] Process accounting resumed [ 3206.920222][T31803] bridge_slave_0: left allmulticast mode [ 3206.986028][T31803] bridge_slave_0: left promiscuous mode [ 3207.019455][T31803] bridge0: port 1(bridge_slave_0) entered disabled state [ 3207.040340][T31806] loop0: detected capacity change from 0 to 1024 [ 3207.066555][T31806] hfsplus: extend alloc file! (8192,65536,366) [ 3207.120207][T18478] Bluetooth: hci1: command 0x0406 tx timeout [ 3207.134230][T31785] loop1: detected capacity change from 0 to 32768 [ 3207.143656][T31785] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2736 (31785) [ 3207.170145][T31785] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3207.184971][T31803] bridge_slave_1: left allmulticast mode [ 3207.209480][T31803] bridge_slave_1: left promiscuous mode [ 3207.221928][T31785] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 3207.232042][T31785] BTRFS info (device loop1): using free-space-tree [ 3207.232249][T31803] bridge0: port 2(bridge_slave_1) entered disabled state [ 3207.342244][T31803] bond0: (slave bond_slave_0): Releasing backup interface [ 3207.449400][T31803] bond0: (slave bond_slave_1): Releasing backup interface [ 3207.565048][T31803] team0: Port device team_slave_0 removed [ 3207.754117][T31803] team0: Port device team_slave_1 removed [ 3207.771837][T31803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3207.781898][T31803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3207.913246][T31803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3207.932673][T31803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3207.976906][T31818] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3208.021660][ T29] audit: type=1800 audit(1728419583.110:370): pid=31785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2736" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3208.263285][T31004] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3208.292008][T31818] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3208.393620][T31852] Process accounting resumed [ 3209.050692][T31818] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.215101][T31818] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.343783][T31818] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3209.393616][T31818] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3209.430265][T31818] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3209.461603][T31855] loop1: detected capacity change from 0 to 1024 [ 3209.464868][T31818] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3209.520628][T31855] hfsplus: extend alloc file! (8192,65536,366) [ 3211.956025][T31873] loop2: detected capacity change from 0 to 32768 [ 3211.983415][T31873] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2749 (31873) [ 3212.211144][T31873] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3212.262053][T31873] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 3212.280260][T31873] BTRFS info (device loop2): using free-space-tree [ 3212.469887][T31905] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 3212.577488][ T29] audit: type=1800 audit(1728419587.670:371): pid=31873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2749" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 3212.717694][T31918] xt_CT: No such helper "netbios-ns" [ 3213.130989][T29968] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3213.456548][T31899] loop1: detected capacity change from 0 to 32768 [ 3213.467568][T31899] btrfs: Deprecated parameter 'usebackuproot' [ 3213.473881][T31899] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 3213.500932][T31899] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2759 (31899) [ 3213.566454][T31899] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3213.792164][T31899] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 3213.807448][T31944] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 3214.080985][T31967] netlink: 'syz.0.2772': attribute type 1 has an invalid length. [ 3214.098298][T31969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3214.111422][T16628] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 3214.118244][T31967] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2772'. [ 3214.272373][T31969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3214.280289][T31899] BTRFS warning (device loop1): couldn't read tree root [ 3214.392005][T31899] BTRFS warning (device loop1): try to load backup roots slot 1 [ 3214.475266][ T8713] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 3214.489491][T31969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3214.498804][T31899] BTRFS warning (device loop1): couldn't read tree root [ 3214.509299][T31899] BTRFS warning (device loop1): try to load backup roots slot 2 [ 3214.521320][T10686] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 3214.537933][T31969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3214.554414][T31899] BTRFS warning (device loop1): couldn't read tree root [ 3214.572010][T31899] BTRFS warning (device loop1): try to load backup roots slot 3 [ 3214.595869][T31899] BTRFS info (device loop1): rebuilding free space tree [ 3214.616076][T31899] BTRFS info (device loop1): disabling free space tree [ 3214.624950][T31899] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 