last executing test programs: 8.120867404s ago: executing program 3 (id=1100): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0xa3b6, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000d40)='./file0\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x3, 0x7bd, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="2400000000000000000000000006000240000000000500030000000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg0\x00'}) socket$packet(0x11, 0x2, 0x300) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0xf0, 0xf0, 0xffffffff, 0x390, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 7.681353622s ago: executing program 2 (id=1104): io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000002040)) 6.648005069s ago: executing program 0 (id=1106): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x8, 0x8, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.535628818s ago: executing program 4 (id=1107): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$x25(r1, 0x0, 0x0, 0x10, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1}, 0x40002161) 5.777829572s ago: executing program 4 (id=1109): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file2\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000000)={[{@grpquota_block_hardlimit}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1e, 0x1, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000240), 0x2000011a) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2084) splice(r4, 0x0, r3, 0x0, 0x4ff9c, 0x0) 5.73122991s ago: executing program 2 (id=1110): write(0xffffffffffffffff, &(0x7f0000000040)="3a03", 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r3, 0x101, 0x2, 0x0, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x16) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 5.595104804s ago: executing program 0 (id=1111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af", 0x9f}, {&(0x7f0000000400)}, {&(0x7f0000000180)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074", 0xa5}, {&(0x7f0000000f00)="397d5f2edc82d0337a", 0x9}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b1aaea9b9e5481dcd8c125f478bedc0474ab0607636ee67ac131020000c8001af506896b01dccc9d08e4f21405", 0x2f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {0x0}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e3", 0x62}, {0x0}, {&(0x7f0000000000)="b7cc82d93bd01bb2c1610f6ae515a6bbe0b6db937bb7c30d3c49367f3fbaff963b2548c13fdd6e21bd14", 0x2a}], 0x5}}], 0x3, 0xc0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.897896024s ago: executing program 3 (id=1114): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 4.580917111s ago: executing program 3 (id=1115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='uid_map\x00') readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) getpgrp(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec03010000000000000000000000000a14000000fa030100"], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) dup(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sync() 4.560467313s ago: executing program 1 (id=1116): write(0xffffffffffffffff, &(0x7f0000000040)="3a03", 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r1, 0x101, 0x2, 0x0, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x16) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.478046334s ago: executing program 0 (id=1117): write(0xffffffffffffffff, &(0x7f0000000040)="3a03", 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r2, 0x101, 0x2, 0x0, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x16) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.727328566s ago: executing program 2 (id=1118): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x10, 0xffffffff, 0x0, 0x515f3157, 0x0, "7de114100985a79874342a70e113fe49a5f51f"}) getdents64(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) io_setup(0x2868b0, &(0x7f0000000240)) ioprio_set$uid(0x3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 3.627771819s ago: executing program 3 (id=1119): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) close(0x3) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001b00)=""/4096, 0xff7}], 0x4e}}], 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'}) close(r2) 3.166289343s ago: executing program 2 (id=1120): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b7050000080000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x7, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0xc, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) 2.981293375s ago: executing program 3 (id=1121): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x8, 0x8, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.954672396s ago: executing program 1 (id=1122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@gettaction={0x9c, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x9c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.912735557s ago: executing program 3 (id=1123): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000300)={{r0}, "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"}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x44, 0x20000000, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000001300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r5 = socket$kcm(0x10, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mremap(&(0x7f000090e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000139000/0x4000)=nil) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') 2.863491194s ago: executing program 1 (id=1124): io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="04000000000000000800290000000000080028000000000056ca065a3a178999ae86b1"], 0x58}}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000002040)) 2.446520285s ago: executing program 4 (id=1125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x34}}, 0x0) 2.43900037s ago: executing program 0 (id=1126): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x3026}], 0x1, 0x0, 0x0) 2.311645085s ago: executing program 0 (id=1127): r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x6) read(r0, 0x0, 0x2006) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d000100000000090400000503000000092100000001220500090581034000"], 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r2, 0xffffffffffffffff, 0xd}, 0x14) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x5, 0x552, &(0x7f0000000d80)={{0x12, 0x1, 0x110, 0xf1, 0x63, 0x5f, 0x8, 0x12d1, 0x1403, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x540, 0x3, 0xfb, 0x6, 0x20, 0x9, [{{0x9, 0x4, 0x59, 0x2, 0x7, 0x87, 0x6b, 0x6f, 0xa, [@hid_hid={0x9, 0x21, 0x8001, 0x1, 0x1, {0x22, 0xfd0}}], [{{0x9, 0x5, 0xc, 0xc, 0x10, 0x3f, 0xf5}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xf1, 0x6, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0x3, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x6b, 0x4, 0x5}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0xc, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x0, 0xff, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x260, 0x28, 0xc, 0x7}}]}}, {{0x9, 0x4, 0x94, 0x6, 0xb, 0xca, 0x61, 0x44, 0xd6, [], [{{0x9, 0x5, 0x2, 0x8, 0x200, 0x77, 0x3, 0x7, [@generic={0x14, 0x0, "27a7f0a6b42ee76305aba4279a04ec3c8283"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x77, 0xd, 0xa2}}, {{0x9, 0x5, 0x90, 0x0, 0x40, 0x6, 0xff, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x2}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x4, 0x2}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x5, 0xcc, 0x2, [@generic={0xb7, 0x4, "1ea7af5a86c81d847a299a511085e0d4a730d353748ecdb334430fa603ec1ff1a1c8044fa13b4e27ae3b7816d7d4641eca791c231156bd8530eb0ba84555ceada5c2a813be05df5eaafaeeae18fdb433d326ef4fb96ee327ff4efbeb504afca1efb275b42630f762849ee6464ddbd0cc6945c48272044e52a6c532b0260012cc5a7b24d89dbb46fb8fc7e2f4f8ef98d7d3886f0b508ce4b28109b23c06f49770f1012f79413ab39eba45468cc454f6a7df3e6532ef"}, @generic={0xaa, 0x24, "97f7821763d3f6408514b6334053d38efce7ed96f92a110f4c6c587f90359b728b287a5e34db51ff9316fac7db9ab8ba4fd302798b338493fca2a49cf27785dd8b6eb5a40c860c6a863f12548989c7380a95a1cbfa15ae7bfbf22a7fb5edcac04034261d2698aa1e0c4102ae8be194a4bebaf5393d4073f5dc41d58b2d094b6a18df2bb2edb5d87c3a7f1db79c37e3d61cae12b487fcae674094d132ac30a67b1daf25fbde23fa24"}]}}, {{0x9, 0x5, 0x1, 0xd, 0x3ff, 0x10, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb4, 0x4}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x6d, 0x7, 0xd9}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x3, 0xc, 0x7, [@generic={0x35, 0x30, "99dafd454906ca5f9d827fe7444a69c88f2cc516a21a8dc7aefe144cff069ea2163ba5c5c3eea185ded98ae00cfb4635883e13"}, @generic={0x13, 0x9, "2746746cab4a50aeb04088b75eaae80a7b"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x3, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x96, 0x9}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x3, 0x81, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0xfe, 0x6}}]}}, {{0x9, 0x4, 0xda, 0xa, 0x6, 0x91, 0x2f, 0x96, 0xf5, [], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x8, 0xfa, 0x2, [@generic={0x33, 0xf, "133c3dc52dd10fbdbf360b047bd50a5ddd28b724edcdc7359a99530998ba2e2699950ccb33e089421c76d50c2b62462fbd"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x1c, 0x4, 0x8, [@generic={0x2, 0xc}, @generic={0x37, 0x21, "cf7b7deb0114a2e906aaf22428586a2452bcd6e694de117d83462a94798346321d476142949ae85ac6f1e13e8e8fab7d4386d1cba3"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x6, 0x0, 0x8}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x3, 0x8, 0xf8}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x8, 0xff, 0x2, [@generic={0xf5, 0x8, "ab8af2c77731b948b1c8c6b90caedbcd035b60937eac162e1cad56173172f2992a26f012a3cd29f1f1e61241dc40459a440ebfdd7dab2d5ac895228c1f9790191a6a3ecb838b0a4c927808074b5c49278477f72edde560752972a71fc7eed9d6fad9a68f0f244a0b404439685a43717ccabe2e8503eded69ffc08cfe75c950e745e82ef1a020e7d87bdb14d3b3bd402c2fe805dd92d5652fa76ecd305ae281e74dd8f5812e348f148a7123f6bbb77370923ab16233d1f19cda6e763d47afd1e07710b977053498a3b68a7a9a4a43a542c221465246fa10a0be66127ebbd39fa93aaf3aaec867953c9b6f50f02ea2d67f314cf2"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x18, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6bd}, @generic={0x101, 0x11, "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"}]}}]}}]}}]}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.305625288s ago: executing program 4 (id=1128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7", 0x76, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r4) close_range(r7, 0xffffffffffffffff, 0x0) 2.238013013s ago: executing program 2 (id=1129): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002ec0)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x89a2, &(0x7f0000000900)={'bridge0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000008000000000003b810000850000006d000000650000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") chdir(&(0x7f0000000280)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000002780)=ANY=[@ANYBLOB="85000000610000003500000000000020850000000700000095000000000000000001000000000000200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c93fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc02436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e465eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b0800000000000000087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbf975d9c07d8d3c76e65760ff000000b78863e629b3b200000000000000000000000000008b0000000a449c810d3174c87ee545867a3126af7a8b20744ea9875b1cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1855f77138e438bdc037865f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c44795f61d51e79496a8d2dab79d4242a353917ebdf2dcdb26d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c31a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032d845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e4577055528aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed873a76b0dda0a4b4c5f87eef3164a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5174e7ea5dd7f1caa699e4a241291c2f43e9edbf44c0ffb8ee32a18b6e8f0b61836146e2eab9a767800c2c91190c96cf88466adf775b4cf517dc5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01d9a9ec4d5ef793096dab53d3224f245fd5d87984d58dc09d11ba0094ba8c39942be41f362e29bba1cdcf8068a4d8d67d2d6d79aa2d089bc4d475097d7523860ec41dab4fa4b0cfe674c163ad419753bd73882336d42036a179bb33162b31f2a58436ea88fba598fad987a60b1847cc63a77c2bb30477ecbeaaa590cde56be4102d0365987e557f0000000000000000000000000000000000000000000000000000000000000000000000000050"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000540)={{0x2, 0x4e21, @private=0xa010101}, {0x6}, 0x40, {0x2, 0x4e23, @multicast2}, 'macvlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000042ebf04021046c022f1f0000000109024000010000000009040000000202ff00052406000005240000000d240f01000000000000000000052406000005242000000d240f"], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022bbd7000fddbdf2512000000080008008000000008000700400e00009ff306d4a984bc1e6e8dc76cb5126878aead3b9f0261e2271c78ca88ccf4af084bbbc1507b"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000051) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b76400001fe02010902240001010000000904570000012200000b058103000000000000000000000000000000000000000067188d0dad7e4a2e57bb1646a1810740899bdf51"], 