3214.675619][T31899] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 3214.727055][T31982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3214.730995][ T29] audit: type=1804 audit(1728419589.820:372): pid=31899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2759" name="/newroot/32/file0/bus" dev="loop1" ino=257 res=1 errno=0 [ 3214.744550][ T29] audit: type=1804 audit(1728419589.840:373): pid=31899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2759" name="/newroot/32/file0/bus" dev="loop1" ino=257 res=1 errno=0 [ 3214.773042][T29369] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 3214.830336][T31982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3214.875427][T31004] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3215.023208][T31982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3215.110916][T31986] loop3: detected capacity change from 0 to 32768 [ 3215.124750][T31986] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2777 (31986) [ 3215.151584][T31982] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 3215.163972][T31986] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3215.174444][T31986] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 3215.184637][T31986] BTRFS info (device loop3): using free-space-tree [ 3215.193059][T31982] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3215.205204][T31993] netlink: 'syz.4.2781': attribute type 10 has an invalid length. [ 3215.214140][T31993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2781'. [ 3215.224534][T31993] batman_adv: batadv0: Adding interface: vlan1 [ 3215.230873][T31993] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3215.258543][T31993] batman_adv: batadv0: Interface activated: vlan1 [ 3215.434968][T31997] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3215.998156][ T29] audit: type=1800 audit(1728419591.090:374): pid=31986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2777" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 3216.124140][T31997] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3216.140681][T31992] dccp_close: ABORT with 32 bytes unread [ 3216.207927][T31982] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3216.216744][T29373] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3216.402948][T31982] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3216.507963][T31997] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3216.734243][T31982] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3216.815061][T31982] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3216.829628][T31997] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3216.906210][T31997] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3216.961397][T31997] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3216.984277][T31997] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3217.085315][T32040] Process accounting resumed [ 3217.337586][T31997] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3217.381997][T18478] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 3217.382021][T18478] CPU: 1 UID: 0 PID: 18478 Comm: kworker/u9:0 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 3217.382056][T18478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3217.382069][T18478] Workqueue: hci0 hci_rx_work [ 3217.382108][T18478] Call Trace: [ 3217.382115][T18478] [ 3217.382124][T18478] dump_stack_lvl+0x241/0x360 [ 3217.382150][T18478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3217.382171][T18478] ? __pfx__printk+0x10/0x10 [ 3217.382200][T18478] ? __kmalloc_cache_noprof+0x243/0x390 [ 3217.382226][T18478] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 3217.382248][T18478] sysfs_create_dir_ns+0x2ce/0x3a0 [ 3217.382268][T18478] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 3217.382290][T18478] kobject_add_internal+0x435/0x8d0 [ 3217.382315][T18478] kobject_add+0x152/0x220 [ 3217.382335][T18478] ? do_raw_spin_unlock+0x13c/0x8b0 [ 3217.382358][T18478] ? device_add+0x3e7/0xbf0 [ 3217.382377][T18478] ? __pfx_kobject_add+0x10/0x10 [ 3217.382396][T18478] ? _raw_spin_unlock+0x28/0x50 [ 3217.382416][T18478] ? get_device_parent+0x165/0x410 [ 3217.382436][T18478] device_add+0x4e5/0xbf0 [ 3217.382457][T18478] hci_conn_add_sysfs+0xe8/0x200 [ 3217.382479][T18478] le_conn_complete_evt+0xc9f/0x12e0 [ 3217.382500][T18478] ? trace_contention_end+0x3c/0x120 [ 3217.382523][T18478] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 3217.382542][T18478] ? __mutex_unlock_slowpath+0x21d/0x750 [ 3217.382564][T18478] ? __copy_skb_header+0x437/0x5b0 [ 3217.382587][T18478] ? skb_pull_data+0x112/0x230 [ 3217.382613][T18478] hci_le_enh_conn_complete_evt+0x185/0x420 [ 3217.382643][T18478] hci_event_packet+0xa55/0x1540 [ 3217.382667][T18478] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 3217.382694][T18478] ? __pfx_hci_event_packet+0x10/0x10 [ 3217.382719][T18478] ? set_offload_codec_func+0x590/0x5a0 [ 3217.382744][T18478] ? kcov_remote_start+0x97/0x7d0 [ 3217.382770][T18478] hci_rx_work+0x3fe/0xd80 [ 3217.382797][T18478] ? process_scheduled_works+0x976/0x1850 [ 3217.382822][T18478] process_scheduled_works+0xa63/0x1850 [ 3217.382859][T18478] ? __pfx_process_scheduled_works+0x10/0x10 [ 3217.382885][T18478] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 