0x0) 2.102915632s ago: executing program 1 (id=1130): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file2\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000000)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x36]}}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x1, 0x0) 1.881242254s ago: executing program 1 (id=1131): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x10, 0xffffffff, 0x0, 0x515f3157, 0x0, "7de114100985a79874342a70e113fe49a5f51f"}) getdents64(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) io_setup(0x2868b0, &(0x7f0000000240)) ioprio_set$uid(0x3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 1.311357919s ago: executing program 0 (id=1132): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x33832, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d941373fc0900c5de4e8ed05380a32aee9fec3f54e6a4c47edfc5f81b8877a87f3cbb30a7af5491a2996daf5d42b10e26efeec957d974c180a1c26a3892e411340d9788cea0bb79adbaa8b7b82beb6e7bfe7997135b66258b888a08e4386cc06dd5208d098e1b9175e68494be2413b770cfcf4673cf9c4d4d50a7af97a5", @ANYRES8=r0, @ANYRES64=r4]) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x0) syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1f0a00c9000001aa0101000010ffffff4cc64347000000000000000000ff0100"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="03c9002dcce6e897ef8aea15315c204134cf2a4ca9c25db50b2c59267ba9955b180f9b5ed400800000000000007d103912"], 0x31) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x1000f0000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 1.193510734s ago: executing program 4 (id=1133): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x8, 0x8, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 809.181874ms ago: executing program 1 (id=1134): write(0xffffffffffffffff, &(0x7f0000000040)="3a03", 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r1, 0x101, 0x2, 0x0, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x16) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 766.916198ms ago: executing program 4 (id=1135): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xc79c, 0x3, 0x101, 0x602, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xc, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) 0s ago: executing program 2 (id=1136): syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000800)) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_open_procfs(r1, &(0x7f00000144c0)='uid_map\x00') dup3(r6, r7, 0x0) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) kernel console output (not intermixed with test programs): 2db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.932 (12615) [ 546.324758][T12615] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 546.335107][T12615] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 546.344915][T12615] BTRFS info (device loop2): using free-space-tree [ 546.392645][ T29] audit: type=1800 audit(1728419522.244:155): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.932" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 546.552835][T12538] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 546.678756][T12639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.709378][T12639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.739281][T12639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.757001][T12639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.340752][T12650] input: syz0 as /devices/virtual/input/input16 [ 548.585341][ T5241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 548.609143][ T5241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 548.909345][ T5241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 548.928793][ T5241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 548.948861][ T5241] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 548.957492][ T5241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 549.559199][T12662] chnl_net:caif_netlink_parms(): no params data found [ 549.807342][ T5241] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 549.824811][ T5241] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 549.834835][ T5241] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 549.843774][ T5241] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 549.854392][ T5241] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 549.864305][ T5241] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 550.073880][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.073910][T12670] loop2: detected capacity change from 0 to 32768 [ 550.083557][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.119650][T12670] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.944 (12670) [ 550.143716][T12662] bridge_slave_0: entered allmulticast mode [ 550.168121][T12670] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 550.212734][T12662] bridge_slave_0: entered promiscuous mode [ 550.219863][T12670] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 550.252061][T12662] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.262524][T12670] BTRFS info (device loop2): using free-space-tree [ 550.295786][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.303250][T12662] bridge_slave_1: entered allmulticast mode [ 550.318922][T12662] bridge_slave_1: entered promiscuous mode [ 550.451239][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.482625][ T29] audit: type=1800 audit(1728419526.334:156): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.944" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 550.556575][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.651707][T12662] team0: Port device team_slave_0 added [ 550.660605][T12662] team0: Port device team_slave_1 added [ 550.684091][T12538] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 550.754522][T12662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.765342][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.830363][T12662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.851718][T12662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.867675][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.935669][T12662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.139587][ T5241] Bluetooth: hci7: command tx timeout [ 551.215156][T12713] 9pnet_fd: Insufficient options for proto=fd [ 551.694969][T12662] hsr_slave_0: entered promiscuous mode [ 551.706205][T12662] hsr_slave_1: entered promiscuous mode [ 551.755997][T12662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.764592][T12662] Cannot create hsr debugfs directory [ 551.971815][T12709] loop4: detected capacity change from 0 to 40427 [ 552.126862][ T5241] Bluetooth: hci8: command tx timeout [ 552.477903][T12709] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 552.497416][T12709] F2FS-fs (loop4): invalid crc value [ 552.505406][T12709] F2FS-fs (loop4): Found nat_bits in checkpoint [ 552.606038][T12677] chnl_net:caif_netlink_parms(): no params data found [ 552.635196][T12662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.648991][T12709] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 552.756331][ T29] audit: type=1800 audit(1728419528.594:157): pid=12709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.949" name="bus" dev="loop4" ino=17 res=0 errno=0 [ 552.786599][T12709] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_unlink+0x24c/0x960 [ 552.808618][T12709] overlayfs: cleanup of 'work/#19' failed (-3) [ 552.952103][T12465] F2FS-fs (loop4): access invalid blkaddr:2816 [ 552.981094][T12662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.986514][T12465] CPU: 1 UID: 0 PID: 12465 Comm: syz-executor Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 553.002386][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 553.013275][T12465] Call Trace: [ 553.016650][T12465] [ 553.020178][T12465] dump_stack_lvl+0x241/0x360 [ 553.024903][T12465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.030129][T12465] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 553.036130][T12465] ? stack_trace_save+0x118/0x1d0 [ 553.041253][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.046144][T12465] __f2fs_is_valid_blkaddr+0xe16/0x1460 [ 553.051744][T12465] f2fs_map_blocks+0xdd4/0x4f10 [ 553.056650][T12465] ? page_ext_get+0x1d6/0x2a0 [ 553.061367][T12465] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 553.066666][T12465] ? xa_load+0x2dd/0x350 [ 553.070926][T12465] ? __pfx_xa_load+0x10/0x10 [ 553.075617][T12465] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 553.081451][T12465] ? folio_index+0xab/0x350 [ 553.085989][T12465] f2fs_mpage_readpages+0xcae/0x2140 [ 553.091292][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.096080][T12465] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 553.101862][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.106638][T12465] ? __pfx_lock_release+0x10/0x10 [ 553.111664][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.116444][T12465] ? f2fs_readahead+0x184/0x340 [ 553.121391][T12465] read_pages+0x17e/0x840 [ 553.125737][T12465] ? percpu_ref_put+0x19/0x180 [ 553.130601][T12465] ? __pfx_read_pages+0x10/0x10 [ 553.135465][T12465] ? filemap_add_folio+0x26d/0x650 [ 553.140590][T12465] ? __pfx_filemap_add_folio+0x10/0x10 [ 553.146169][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.150950][T12465] page_cache_ra_unbounded+0x774/0x8a0 [ 553.156433][T12465] f2fs_readdir+0x5b9/0xbf0 [ 553.160950][T12465] ? __pfx___might_resched+0x10/0x10 [ 553.166265][T12465] ? __pfx_f2fs_readdir+0x10/0x10 [ 553.171322][T12465] ? trace_contention_end+0x3c/0x120 [ 553.176724][T12465] ? iterate_dir+0x20c/0x800 [ 553.181353][T12465] ? fdget_pos+0x24e/0x320 [ 553.185821][T12465] ? end_current_label_crit_section+0x151/0x180 [ 553.188962][ T5241] Bluetooth: hci7: command tx timeout [ 553.192190][T12465] ? common_file_perm+0x1a6/0x210 [ 553.202715][T12465] iterate_dir+0x571/0x800 [ 553.207182][T12465] __se_sys_getdents64+0x1d3/0x4a0 [ 553.212334][T12465] ? __pfx___se_sys_getdents64+0x10/0x10 [ 553.218081][T12465] ? __pfx_filldir64+0x10/0x10 [ 553.222872][T12465] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 553.229227][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.234126][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.238912][T12465] do_syscall_64+0xf3/0x230 [ 553.243424][T12465] ? clear_bhb_loop+0x35/0x90 [ 553.248177][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.254110][T12465] RIP: 0033:0x7feb645b0193 [ 553.258557][T12465] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 553.278268][T12465] RSP: 002b:00007ffdc49645d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 553.286843][T12465] RAX: ffffffffffffffda RBX: 00005555912c0600 RCX: 00007feb645b0193 [ 553.294872][T12465] RDX: 0000000000008000 RSI: 00005555912c0600 RDI: 0000000000000005 [ 553.302956][T12465] RBP: 00005555912c05d4 R08: 0000000000000000 R09: 0000000000000000 [ 553.310956][T12465] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 553.318954][T12465] R13: 0000000000000010 R14: 00005555912c05d0 R15: 00007ffdc4966880 [ 553.326963][T12465] [ 553.351101][T12465] F2FS-fs (loop4): access invalid blkaddr:2816 [ 553.375893][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz-executor Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 553.386468][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 553.396646][T12465] Call Trace: [ 553.399959][T12465] [ 553.402927][T12465] dump_stack_lvl+0x241/0x360 [ 553.407735][T12465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.412982][T12465] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 553.419025][T12465] __f2fs_is_valid_blkaddr+0xe16/0x1460 [ 553.424960][T12465] f2fs_map_blocks+0xdd4/0x4f10 [ 553.429871][T12465] ? page_ext_get+0x1d6/0x2a0 [ 553.434602][T12465] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 553.439938][T12465] ? xa_load+0x2dd/0x350 [ 553.444323][T12465] ? __pfx_xa_load+0x10/0x10 [ 553.448962][T12465] ? folio_index+0xab/0x350 [ 553.453613][T12465] f2fs_mpage_readpages+0xcae/0x2140 [ 553.458957][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.463862][T12465] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 553.469648][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.474730][T12465] ? __pfx_lock_release+0x10/0x10 [ 553.479800][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.484635][T12465] ? f2fs_readahead+0x184/0x340 [ 553.489540][T12465] read_pages+0x17e/0x840 [ 553.493921][T12465] ? percpu_ref_put+0x19/0x180 [ 553.498789][T12465] ? __pfx_read_pages+0x10/0x10 [ 553.503773][T12465] ? filemap_add_folio+0x26d/0x650 [ 553.508932][T12465] ? __pfx_filemap_add_folio+0x10/0x10 [ 553.514427][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.519231][T12465] page_cache_ra_unbounded+0x774/0x8a0 [ 553.524844][T12465] f2fs_readdir+0x5b9/0xbf0 [ 553.529378][T12465] ? __pfx___might_resched+0x10/0x10 [ 553.534710][T12465] ? __pfx_f2fs_readdir+0x10/0x10 [ 553.539917][T12465] ? trace_contention_end+0x3c/0x120 [ 553.545700][T12465] ? iterate_dir+0x20c/0x800 [ 553.550324][T12465] ? fdget_pos+0x24e/0x320 [ 553.554787][T12465] ? end_current_label_crit_section+0x151/0x180 [ 553.561140][T12465] ? common_file_perm+0x1a6/0x210 [ 553.566284][T12465] iterate_dir+0x571/0x800 [ 553.570911][T12465] __se_sys_getdents64+0x1d3/0x4a0 [ 553.576090][T12465] ? __pfx___se_sys_getdents64+0x10/0x10 [ 553.581752][T12465] ? __pfx_filldir64+0x10/0x10 [ 553.586566][T12465] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 553.592920][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.597703][T12465] ? rcu_is_watching+0x15/0xb0 [ 553.602484][T12465] do_syscall_64+0xf3/0x230 [ 553.607033][T12465] ? clear_bhb_loop+0x35/0x90 [ 553.611765][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.617682][T12465] RIP: 0033:0x7feb645b0193 [ 553.622256][T12465] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 553.647023][T12465] RSP: 002b:00007ffdc49645d8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 553.655479][T12465] RAX: ffffffffffffffda RBX: 00005555912c0600 RCX: 00007feb645b0193 [ 553.663563][T12465] RDX: 0000000000008000 RSI: 00005555912c0600 RDI: 0000000000000005 [ 553.671599][T12465] RBP: 00005555912c05d4 R08: 0000000000000000 R09: 0000000000000000 [ 553.679593][T12465] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 553.687599][T12465] R13: 0000000000000010 R14: 00005555912c05d0 R15: 00007ffdc4966880 [ 553.695683][T12465] [ 553.701784][T12677] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.715921][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.723285][T12677] bridge_slave_0: entered allmulticast mode [ 553.730238][T12677] bridge_slave_0: entered promiscuous mode [ 553.730347][T12465] syz-executor: attempt to access beyond end of device [ 553.730347][T12465] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 553.739242][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.757821][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.766183][T12677] bridge_slave_1: entered allmulticast mode [ 553.773205][T12677] bridge_slave_1: entered promiscuous mode [ 553.957600][T12662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.992144][ T11] kworker/u8:0: attempt to access beyond end of device [ 553.992144][ T11] loop4: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 554.024110][T12728] loop2: detected capacity change from 0 to 32768 [ 554.031072][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 554.042955][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 554.056030][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 554.063019][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 554.071500][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 554.087652][T12728] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.951 (12728) [ 554.104574][T12728] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 554.156244][T12728] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 554.177385][ T5241] Bluetooth: hci8: command tx timeout [ 554.183569][T12728] BTRFS info (device loop2): using free-space-tree [ 554.324018][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.423541][T12662] bond0: (slave netdevsim0): Releasing backup interface [ 554.490204][T12662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.527558][ T29] audit: type=1800 audit(1728419530.374:158): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.951" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 554.551307][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.654100][T12538] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 554.673072][T12677] team0: Port device team_slave_0 added [ 554.716260][T12677] team0: Port device team_slave_1 added [ 554.772916][ T11] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.843645][T12677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.865923][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.900995][T12677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.923720][ T11] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.981797][T12677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.020645][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.369193][ T5241] Bluetooth: hci7: command tx timeout [ 555.406792][T12677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.430604][ T11] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.616589][ T11] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.674715][T12677] hsr_slave_0: entered promiscuous mode [ 555.692739][T12677] hsr_slave_1: entered promiscuous mode [ 555.711115][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 555.718551][T12677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.726785][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 555.733990][T12677] Cannot create hsr debugfs directory [ 555.739826][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 555.748688][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 555.760335][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 555.767914][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 556.050014][T12662] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 556.059742][ T11] bridge_slave_1: left allmulticast mode [ 556.065444][ T11] bridge_slave_1: left promiscuous mode [ 556.079961][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.320485][ T5246] Bluetooth: hci8: command tx timeout [ 556.500868][T12770] 9pnet_fd: Insufficient options for proto=fd [ 556.794571][ T11] bridge_slave_0: left allmulticast mode [ 556.800413][ T11] bridge_slave_0: left promiscuous mode [ 556.806462][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.415766][ T5246] Bluetooth: hci7: command tx timeout [ 557.492264][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.592247][T12778] netlink: 'syz.3.961': attribute type 16 has an invalid length. [ 557.600315][T12778] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.961'. [ 558.061211][ T5246] Bluetooth: hci4: command tx timeout [ 558.070475][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.081055][ T11] bond0 (unregistering): Released all slaves [ 558.129575][T12662] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 558.144237][T12662] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 558.386956][T12662] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 558.531470][T12677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.546296][ T5246] Bluetooth: hci8: command tx timeout [ 558.914076][ T11] hsr_slave_0: left promiscuous mode [ 558.940542][ T11] hsr_slave_1: left promiscuous mode [ 558.949771][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.975840][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.999621][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.032187][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.078150][ T11] veth1_macvtap: left promiscuous mode [ 559.103989][ T11] veth0_macvtap: left promiscuous mode [ 559.130106][ T11] veth1_vlan: left promiscuous mode [ 559.135443][ T11] veth0_vlan: left promiscuous mode [ 559.510180][ T11] team0 (unregistering): Port device team_slave_1 removed [ 559.530520][ T11] team0 (unregistering): Port device team_slave_0 removed [ 559.877785][T12677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.044124][T12760] chnl_net:caif_netlink_parms(): no params data found [ 560.165844][ T5246] Bluetooth: hci4: command tx timeout [ 560.352516][T12677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.451687][T12677] bond0: (slave netdevsim0): Releasing backup interface [ 560.468600][T12677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.671744][T12662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.765853][T12760] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.773005][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.838606][T12760] bridge_slave_0: entered allmulticast mode [ 560.858344][T12760] bridge_slave_0: entered promiscuous mode [ 560.887076][T12662] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.914028][T12760] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.942004][T12760] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.975916][T12760] bridge_slave_1: entered allmulticast mode [ 560.994727][T12760] bridge_slave_1: entered promiscuous mode [ 561.040285][T12829] bond0: entered promiscuous mode [ 561.055706][T12829] bond_slave_0: entered promiscuous mode [ 561.069162][T12829] bond_slave_1: entered promiscuous mode [ 561.086331][T12829] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 561.096520][T12829] bond0: left promiscuous mode [ 561.101835][T12829] bond_slave_0: left promiscuous mode [ 561.122972][T12829] bond_slave_1: left promiscuous mode [ 561.155256][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.162529][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.209344][T12760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.294264][T12677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 561.305437][T12677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 561.333429][T12760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.431502][T12677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 561.453341][T12677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 561.504243][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.511536][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.550281][T12760] team0: Port device team_slave_0 added [ 561.588882][T12760] team0: Port device team_slave_1 added [ 561.707476][T12760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.753382][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.834142][T12760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.884266][T12760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.924629][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.019735][T12760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.215950][ T5246] Bluetooth: hci4: command tx timeout [ 562.277228][T12760] hsr_slave_0: entered promiscuous mode [ 562.303093][T12760] hsr_slave_1: entered promiscuous mode [ 562.321851][T12760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.349906][T12760] Cannot create hsr debugfs directory [ 562.836303][T12677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.030570][T12662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.063527][T12677] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.186518][ T9486] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.193638][ T9486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.228199][ T9486] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.235413][ T9486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.257229][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.263672][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.407099][T12662] veth0_vlan: entered promiscuous mode [ 563.498373][T12662] veth1_vlan: entered promiscuous mode [ 563.702355][T12760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 564.229511][T12760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 564.279546][T12760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 564.300619][ T5241] Bluetooth: hci4: command tx timeout [ 564.329228][T12760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 564.393819][T12662] veth0_macvtap: entered promiscuous mode [ 564.577645][T12662] veth1_macvtap: entered promiscuous mode [ 564.643324][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.661830][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.683102][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.713918][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.745799][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.786366][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.804349][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.845136][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.878681][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.908456][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.936185][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.949894][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.988539][T12890] loop2: detected capacity change from 0 to 32768 [ 565.005275][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.020437][T12890] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.971 (12890) [ 565.046746][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.061549][T12890] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 565.080926][T12662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.091031][T12890] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 565.107539][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.119819][T12890] BTRFS info (device loop2): using free-space-tree [ 565.147021][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.174611][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.207268][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.336172][ T5241] Bluetooth: hci0: command 0x0406 tx timeout [ 565.391168][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.421552][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.445151][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.472429][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.490242][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.512011][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.542732][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.563278][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.586275][T12662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.605856][T12662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.628748][ T29] audit: type=1800 audit(1728419541.484:159): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.971" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 565.636986][T12662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.743132][T12677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.869874][T12538] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 565.900718][T12662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.911687][T12662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.926126][T12662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.937462][T12662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.123098][T12677] veth0_vlan: entered promiscuous mode [ 566.157934][T12677] veth1_vlan: entered promiscuous mode [ 566.253777][T12760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.291362][T12760] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.325495][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.332956][ T7299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.418760][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.426974][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.427431][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.441417][ T7981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.620302][T12677] veth0_macvtap: entered promiscuous mode [ 566.660715][ T7299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.673268][T12677] veth1_macvtap: entered promiscuous mode [ 566.685862][ T7299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.744226][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.764437][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.776554][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.787231][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.797144][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.807680][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.817749][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.828261][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.838181][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.848684][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.858884][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.869563][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.880351][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.891405][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.901478][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.912099][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.923290][T12677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.933034][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.943730][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.953842][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.964546][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.975125][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.986592][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.996539][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.007135][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.017192][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.028161][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.038429][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.048959][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.058872][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.069452][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.080289][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.091763][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.103989][T12677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.201016][T12677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.210276][T12677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.219334][T12677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.228190][T12677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.395333][T12922] loop2: detected capacity change from 0 to 32768 [ 567.398756][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.423572][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.443986][T12922] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.973 (12922) [ 567.493514][T12760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.518452][T12922] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.548761][T12922] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 567.559716][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.584115][T12922] BTRFS info (device loop2): using free-space-tree [ 567.590719][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.532749][T12979] netlink: 'syz.3.975': attribute type 16 has an invalid length. [ 568.542308][T12979] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.975'. [ 568.595355][T12922] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 569.001811][T12760] veth0_vlan: entered promiscuous mode [ 569.052666][T12538] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 569.075256][T12760] veth1_vlan: entered promiscuous mode [ 569.198842][T12760] veth0_macvtap: entered promiscuous mode [ 569.229079][T12760] veth1_macvtap: entered promiscuous mode [ 569.291741][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.552110][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.699603][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.811384][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.885816][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.930160][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.987306][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.014509][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.042239][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.229916][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.326069][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.395631][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.425807][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.474503][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.516226][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.555703][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.693170][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.223851][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.276072][T12760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.312197][T12989] loop0: detected capacity change from 0 to 40427 [ 571.368488][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.423699][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.450960][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.466236][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.494226][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.508969][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.519517][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.534147][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.565189][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.588916][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.602960][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.642521][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.676071][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.713303][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.745387][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.786129][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.811875][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.832849][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.866213][T12760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.005714][T12760] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.518630][T12760] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.559973][T12760] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.592166][T12760] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.723553][T13048] netlink: 'syz.2.982': attribute type 16 has an invalid length. [ 572.762243][T13048] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.982'. [ 572.881800][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.930976][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.044834][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.097290][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.368158][T13066] input: syz0 as /devices/virtual/input/input17 [ 573.904814][T13080] input: syz0 as /devices/virtual/input/input18 [ 575.101204][T13071] loop0: detected capacity change from 0 to 40427 [ 575.110043][T13071] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 575.125030][T13071] F2FS-fs (loop0): invalid crc value [ 575.208275][T13071] F2FS-fs (loop0): Found nat_bits in checkpoint [ 575.254102][T13095] input: syz0 as /devices/virtual/input/input19 [ 575.646438][T13071] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 576.010718][ T29] audit: type=1800 audit(1728419551.844:160): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.985" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 576.012667][T13071] overlayfs: missing 'lowerdir' [ 576.346139][T12677] syz-executor: attempt to access beyond end of device [ 576.346139][T12677] loop0: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 576.390081][T13106] loop1: detected capacity change from 0 to 1024 [ 576.400916][T12677] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 576.513644][T13107] input: syz0 as /devices/virtual/input/input20 [ 576.557506][T13111] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 576.566579][T13111] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 576.579482][T13111] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 576.588170][T12677] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 576.595275][T12677] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 577.065111][T12677] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 577.235684][ T29] audit: type=1800 audit(1728419552.914:161): pid=13112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.992" name="file1" dev="loop1" ino=25 res=0 errno=0 [ 577.398725][T13119] loop2: detected capacity change from 0 to 128 [ 577.448530][T13119] EXT4-fs (loop2): Test dummy encryption mode enabled [ 577.473107][T13119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 577.507594][T13119] System zones: 1-3, 19-19, 35-36 [ 577.543404][T13119] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 577.581936][T13119] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.700581][T12538] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 579.002642][T13123] loop1: detected capacity change from 0 to 32768 [ 579.115868][T13123] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.996 (13123) [ 579.727558][T13123] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 579.741487][T13142] loop2: detected capacity change from 0 to 1024 [ 579.756163][T13123] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 579.766372][T13123] BTRFS info (device loop1): using free-space-tree [ 580.581538][T13123] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 580.582461][T13123] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 580.606271][T13142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.606533][T13123] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 580.748208][T13123] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 580.758820][T13123] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 580.790537][T13167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.888907][T13143] dccp_close: ABORT with 32 bytes unread [ 580.908297][T13123] BTRFS error (device loop1): open_ctree failed [ 581.123257][T13167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.269274][T13167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.436911][T13167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.626806][T13167] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.698419][T13167] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.707123][T13172] loop4: detected capacity change from 0 to 40427 [ 582.416659][T13167] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.437549][T13167] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.522820][T13172] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 582.542734][T13172] F2FS-fs (loop4): invalid crc value [ 582.729201][T13172] F2FS-fs (loop4): Found nat_bits in checkpoint [ 583.432138][T13172] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 583.461478][T13176] loop1: detected capacity change from 0 to 40427 [ 583.574329][T13172] overlayfs: missing 'workdir' [ 583.579400][ T29] audit: type=1800 audit(1728419559.424:162): pid=13172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1004" name="bus" dev="loop4" ino=17 res=0 errno=0 [ 