3217.382905][T18478] ? assign_work+0x364/0x3d0 [ 3217.382930][T18478] worker_thread+0x870/0xd30 [ 3217.382960][T18478] ? __kthread_parkme+0x169/0x1d0 [ 3217.382986][T18478] ? __pfx_worker_thread+0x10/0x10 [ 3217.383011][T18478] kthread+0x2f0/0x390 [ 3217.383028][T18478] ? __pfx_worker_thread+0x10/0x10 [ 3217.383052][T18478] ? __pfx_kthread+0x10/0x10 [ 3217.383071][T18478] ret_from_fork+0x4b/0x80 [ 3217.383095][T18478] ? __pfx_kthread+0x10/0x10 [ 3217.383113][T18478] ret_from_fork_asm+0x1a/0x30 [ 3217.383144][T18478] [ 3217.383164][T18478] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 3217.383198][T18478] Bluetooth: hci0: failed to register connection device [ 3218.286490][T32047] loop1: detected capacity change from 0 to 32768 [ 3218.311317][T32047] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2795 (32047) [ 3218.391460][T32047] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3218.393617][T32047] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 3218.393674][T32047] BTRFS info (device loop1): using free-space-tree [ 3218.417796][T32067] netlink: 'syz.3.2798': attribute type 12 has an invalid length. [ 3218.515672][ T29] audit: type=1800 audit(1728419593.610:375): pid=32047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2795" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 3218.618708][T31004] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 3218.640791][T32087] netlink: 'syz.3.2799': attribute type 1 has an invalid length. [ 3218.640814][T32087] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2799'. [ 3218.772776][T32088] batman_adv: batadv0: Interface deactivated: vlan1 [ 3218.772819][T32088] batman_adv: batadv0: Removing interface: vlan1 [ 3219.004933][T32097] loop4: detected capacity change from 0 to 764 [ 3219.395280][T32114] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 3219.832812][T29369] Bluetooth: hci0: command tx timeout [ 3220.578253][T32123] bond0: entered promiscuous mode [ 3220.609176][T32123] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3220.622832][T32123] bond0: left promiscuous mode [ 3221.399779][T32151] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 3221.452770][T32155] loop0: detected capacity change from 0 to 256 [ 3221.491188][T32155] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 3221.501320][T32155] FAT-fs (loop0): Filesystem has been set read-only [ 3221.508524][ T29] audit: type=1800 audit(1728419596.570:376): pid=32155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2823" name="file1" dev="loop0" ino=1049466 res=0 errno=0 [ 3236.903723][T32168] loop2: detected capacity change from 0 to 764 [ 3237.692871][T15938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3237.848707][T15938] Bluetooth: hci0: command 0x0406 tx timeout [ 3238.047077][T15935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3238.120821][T15938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3238.400740][T18478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3238.410404][T18478] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3238.423665][T18478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3240.485704][T18478] Bluetooth: hci4: command tx timeout [ 3242.751768][T18478] Bluetooth: hci4: command tx timeout [ 3244.792021][T18478] Bluetooth: hci4: command tx timeout [ 3246.042529][T29369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3246.053388][T29369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3246.062122][T29369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3246.075104][T29369] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3246.084910][T29369] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3246.389912][T29369] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3246.882102][T18478] Bluetooth: hci4: command tx timeout [ 3247.218390][T18478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3247.228313][T18478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3247.411625][T18478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3247.426486][T18478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3247.436810][T18478] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3247.450994][T18478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3247.713753][T15938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3247.717592][T15935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3247.723224][T15938] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3247.744677][T15938] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3247.748069][T13491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3247.752683][T15938] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3247.761019][T32188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3247.766787][T15938] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3247.775877][T32188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3247.780274][T15938] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3247.787609][T32188] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3247.852184][T32188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3247.854946][T16633] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3248.631219][T18478] Bluetooth: hci3: command tx timeout [ 3249.027963][T16633] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3249.752008][T18478] Bluetooth: hci1: command tx timeout [ 3249.933102][T16633] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3249.991923][T18478] Bluetooth: hci6: command tx timeout [ 3250.152145][T18478] Bluetooth: hci0: command tx timeout [ 3250.412432][T16633] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3250.711847][T18478] Bluetooth: hci3: command tx timeout [ 3251.832406][T18478] Bluetooth: hci1: command tx timeout [ 3252.072615][T18478] Bluetooth: hci6: command tx timeout [ 3252.094990][T32170] chnl_net:caif_netlink_parms(): no params data found [ 3252.231942][T18478] Bluetooth: hci0: command tx timeout [ 3252.793919][T18478] Bluetooth: hci3: command tx timeout [ 3253.913618][T18478] Bluetooth: hci1: command tx timeout [ 3254.152217][T18478] Bluetooth: hci6: command tx timeout [ 3254.311982][T18478] Bluetooth: hci0: command tx timeout [ 3254.550148][T16633] bond0 (unregistering): Released all slaves [ 3254.871845][T18478] Bluetooth: hci3: command tx timeout [ 3255.727092][T32185] chnl_net:caif_netlink_parms(): no params data found [ 3255.991856][T18478] Bluetooth: hci1: command tx timeout [ 3256.219222][T32170] bridge0: port 1(bridge_slave_0) entered blocking state [ 3256.227318][T32170] bridge0: port 1(bridge_slave_0) entered disabled state [ 3256.236310][T32170] bridge_slave_0: entered allmulticast mode [ 3256.236771][T18478] Bluetooth: hci6: command tx timeout [ 3256.278131][T32170] bridge_slave_0: entered promiscuous mode [ 3256.391772][T18478] Bluetooth: hci0: command tx timeout [ 3256.588104][T32170] bridge0: port 2(bridge_slave_1) entered blocking state [ 3256.597232][T32170] bridge0: port 2(bridge_slave_1) entered disabled state [ 3256.606475][T32170] bridge_slave_1: entered allmulticast mode [ 3256.639483][T32170] bridge_slave_1: entered promiscuous mode [ 3258.499280][T32170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3258.670517][T16633] hsr_slave_0: left promiscuous mode [ 3258.680251][T16633] hsr_slave_1: left promiscuous mode [ 3258.704334][T16633] veth1_macvtap: left promiscuous mode [ 3258.709923][T16633] veth0_macvtap: left promiscuous mode [ 3258.715748][T16633] veth1_vlan: left promiscuous mode [ 3258.721296][T16633] veth0_vlan: left promiscuous mode [ 3260.899277][T32179] chnl_net:caif_netlink_parms(): no params data found [ 3261.062234][T32170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3261.186449][T32185] bridge0: port 1(bridge_slave_0) entered blocking state [ 3261.195143][T32185] bridge0: port 1(bridge_slave_0) entered disabled state [ 3261.208099][T32185] bridge_slave_0: entered allmulticast mode [ 3261.312870][T32185] bridge_slave_0: entered promiscuous mode [ 3262.266891][T32185] bridge0: port 2(bridge_slave_1) entered blocking state [ 3262.274825][T32185] bridge0: port 2(bridge_slave_1) entered disabled state [ 3262.283928][T32185] bridge_slave_1: entered allmulticast mode [ 3262.300013][T32185] bridge_slave_1: entered promiscuous mode [ 3262.375883][T32170] team0: Port device team_slave_0 added [ 3262.750349][T32170] team0: Port device team_slave_1 added [ 3263.509012][T32170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3263.516207][T32170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3263.548081][T32170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3263.597883][T32185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3264.251854][T32170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3264.259790][T32170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3264.297025][T32170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3264.376517][T32185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3264.677699][T32181] chnl_net:caif_netlink_parms(): no params data found [ 3265.431112][T32179] bridge0: port 1(bridge_slave_0) entered blocking state [ 3265.482847][T32179] bridge0: port 1(bridge_slave_0) entered disabled state [ 3265.491306][T32179] bridge_slave_0: entered allmulticast mode [ 3265.508626][T32179] bridge_slave_0: entered promiscuous mode [ 3266.177771][T32184] chnl_net:caif_netlink_parms(): no params data found [ 3266.207212][T32185] team0: Port device team_slave_0 added [ 3266.215596][T32185] team0: Port device team_slave_1 added [ 3266.221558][T32179] bridge0: port 2(bridge_slave_1) entered blocking state [ 3266.228767][T32179] bridge0: port 2(bridge_slave_1) entered disabled state [ 3266.236291][T32179] bridge_slave_1: entered allmulticast mode [ 3266.243569][T32179] bridge_slave_1: entered promiscuous mode [ 3266.293513][T32185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3266.300482][T32185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3266.326670][T32185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3266.379326][T32185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3266.386655][T32185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3266.417126][T32185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3266.444688][T32170] hsr_slave_0: entered promiscuous mode [ 3266.451187][T32170] hsr_slave_1: entered promiscuous mode [ 3266.462734][T32170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3266.470314][T32170] Cannot create hsr debugfs directory [ 3266.505743][T32179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3266.518075][T32179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3266.559701][T32181] bridge0: port 1(bridge_slave_0) entered blocking state [ 3266.567131][T32181] bridge0: port 1(bridge_slave_0) entered disabled state [ 3266.575489][T32181] bridge_slave_0: entered allmulticast mode [ 3266.582470][T32181] bridge_slave_0: entered promiscuous mode [ 3266.614712][T32181] bridge0: port 2(bridge_slave_1) entered blocking state [ 3266.622462][T32181] bridge0: port 2(bridge_slave_1) entered disabled state [ 3266.629640][T32181] bridge_slave_1: entered allmulticast mode [ 3266.636771][T32181] bridge_slave_1: entered promiscuous mode [ 3266.674162][T32184] bridge0: port 1(bridge_slave_0) entered blocking state [ 3266.681271][T32184] bridge0: port 1(bridge_slave_0) entered disabled state [ 3266.688709][T32184] bridge_slave_0: entered allmulticast mode [ 3266.696342][T32184] bridge_slave_0: entered promiscuous mode [ 3266.716967][T32179] team0: Port device team_slave_0 added [ 3266.724669][T32179] team0: Port device team_slave_1 added [ 3266.739957][T16633] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3266.752349][T32184] bridge0: port 2(bridge_slave_1) entered blocking state [ 3266.759453][T32184] bridge0: port 2(bridge_slave_1) entered disabled state [ 3266.767043][T32184] bridge_slave_1: entered allmulticast mode [ 3266.774052][T32184] bridge_slave_1: entered promiscuous mode [ 3266.787473][T32185] hsr_slave_0: entered promiscuous mode [ 3266.793990][T32185] hsr_slave_1: entered promiscuous mode [ 3266.800104][T32185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3266.808664][T32185] Cannot create hsr debugfs directory [ 3266.829478][T32179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3266.836615][T32179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3266.863110][T32179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3266.882204][T32181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3266.893014][T16633] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3266.914179][T32179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3266.921141][T32179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3266.947694][T32179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3266.970027][T32181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3266.999065][T16633] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3267.012122][T32184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3267.030694][T32181] team0: Port device team_slave_0 added [ 3267.055905][T32184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3267.067381][T32181] team0: Port device team_slave_1 added [ 3267.081015][T16633] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3267.146488][T32181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3267.153995][T32181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3267.183100][T32181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3267.199827][T32179] hsr_slave_0: entered promiscuous mode [ 3267.206415][T32179] hsr_slave_1: entered promiscuous mode [ 3267.213652][T32179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3267.221241][T32179] Cannot create hsr debugfs directory [ 3267.237130][T32184] team0: Port device team_slave_0 added [ 3267.254548][T32181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3267.261528][T32181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3267.289323][T32181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3267.316657][T32184] team0: Port device team_slave_1 added [ 3267.368659][T32181] hsr_slave_0: entered promiscuous mode [ 3267.375580][T32181] hsr_slave_1: entered promiscuous mode [ 3267.381794][T32181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3267.389363][T32181] Cannot create hsr debugfs directory [ 3267.398531][T32184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3267.405682][T32184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3267.432233][T32184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3267.444559][T32184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3267.452380][T32184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3267.478934][T32184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3267.567184][T32184] hsr_slave_0: entered promiscuous mode [ 3267.574803][T32184] hsr_slave_1: entered promiscuous mode [ 3267.580845][T32184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3267.588764][T32184] Cannot create hsr debugfs directory [ 3267.612360][T16633] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3267.670228][T16633] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3267.726614][T16633] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3267.801282][T16633] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3267.907574][T16633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3267.950043][T16633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3267.999690][T16633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3268.013384][T32170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3268.021946][T32170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3268.035755][T32170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3268.046723][T16633] bond0: (slave netdevsim0): Releasing backup interface [ 