583.719886][T13176] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1fffff [ 584.087893][T13176] F2FS-fs (loop1): invalid crc value [ 584.154359][T12760] syz-executor: attempt to access beyond end of device [ 584.154359][T12760] loop4: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 584.188348][T12760] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 584.246196][T12760] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 584.281453][T13176] F2FS-fs (loop1): Found nat_bits in checkpoint [ 584.322867][T12760] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 584.355701][T12760] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 585.332398][T13216] netlink: 'syz.1.1015': attribute type 16 has an invalid length. [ 585.340647][T13216] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1015'. [ 587.550796][T13220] loop0: detected capacity change from 0 to 32768 [ 587.569650][T13220] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1016 (13220) [ 587.587328][T13220] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 587.598163][T13220] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 587.685830][T13220] BTRFS info (device loop0): using free-space-tree [ 587.898975][T13239] netlink: 'syz.1.1019': attribute type 16 has an invalid length. [ 587.907134][T13239] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1019'. [ 588.339580][ T29] audit: type=1800 audit(1728419564.184:163): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1016" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 588.828050][T12677] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 589.229255][ T5241] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 589.253007][ T5241] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 589.261017][ T5241] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 589.272657][ T5241] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 589.474306][ T5241] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 589.561317][T13264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.615313][ T5241] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 589.626647][T13264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.649270][T13264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.674905][T13267] loop1: detected capacity change from 0 to 256 [ 589.726078][ T29] audit: type=1800 audit(1728419565.574:164): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1024" name="file1" dev="loop1" ino=1048715 res=0 errno=0 [ 589.752980][T13267] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 589.763272][T13267] FAT-fs (loop1): Filesystem has been set read-only [ 590.863548][T13264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.914914][ T5241] Bluetooth: hci9: command tx timeout [ 594.955977][ T5241] Bluetooth: hci9: command tx timeout [ 597.063866][ T5246] Bluetooth: hci9: command tx timeout [ 597.082918][T13276] loop0: detected capacity change from 0 to 1024 [ 610.486988][ T5241] Bluetooth: hci9: command tx timeout [ 617.457471][T13276] hfsplus: failed to load extents file [ 627.236005][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.242314][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.320918][T13259] chnl_net:caif_netlink_parms(): no params data found [ 629.933769][ T5246] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 629.954146][ T5246] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 629.980173][ T5234] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 629.990982][ T5234] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 629.999697][ T5234] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 630.008381][ T5234] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 630.016109][ T5234] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 630.023348][ T5234] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 630.031614][ T5234] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 630.040164][ T5241] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 630.054952][ T5234] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 630.062484][ T5234] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 630.196270][T13137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.295783][T13293] Bluetooth: hci10: command tx timeout [ 633.603387][T13295] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 633.711327][T13295] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 634.182398][T13295] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 634.189853][ T5246] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 634.205622][T13295] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 634.213072][T13295] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 634.221721][T13295] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 634.229112][ T5246] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 634.237071][T13295] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 634.244548][T13295] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 634.244548][ T5246] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 634.269813][ T5246] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 634.385474][T13293] Bluetooth: hci10: command tx timeout [ 634.581031][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.605758][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.613001][T13259] bridge_slave_0: entered allmulticast mode [ 634.636484][T13259] bridge_slave_0: entered promiscuous mode [ 634.656631][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.665064][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.687887][T13259] bridge_slave_1: entered allmulticast mode [ 634.708582][T13259] bridge_slave_1: entered promiscuous mode [ 634.838498][ T9510] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.913435][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.129256][ T9510] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.147370][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.173907][T13259] team0: Port device team_slave_0 added [ 635.185823][T13259] team0: Port device team_slave_1 added [ 635.236350][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.243339][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.271899][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.291506][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.299056][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.331325][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.353845][ T9510] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.419905][ T9510] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.473257][T13259] hsr_slave_0: entered promiscuous mode [ 635.484269][T13259] hsr_slave_1: entered promiscuous mode [ 635.493121][T13259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.501243][T13259] Cannot create hsr debugfs directory [ 635.655831][T13295] Bluetooth: hci11: command tx timeout [ 635.729649][T13298] chnl_net:caif_netlink_parms(): no params data found [ 635.814686][T13288] chnl_net:caif_netlink_parms(): no params data found [ 635.971900][ T9510] bridge_slave_1: left allmulticast mode [ 635.978453][ T9510] bridge_slave_1: left promiscuous mode [ 635.984209][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.994841][ T9510] bridge_slave_0: left allmulticast mode [ 636.001404][ T9510] bridge_slave_0: left promiscuous mode [ 636.011432][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.152482][ T9510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.168366][ T9510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.179950][ T9510] bond0 (unregistering): Released all slaves [ 636.266654][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.273846][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.281395][T13298] bridge_slave_0: entered allmulticast mode [ 636.289245][T13298] bridge_slave_0: entered promiscuous mode [ 636.311711][T13297] chnl_net:caif_netlink_parms(): no params data found [ 636.335311][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.342912][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.350941][T13298] bridge_slave_1: entered allmulticast mode [ 636.358950][T13298] bridge_slave_1: entered promiscuous mode [ 636.405868][T13288] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.413083][T13288] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.420698][T13288] bridge_slave_0: entered allmulticast mode [ 636.428638][T13288] bridge_slave_0: entered promiscuous mode [ 636.436264][T13288] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.443417][T13288] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.450772][T13288] bridge_slave_1: entered allmulticast mode [ 636.456793][T13295] Bluetooth: hci10: command tx timeout [ 636.457964][T13288] bridge_slave_1: entered promiscuous mode [ 636.473470][T13287] chnl_net:caif_netlink_parms(): no params data found [ 636.528672][T13259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.539349][T13295] Bluetooth: hci13: command tx timeout [ 636.580184][T13259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.602050][T13298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.616872][T13295] Bluetooth: hci12: command tx timeout [ 636.623637][T13298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.640799][T13288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.653317][T13288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.703878][T13259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.772267][T13297] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.786450][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.793914][T13297] bridge_slave_0: entered allmulticast mode [ 636.808651][T13297] bridge_slave_0: entered promiscuous mode [ 636.843589][T13259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.867626][ T9510] hsr_slave_0: left promiscuous mode [ 636.873597][ T9510] hsr_slave_1: left promiscuous mode [ 636.885213][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.893087][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.901827][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.909430][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.920909][ T9510] veth1_macvtap: left promiscuous mode [ 636.926563][ T9510] veth0_macvtap: left promiscuous mode [ 636.932136][ T9510] veth1_vlan: left promiscuous mode [ 636.937920][ T9510] veth0_vlan: left promiscuous mode [ 637.054313][ T9510] team0 (unregistering): Port device team_slave_1 removed [ 637.074065][ T9510] team0 (unregistering): Port device team_slave_0 removed [ 637.137371][T13297] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.144606][T13297] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.152196][T13297] bridge_slave_1: entered allmulticast mode [ 637.159185][T13297] bridge_slave_1: entered promiscuous mode [ 637.175109][T13298] team0: Port device team_slave_0 added [ 637.206942][T13288] team0: Port device team_slave_0 added [ 637.224171][T13298] team0: Port device team_slave_1 added [ 637.258420][T13288] team0: Port device team_slave_1 added [ 637.265288][T13287] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.273135][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.281028][T13287] bridge_slave_0: entered allmulticast mode [ 637.288122][T13287] bridge_slave_0: entered promiscuous mode [ 637.298084][T13297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.311203][T13297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.344477][T13298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.352155][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.378883][T13298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.414198][T13287] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.421822][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.431563][T13287] bridge_slave_1: entered allmulticast mode [ 637.440352][T13287] bridge_slave_1: entered promiscuous mode [ 637.476926][T13297] team0: Port device team_slave_0 added [ 637.483357][T13298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.492447][T13298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.525836][T13298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.552144][T13288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.561698][T13288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.595602][T13288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.637963][T13297] team0: Port device team_slave_1 added [ 637.654109][T13287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.679390][T13288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.686842][T13288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.714178][T13288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.735640][T13295] Bluetooth: hci11: command tx timeout [ 637.756878][T13287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.812762][T13298] hsr_slave_0: entered promiscuous mode [ 637.821478][T13298] hsr_slave_1: entered promiscuous mode [ 637.828377][T13298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.837691][T13298] Cannot create hsr debugfs directory [ 637.848249][T13259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 637.869455][T13288] hsr_slave_0: entered promiscuous mode [ 637.876261][T13288] hsr_slave_1: entered promiscuous mode [ 637.882551][T13288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.890342][T13288] Cannot create hsr debugfs directory [ 637.897638][T13297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.904736][T13297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.931548][T13297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.945695][T13297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.952844][T13297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.979098][T13297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.999136][T13287] team0: Port device team_slave_0 added [ 638.010067][T13259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 638.019560][T13259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 638.029361][T13259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 638.050463][T13287] team0: Port device team_slave_1 added [ 638.125086][T13287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.138999][T13287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.167789][T13287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.233124][T13287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.240931][T13287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.269804][T13287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.317460][T13297] hsr_slave_0: entered promiscuous mode [ 638.324086][T13297] hsr_slave_1: entered promiscuous mode [ 638.338545][T13297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.347758][T13297] Cannot create hsr debugfs directory [ 638.409866][T13287] hsr_slave_0: entered promiscuous mode [ 638.416358][T13287] hsr_slave_1: entered promiscuous mode [ 638.422455][T13287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.430463][T13287] Cannot create hsr debugfs directory [ 638.481643][ T9510] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.528142][T13298] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.539237][T13295] Bluetooth: hci10: command tx timeout [ 638.572993][ T9510] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.606630][T13298] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.618675][T13295] Bluetooth: hci13: command tx timeout [ 638.642140][ T9510] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.683368][T13298] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.695795][T13295] Bluetooth: hci12: command tx timeout [ 638.714932][ T9510] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.762696][T13298] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.839208][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.891652][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.902475][ T9510] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.933144][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.940329][ T8241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.952124][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.959393][ T8241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.994758][ T9510] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.047088][T13298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 639.069141][ T9510] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.083774][T13298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 639.121435][T13298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 639.133990][T13298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.150676][ T9510] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.333859][ T9510] bridge_slave_1: left allmulticast mode [ 639.353166][ T9510] bridge_slave_1: left promiscuous mode [ 639.361178][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.379676][ T9510] bridge_slave_0: left allmulticast mode [ 639.390134][ T9510] bridge_slave_0: left promiscuous mode [ 639.401635][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.412764][ T9510] bridge_slave_1: left allmulticast mode [ 639.419728][ T9510] bridge_slave_1: left promiscuous mode [ 639.425967][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.434816][ T9510] bridge_slave_0: left allmulticast mode [ 639.440813][ T9510] bridge_slave_0: left promiscuous mode [ 639.452973][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.462446][ T9510] bridge_slave_1: left allmulticast mode [ 639.469685][ T9510] bridge_slave_1: left promiscuous mode [ 639.477741][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.488008][ T9510] bridge_slave_0: left allmulticast mode [ 639.493697][ T9510] bridge_slave_0: left promiscuous mode [ 639.499926][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.509541][ T9510] bridge_slave_1: left allmulticast mode [ 639.515228][ T9510] bridge_slave_1: left promiscuous mode [ 639.521542][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.530462][ T9510] bridge_slave_0: left allmulticast mode [ 639.536458][ T9510] bridge_slave_0: left promiscuous mode [ 639.542193][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.551936][ T9510] bridge_slave_1: left allmulticast mode [ 639.558020][ T9510] bridge_slave_1: left promiscuous mode [ 639.563697][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.573054][ T9510] bridge_slave_0: left allmulticast mode [ 639.580691][ T9510] bridge_slave_0: left promiscuous mode [ 639.586907][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.815755][T13295] Bluetooth: hci11: command tx timeout [ 640.111703][ T9510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.122883][ T9510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.139854][ T9510] bond0 (unregistering): Released all slaves [ 640.152218][ T9510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.166379][ T9510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.177291][ T9510] bond0 (unregistering): Released all slaves [ 640.190683][ T9510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.201626][ T9510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.214240][ T9510] bond0 (unregistering): Released all slaves [ 640.228371][ T9510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.239938][ T9510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.251462][ T9510] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 640.263623][ T9510] bond0 (unregistering): Released all slaves [ 640.276421][ T9510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.287480][ T9510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.301630][ T9510] bond0 (unregistering): Released all slaves [ 640.369513][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.384113][T13298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.405157][T13288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 640.442612][T13288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 640.466572][T13288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 640.479659][T13288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 640.551750][T13298] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.643738][ T9486] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.650968][ T9486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.675017][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.682273][ T8241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.696489][T13295] Bluetooth: hci13: command tx timeout [ 640.701984][T13259] veth0_vlan: entered promiscuous mode [ 640.778369][T13295] Bluetooth: hci12: command tx timeout [ 640.810698][T13259] veth1_vlan: entered promiscuous mode [ 640.861182][T13259] veth0_macvtap: entered promiscuous mode [ 640.908355][T13259] veth1_macvtap: entered promiscuous mode [ 640.968752][T13297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 640.980581][T13297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 641.003674][T13297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 641.040023][T13297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 641.075423][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.086369][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.096805][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.108172][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.119614][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.130482][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.140420][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.151214][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.161106][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.171648][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.182211][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.192925][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.202834][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.214365][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.224497][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.235126][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.245117][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.256000][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.267252][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.294425][T13288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.306612][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.318910][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.329793][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.341185][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.352414][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.363155][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.373267][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.383860][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.394657][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.405481][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.416974][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.429893][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.440532][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.451289][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.461489][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.472044][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.481997][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.492713][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.503706][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.551643][T13298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.567324][T13259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.578469][T13259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.587629][T13259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.596416][T13259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.640743][T13288] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.703503][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.710831][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.760351][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.767542][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.783188][T13298] veth0_vlan: entered promiscuous mode [ 641.830916][T13287] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 641.841692][T13287] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 641.870074][T13287] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 641.880107][T13287] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 641.895979][T13295] Bluetooth: hci11: command tx timeout [ 641.905443][ T9510] hsr_slave_0: left promiscuous mode [ 641.911824][ T9510] hsr_slave_1: left promiscuous mode [ 641.918491][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.927353][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.936939][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.944502][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.959144][ T9510] hsr_slave_0: left promiscuous mode [ 641.965359][ T9510] hsr_slave_1: left promiscuous mode [ 641.972075][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.980125][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.988447][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.996190][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.008313][ T9510] hsr_slave_0: left promiscuous mode [ 642.014185][ T9510] hsr_slave_1: left promiscuous mode [ 642.020348][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.028463][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.037449][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.045126][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.059264][ T9510] hsr_slave_0: left promiscuous mode [ 642.065254][ T9510] hsr_slave_1: left promiscuous mode [ 642.072428][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.080223][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.088545][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.096410][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.109520][ T9510] hsr_slave_0: left promiscuous mode [ 642.116472][ T9510] hsr_slave_1: left promiscuous mode [ 642.122333][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.130406][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.139399][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.147790][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.165211][ T9510] veth1_macvtap: left promiscuous mode [ 642.171224][ T9510] veth0_macvtap: left promiscuous mode [ 642.178090][ T9510] veth1_vlan: left promiscuous mode [ 642.183370][ T9510] veth0_vlan: left promiscuous mode [ 642.189574][ T9510] veth1_macvtap: left promiscuous mode [ 642.195278][ T9510] veth0_macvtap: left promiscuous mode [ 642.201423][ T9510] veth1_vlan: left promiscuous mode [ 642.206868][ T9510] veth0_vlan: left promiscuous mode [ 642.212991][ T9510] veth1_macvtap: left promiscuous mode [ 642.218933][ T9510] veth0_macvtap: left promiscuous mode [ 642.224521][ T9510] veth1_vlan: left promiscuous mode [ 642.234234][ T9510] veth0_vlan: left promiscuous mode [ 642.240962][ T9510] veth1_macvtap: left promiscuous mode [ 642.246727][ T9510] veth0_macvtap: left promiscuous mode [ 642.252346][ T9510] veth1_vlan: left promiscuous mode [ 642.258561][ T9510] veth0_vlan: left promiscuous mode [ 642.264691][ T9510] veth1_macvtap: left promiscuous mode [ 642.270367][ T9510] veth0_macvtap: left promiscuous mode [ 642.276137][ T9510] veth1_vlan: left promiscuous mode [ 642.281424][ T9510] veth0_vlan: left promiscuous mode [ 642.612570][ T9510] team0 (unregistering): Port device team_slave_1 removed [ 642.634285][ T9510] team0 (unregistering): Port device team_slave_0 removed [ 642.764539][ T9510] team0 (unregistering): Port device team_slave_1 removed [ 642.775878][T13295] Bluetooth: hci13: command tx timeout [ 642.782908][ T9510] team0 (unregistering): Port device team_slave_0 removed [ 642.855684][T13295] Bluetooth: hci12: command tx timeout [ 642.920317][ T9510] team0 (unregistering): Port device team_slave_1 removed [ 642.933185][ T9510] team0 (unregistering): Port device team_slave_0 removed [ 643.077725][ T9510] team0 (unregistering): Port device team_slave_1 removed [ 643.093814][ T9510] team0 (unregistering): Port device team_slave_0 removed [ 643.219010][ T9510] team0 (unregistering): Port device team_slave_1 removed [ 643.236342][ T9510] team0 (unregistering): Port device team_slave_0 removed [ 643.310511][T13298] veth1_vlan: entered promiscuous mode [ 643.330117][T13297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.338916][ T7981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.353584][ T7981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.393790][T13297] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.422087][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.429217][ T7981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.449143][ T8241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.460127][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.467301][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.484088][ T8241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.519354][T13298] veth0_macvtap: entered promiscuous mode [ 643.542502][T13298] veth1_macvtap: entered promiscuous mode [ 643.750341][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.762727][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.781592][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.792451][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.802962][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.077169][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.137125][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.202478][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.261867][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.277569][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.294570][T13298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.322126][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.334152][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.344845][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.355836][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.365729][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.376375][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.386450][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.397630][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.407792][T13298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.419071][T13298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.432959][T13298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.460356][T13298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.469473][T13298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.479071][T13298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.488248][T13298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.523474][T13287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.553204][T13287] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.609049][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.616239][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.677899][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.685229][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.730649][T13288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.857863][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.889437][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.959468][T13297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.012824][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.047472][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.111908][T13297] veth0_vlan: entered promiscuous mode [ 645.174340][T13297] veth1_vlan: entered promiscuous mode [ 645.260063][T13431] loop2: detected capacity change from 0 to 32768 [ 645.287015][T13287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.315725][T13431] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1030 (13431) [ 645.356549][T13287] veth0_vlan: entered promiscuous mode [ 645.370305][T13287] veth1_vlan: entered promiscuous mode [ 645.439252][T13431] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 645.452863][T13297] veth0_macvtap: entered promiscuous mode [ 645.485121][T13431] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 645.930062][T13297] veth1_macvtap: entered promiscuous mode [ 646.001661][T13288] veth0_vlan: entered promiscuous mode [ 646.079908][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.139897][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.153505][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.164868][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.175749][T13431] BTRFS info (device loop2): rebuilding free space tree [ 646.184133][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.197016][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.207249][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.216136][T13431] BTRFS info (device loop2): disabling free space tree [ 646.218284][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.224607][T13431] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 646.236053][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.255885][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.264800][T13431] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 646.275644][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.294813][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.411615][T13486] loop1: detected capacity change from 0 to 1024 [ 646.422564][T13297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.442516][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.505669][ T29] audit: type=1804 audit(1728419622.354:165): pid=13431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1030" name="/newroot/1/bus/file1" dev="loop2" ino=260 res=1 errno=0 [ 646.533185][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.554502][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.577982][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.595417][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.606337][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.617715][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.628465][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.638772][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.650583][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.651090][T13493] BTRFS info (device loop2): balance: start -d -m [ 646.660524][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.660561][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.661780][T13297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.673006][T13493] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 646.820430][ T29] audit: type=1800 audit(1728419622.604:166): pid=13495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1032" name="file1" dev="loop1" ino=25 res=0 errno=0 [ 646.899153][T13287] veth0_macvtap: entered promiscuous mode [ 647.014359][T13288] veth1_vlan: entered promiscuous mode [ 647.059990][T13493] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 647.220985][T13297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.253327][T13297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.269419][T13297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.277444][T13493] BTRFS info (device loop2): found 8 extents, stage: move data extents [ 647.287049][T13297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.391926][T13493] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 647.412911][T13288] veth0_macvtap: entered promiscuous mode [ 647.435067][T13287] veth1_macvtap: entered promiscuous mode [ 647.467810][T13493] BTRFS info (device loop2): balance: ended with status: 0 [ 647.480249][T13288] veth1_macvtap: entered promiscuous mode [ 647.554565][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.567780][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.571458][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.589282][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.601131][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.613575][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.625431][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.639578][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.654257][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.666756][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.677607][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.687514][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.698362][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.708817][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.719651][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.730117][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.745480][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.755342][T13287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.769447][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.787442][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.799164][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.809466][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.820546][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.830487][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.841335][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.851291][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.862069][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.873474][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.887565][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.899780][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.910611][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.920911][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.931587][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.947550][T13287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.958447][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.974799][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.989092][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.002304][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.016238][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.027091][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.038155][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.063644][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.075873][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.089944][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.100528][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.117379][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.129450][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.144258][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.157560][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.168137][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.179924][T13259] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 648.200580][T13288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.231629][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.258032][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.288770][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.315610][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.355698][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.381749][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.405603][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.440911][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.473397][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.571871][T13547] Process