3268.055264][T16633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3268.068031][T32170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3268.144737][T32170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3268.178584][T32170] 8021q: adding VLAN 0 to HW filter on device team0 [ 3268.200563][T16633] bridge_slave_1: left allmulticast mode [ 3268.215677][T16633] bridge_slave_1: left promiscuous mode [ 3268.222124][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 3268.235131][T16633] bridge_slave_0: left allmulticast mode [ 3268.242192][T16633] bridge_slave_0: left promiscuous mode [ 3268.249022][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 3268.262825][T16633] bridge_slave_1: left allmulticast mode [ 3268.268515][T16633] bridge_slave_1: left promiscuous mode [ 3268.277595][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 3268.286567][T16633] bridge_slave_0: left allmulticast mode [ 3268.294470][T16633] bridge_slave_0: left promiscuous mode [ 3268.300164][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 3268.597735][T16633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3268.607961][T16633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3268.618363][T16633] bond0 (unregistering): Released all slaves [ 3268.630373][T16633] bond0 (unregistering): Released all slaves [ 3268.640797][T16633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3268.655770][T16633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3268.665698][T16633] bond0 (unregistering): Released all slaves [ 3268.692063][T13952] bridge0: port 1(bridge_slave_0) entered blocking state [ 3268.699187][T13952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3268.721700][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 3268.728810][T13951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3268.834078][T32185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3268.856985][T32185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3268.897808][T32185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3268.926189][T32185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3269.028626][T32170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3269.153447][T32170] veth0_vlan: entered promiscuous mode [ 3269.167875][T32170] veth1_vlan: entered promiscuous mode [ 3269.191103][T32185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3269.239517][T32185] 8021q: adding VLAN 0 to HW filter on device team0 [ 3269.258849][T32179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3269.269492][T32181] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3269.290696][T32179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3269.300300][T32179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3269.312994][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 3269.320108][T10686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3269.331073][T32181] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3269.344407][T32170] veth0_macvtap: entered promiscuous mode [ 3269.357620][T32179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3269.373477][T32165] bridge0: port 2(bridge_slave_1) entered blocking state [ 3269.380587][T32165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3269.389508][T32170] veth1_macvtap: entered promiscuous mode [ 3269.400984][T16633] hsr_slave_0: left promiscuous mode [ 3269.407261][T16633] hsr_slave_1: left promiscuous mode [ 3269.413952][T16633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3269.421543][T16633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3269.429729][T16633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3269.437723][T16633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3269.447787][T16633] hsr_slave_0: left promiscuous mode [ 3269.453947][T16633] hsr_slave_1: left promiscuous mode [ 3269.463158][T16633] hsr_slave_0: left promiscuous mode [ 3269.468972][T16633] hsr_slave_1: left promiscuous mode [ 3269.474928][T16633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3269.482702][T16633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3269.490721][T16633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3269.498285][T16633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3269.509425][T16633] veth1_macvtap: left promiscuous mode [ 3269.515172][T16633] veth0_macvtap: left promiscuous mode [ 3269.520978][T16633] veth1_vlan: left promiscuous mode [ 3269.526733][T16633] veth0_vlan: left promiscuous mode [ 3269.532631][T16633] veth1_macvtap: left promiscuous mode [ 3269.538106][T16633] veth0_macvtap: left promiscuous mode [ 3269.543812][T16633] veth1_vlan: left promiscuous mode [ 3269.549057][T16633] veth0_vlan: left promiscuous mode [ 3269.555323][T16633] veth1_macvtap: left promiscuous mode [ 3269.560865][T16633] veth0_macvtap: left promiscuous mode [ 3269.566572][T16633] veth1_vlan: left promiscuous mode [ 3269.572462][T16633] veth0_vlan: left promiscuous mode [ 3269.750976][T16633] team0 (unregistering): Port device team_slave_1 removed [ 3269.762099][T16633] team0 (unregistering): Port device team_slave_0 removed [ 3269.982062][T16633] team0 (unregistering): Port device team_slave_1 removed [ 3269.998297][T16633] team0 (unregistering): Port device team_slave_0 removed [ 3270.061523][T32181] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3270.085430][T32170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3270.096069][T32170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3270.106783][T32170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3270.117448][T32170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3270.133646][T32170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3270.151269][T32170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3270.162172][T32170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3270.172810][T32170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3270.183352][T32170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3270.194428][T32170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3270.209547][T32181] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3270.225515][T32185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3270.243163][T32170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3270.252969][T32170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3270.262016][T32170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3270.270832][T32170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3270.312056][ T30] INFO: task syz.2.2440:29780 blocked for more than 143 seconds. [ 3270.319818][ T30] Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 3270.344430][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3270.354245][ T30] task:syz.2.2440 state:D stack:25456 pid:29780 tgid:29776 ppid:29353 flags:0x00004006 [ 3270.364944][ T30] Call Trace: [ 3270.368267][ T30] [ 3270.371209][ T30] __schedule+0x1895/0x4b30 [ 3270.376580][ T30] ? schedule+0x90/0x320 [ 3270.380860][ T30] ? schedule+0x90/0x320 [ 3270.385787][ T30] ? lock_release+0xbf/0xa30 [ 3270.390415][ T30] ? __pfx___schedule+0x10/0x10 [ 3270.395649][ T30] ? __pfx_lock_release+0x10/0x10 [ 3270.409516][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3270.415797][ T30] ? mutex_spin_on_owner+0x26c/0x330 [ 3270.421220][ T30] ? schedule+0x90/0x320 [ 3270.426091][ T30] schedule+0x14b/0x320 [ 3270.430777][ T30] schedule_preempt_disabled+0x13/0x30 [ 3270.436988][ T30] __mutex_lock+0x6a7/0xd70 [ 3270.441979][ T30] ? __mutex_lock+0x52a/0xd70 [ 3270.446900][ T30] ? chaoskey_release+0x169/0x2f0 [ 3270.455047][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3270.460183][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 3270.465877][ T30] ? lock_release+0xbf/0xa30 [ 3270.470502][ T30] chaoskey_release+0x169/0x2f0 [ 3270.477481][ T30] ? __pfx_chaoskey_release+0x10/0x10 [ 3270.483317][ T30] __fput+0x23f/0x880 [ 3270.487347][ T30] task_work_run+0x24f/0x310 [ 3270.492782][ T30] ? __pfx_task_work_run+0x10/0x10 [ 3270.497932][ T30] ? switch_task_namespaces+0xe4/0x110 [ 3270.503762][ T30] do_exit+0xa2f/0x28e0 [ 3270.508483][ T30] ? rcu_is_watching+0x15/0xb0 [ 3270.514006][ T30] ? __pfx_do_exit+0x10/0x10 [ 3270.518623][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3270.524752][ T30] ? __pfx_lock_release+0x10/0x10 [ 3270.529808][ T30] ? __pfx_lock_release+0x10/0x10 [ 3270.535380][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3270.542268][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 3270.549350][ T30] do_group_exit+0x207/0x2c0 [ 3270.554967][ T30] get_signal+0x16a3/0x1740 [ 3270.559514][ T30] ? __pfx_get_signal+0x10/0x10 [ 3270.565237][ T30] arch_do_signal_or_restart+0x96/0x860 [ 3270.572062][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3270.578261][ T30] ? schedule+0x155/0x320 [ 3270.586361][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 3270.592523][ T30] do_syscall_64+0x100/0x230 [ 3270.597149][ T30] ? clear_bhb_loop+0x35/0x90 [ 3270.605451][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3270.611398][ T30] RIP: 0033:0x7fba6197dff9 [ 3270.616656][ T30] RSP: 002b:00007fba626bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3270.628939][ T30] RAX: ffffffffffffffea RBX: 00007fba61b36130 RCX: 00007fba6197dff9 [ 3270.638498][ T30] RDX: 0000000020000bc0 RSI: 00000000404c534a RDI: 0000000000000005 [ 3270.647589][ T30] RBP: 00007fba619f0296 R08: 0000000000000000 R09: 0000000000000000 [ 3270.655700][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3270.663826][ T30] R13: 0000000000000000 R14: 00007fba61b36130 R15: 00007ffdde277dd8 [ 3270.671894][ T30] [ 3270.674986][ T30] INFO: lockdep is turned off. [ 3270.679863][ T30] NMI backtrace for cpu 1 [ 3270.684200][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 3270.694198][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3270.704240][ T30] Call Trace: [ 3270.707504][ T30] [ 3270.710436][ T30] dump_stack_lvl+0x241/0x360 [ 3270.715106][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3270.720287][ T30] ? __pfx__printk+0x10/0x10 [ 3270.724947][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 3270.731972][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 3270.736939][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3270.742430][ T30] ? _printk+0xd5/0x120 [ 3270.746609][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 3270.752628][ T30] ? __pfx__printk+0x10/0x10 [ 3270.757338][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3270.763442][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 3270.769510][ T30] watchdog+0xff4/0x1040 [ 3270.773780][ T30] ? watchdog+0x1ea/0x1040 [ 3270.778227][ T30] ? __pfx_watchdog+0x10/0x10 [ 3270.783196][ T30] kthread+0x2f0/0x390 [ 3270.787295][ T30] ? __pfx_watchdog+0x10/0x10 [ 3270.792002][ T30] ? __pfx_kthread+0x10/0x10 [ 3270.796616][ T30] ret_from_fork+0x4b/0x80 [ 3270.801058][ T30] ? __pfx_kthread+0x10/0x10 [ 3270.805669][ T30] ret_from_fork_asm+0x1a/0x30 [ 3270.810493][ T30] [ 3270.814237][ T30] Sending NMI from CPU 1 to CPUs 0: [ 3270.819902][ C0] NMI backtrace for cpu 0 [ 3270.819915][ C0] CPU: 0 UID: 0 PID: 16628 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 3270.819937][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3270.819947][ C0] Workqueue: events_unbound flush_memcg_stats_dwork [ 3270.819979][ C0] RIP: 0010:mem_cgroup_css_rstat_flush+0x638/0x900 [ 3270.819999][ C0] Code: 89 04 24 48 8b 44 24 30 48 05 f0 01 00 00 48 89 44 24 70 45 31 ff 4c 89 6c 24 40 eb 1e 48 8b 44 24 30 4e 01 b4 38 f0 01 00 00 <49> 83 c7 08 49 81 ff f8 00 00 00 0f 84 5a 01 00 00 4b 8d ac 3d f0 [ 3270.820013][ C0] RSP: 0018:ffffc90003f678f0 EFLAGS: 00000046 [ 3270.820027][ C0] RAX: ffffe8ffffd80000 RBX: ffffe8ffffd801b0 RCX: 0000000000000040 [ 3270.820039][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffe8ffffd800b8 [ 3270.820050][ C0] RBP: 1ffffd1ffffb0036 R08: ffffffff818da15d R09: 1ffffffff203a7e5 [ 3270.820062][ C0] R10: dffffc0000000000 R11: ffffffff82082350 R12: dffffc0000000000 [ 3270.820075][ C0] R13: ffff8881442b0000 R14: 0000000000000000 R15: 00000000000000b8 [ 3270.820086][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 3270.820100][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3270.820112][ C0] CR2: 0000563eafdc7131 CR3: 000000000e734000 CR4: 00000000003526f0 [ 3270.820127][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3270.820136][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3270.820147][ C0] Call Trace: [ 3270.820153][ C0] [ 3270.820159][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 3270.820180][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 3270.820197][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3270.820223][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 3270.820242][ C0] ? nmi_handle+0x14f/0x5a0 [ 3270.820259][ C0] ? nmi_handle+0x2a/0x5a0 [ 3270.820275][ C0] ? mem_cgroup_css_rstat_flush+0x638/0x900 [ 3270.820293][ C0] ? default_do_nmi+0x63/0x160 [ 3270.820312][ C0] ? exc_nmi+0x123/0x1f0 [ 3270.820330][ C0] ? end_repeat_nmi+0xf/0x53 [ 3270.820349][ C0] ? __pfx_mem_cgroup_css_rstat_flush+0x10/0x10 [ 3270.820367][ C0] ? cgroup_rstat_flush_locked+0x15dd/0x1e90 [ 3270.820386][ C0] ? mem_cgroup_css_rstat_flush+0x638/0x900 [ 3270.820404][ C0] ? mem_cgroup_css_rstat_flush+0x638/0x900 [ 3270.820422][ C0] ? mem_cgroup_css_rstat_flush+0x638/0x900 [ 3270.820440][ C0] [ 3270.820445][ C0] [ 3270.820458][ C0] cgroup_rstat_flush_locked+0x16da/0x1e90 [ 3270.820475][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 3270.820489][ C0] ? cgroup_rstat_flush_locked+0x15a8/0x1e90 [ 3270.820516][ C0] ? __pfx_cgroup_rstat_flush_locked+0x10/0x10 [ 3270.820533][ C0] ? __pfx___cgroup_rstat_lock+0x10/0x10 [ 3270.820552][ C0] ? process_scheduled_works+0x976/0x1850 [ 3270.820573][ C0] cgroup_rstat_flush+0x38/0x50 [ 3270.820588][ C0] flush_memcg_stats_dwork+0x62/0xa0 [ 3270.820607][ C0] process_scheduled_works+0xa63/0x1850 [ 3270.820637][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3270.820659][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 3270.820676][ C0] ? assign_work+0x364/0x3d0 [ 3270.820696][ C0] worker_thread+0x870/0xd30 [ 3270.820724][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3270.820744][ C0] kthread+0x2f0/0x390 [ 3270.820759][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3270.820778][ C0] ? __pfx_kthread+0x10/0x10 [ 3270.820793][ C0] ret_from_fork+0x4b/0x80 [ 3270.820813][ C0] ? __pfx_kthread+0x10/0x10 [ 3270.820828][ C0] ret_from_fork_asm+0x1a/0x30 [ 3270.820853][ C0] [ 3270.825175][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 3270.825192][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 3270.825212][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3270.825222][ T30] Call Trace: [ 3270.825229][ T30] [ 3270.825237][ T30] dump_stack_lvl+0x241/0x360 [ 3270.825261][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3270.825279][ T30] ? __pfx__printk+0x10/0x10 [ 3270.825298][ T30] ? vscnprintf+0x5d/0x90 [ 3270.825320][ T30] panic+0x349/0x880 [ 3270.825336][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3270.825358][ T30] ? __pfx_panic+0x10/0x10 [ 3270.825376][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 3270.825395][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3270.825416][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 3270.825438][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 3270.825460][ T30] watchdog+0x1033/0x1040 [ 3270.825483][ T30] ? watchdog+0x1ea/0x1040 [ 3270.825506][ T30] ? __pfx_watchdog+0x10/0x10 [ 3270.825527][ T30] kthread+0x2f0/0x390 [ 3270.825544][ T30] ? __pfx_watchdog+0x10/0x10 [ 3270.825565][ T30] ? __pfx_kthread+0x10/0x10 [ 3270.825582][ T30] ret_from_fork+0x4b/0x80 [ 3270.825604][ T30] ? __pfx_kthread+0x10/0x10 [ 3270.825621][ T30] ret_from_fork_asm+0x1a/0x30 [ 3270.825648][ T30] [ 3271.294884][ T30] Kernel Offset: disabled [ 3271.299196][ T30] Rebooting in 86400 seconds..