accounting resumed [ 648.965641][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.006337][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.021122][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.032706][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.043433][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.250493][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.533364][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.550243][T13288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.561136][T13287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.571031][T13287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.585597][T13287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.594369][T13287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.768416][T13288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.785749][T13288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.794520][T13288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.824615][T13288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.856521][ T7981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.864443][ T7981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.930535][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.938971][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.264301][T13578] netlink: 'syz.0.1029': attribute type 16 has an invalid length. [ 650.272578][T13578] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1029'. [ 650.651636][ T8241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.962371][ T8241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.113947][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.122021][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.144494][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.154572][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.342864][T13567] loop1: detected capacity change from 0 to 32768 [ 651.353496][T13567] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1039 (13567) [ 651.628393][T13567] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 651.858086][T13567] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 651.886328][T13567] BTRFS info (device loop1): using free-space-tree [ 651.944181][ T8241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.008915][ T8241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.276260][T13624] netlink: 'syz.0.1042': attribute type 12 has an invalid length. [ 652.397120][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 652.814253][ T29] audit: type=1800 audit(1728419628.644:167): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1039" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 653.024369][T13298] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 653.264593][T13644] bridge_slave_0: left allmulticast mode [ 653.323144][T13644] bridge_slave_0: left promiscuous mode [ 653.348674][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.559654][T13644] bridge_slave_1: left allmulticast mode [ 653.568456][T13644] bridge_slave_1: left promiscuous mode [ 653.574657][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.692038][T13644] bond0: (slave bond_slave_0): Releasing backup interface [ 656.052378][T13644] bond0: (slave bond_slave_1): Releasing backup interface [ 656.196485][T13644] team0: Port device team_slave_0 removed [ 656.338747][T13644] team0: Port device team_slave_1 removed [ 656.376454][T13644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.431086][T13644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.495262][T13644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.504548][T13644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.629594][T13672] loop3: detected capacity change from 0 to 32768 [ 656.638791][T13672] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1051 (13672) [ 656.663895][T13650] bond0: entered promiscuous mode [ 656.669489][T13650] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 656.690053][T13650] bond0: left promiscuous mode [ 656.730758][T13672] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 656.750406][T13672] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 656.759705][T13675] bridge_slave_0: left allmulticast mode [ 656.761018][T13672] BTRFS info (device loop3): using free-space-tree [ 656.772949][T13675] bridge_slave_0: left promiscuous mode [ 656.792004][T13675] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.831729][T13675] bridge_slave_1: left allmulticast mode [ 656.849801][T13675] bridge_slave_1: left promiscuous mode [ 656.861175][T13675] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.895123][T13675] bond0: (slave bond_slave_0): Releasing backup interface [ 656.932154][T13675] bond0: (slave bond_slave_1): Releasing backup interface [ 656.960599][T13675] team0: Port device team_slave_0 removed [ 656.971337][T13675] team0: Port device team_slave_1 removed [ 656.979288][T13675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.988398][T13675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.997862][T13675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.006469][T13675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.030006][ T29] audit: type=1800 audit(1728419632.884:168): pid=13672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1051" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 657.051748][T13669] bridge_slave_0: left allmulticast mode [ 657.074343][T13669] bridge_slave_0: left promiscuous mode [ 657.084166][T13669] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.129692][T13669] bridge_slave_1: left allmulticast mode [ 657.142596][T13669] bridge_slave_1: left promiscuous mode [ 657.153948][T13669] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.172524][T13669] bond0: (slave bond_slave_0): Releasing backup interface [ 657.173502][T13287] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 657.198532][T13669] bond0: (slave bond_slave_1): Releasing backup interface [ 657.229249][T13669] team0: Port device team_slave_0 removed [ 657.239945][T13669] team0: Port device team_slave_1 removed [ 657.249691][T13669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.258354][T13669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.268548][T13669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.281756][T13669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.305401][T13679] bond0: entered promiscuous mode [ 657.315128][T13679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 657.332975][T13679] bond0: left promiscuous mode [ 657.405956][T13683] bond0: entered promiscuous mode [ 657.422577][T13683] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 657.535958][T13683] bond0: left promiscuous mode [ 657.772408][T13693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1054'. [ 657.897050][T13716] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1059'. [ 659.046724][T13728] loop1: detected capacity change from 0 to 32768 [ 659.080952][T13728] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1062 (13728) [ 659.175740][T13728] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 659.186224][T13728] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 659.196019][T13728] BTRFS info (device loop1): using free-space-tree [ 659.369384][T13757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1067'. [ 659.414112][ T29] audit: type=1800 audit(1728419635.254:169): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1062" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 659.536048][T13298] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 659.734850][T13770] netlink: 'syz.3.1068': attribute type 16 has an invalid length. [ 659.745879][T13770] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1068'. [ 660.050839][T13723] loop4: detected capacity change from 0 to 40427 [ 660.327683][T13723] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 660.420831][T13723] F2FS-fs (loop4): invalid crc value [ 660.494895][T13723] F2FS-fs (loop4): Found nat_bits in checkpoint [ 660.496021][T13776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1071'. [ 661.056859][T13779] bridge_slave_0: left allmulticast mode [ 661.071372][T13779] bridge_slave_0: left promiscuous mode [ 661.151498][T13779] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.171208][T13779] bridge_slave_1: left allmulticast mode [ 661.188355][T13779] bridge_slave_1: left promiscuous mode [ 661.246917][T13779] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.697361][T13779] bond0: (slave bond_slave_0): Releasing backup interface [ 661.766528][T13795] loop2: detected capacity change from 0 to 512 [ 661.775311][T13795] EXT4-fs: Ignoring removed oldalloc option [ 661.788578][T13795] EXT4-fs: Ignoring removed oldalloc option [ 661.803903][T13795] EXT4-fs (loop2): orphan cleanup on readonly fs [ 661.822505][T13795] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1075: Parent and EA inode have the same ino 15 [ 661.837335][T13795] EXT4-fs (loop2): Remounting filesystem read-only [ 661.841257][T13779] bond0: (slave bond_slave_1): Releasing backup interface [ 661.856135][T13795] EXT4-fs (loop2): 1 orphan inode deleted [ 661.862701][T13795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 661.974198][T13779] team0: Port device team_slave_0 removed [ 661.995052][T13779] team0: Port device team_slave_1 removed [ 662.008715][T13779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.017819][T13779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.029132][T13779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.036890][T13779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.058304][T13790] bond0: entered promiscuous mode [ 662.063899][T13790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 662.072495][T13790] bond0: left promiscuous mode [ 662.336580][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 662.737926][T13806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'. [ 662.847036][T13808] loop3: detected capacity change from 0 to 764 [ 662.882370][T13259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.533372][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 664.600748][T13829] raw_sendmsg: syz.0.1085 forgot to set AF_INET. Fix it! [ 664.642081][T13830] bridge_slave_0: left allmulticast mode [ 664.654437][T13831] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 664.677767][T13830] bridge_slave_0: left promiscuous mode [ 664.691563][T13830] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.712597][T13830] bridge_slave_1: left allmulticast mode [ 664.729189][T13830] bridge_slave_1: left promiscuous mode [ 664.740403][T13830] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.870468][T13830] bond0: (slave bond_slave_0): Releasing backup interface [ 664.893299][T13812] loop1: detected capacity change from 0 to 32768 [ 664.902394][T13812] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1082 (13812) [ 664.961138][T13830] bond0: (slave bond_slave_1): Releasing backup interface [ 665.439113][T13830] team0: Port device team_slave_0 removed [ 665.668318][T13830] team0: Port device team_slave_1 removed [ 665.674896][T13830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.750619][T13830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.795939][T13830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.801775][T13812] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 665.803427][T13830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.851570][T13812] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 665.918091][T13812] BTRFS info (device loop1): using free-space-tree [ 665.938142][T13832] bond0: entered promiscuous mode [ 665.979748][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 665.979960][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 665.985933][T13832] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 666.021882][T13832] bond0: left promiscuous mode [ 666.075570][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 666.134927][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 666.190503][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 666.494023][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 666.503321][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 666.513432][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 666.514313][T13828] loop4: detected capacity change from 0 to 40427 [ 666.523898][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 666.538399][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 666.550545][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 666.560971][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 666.571263][T13812] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 666.580933][T13828] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 666.664573][T13843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 666.682638][T13812] BTRFS error (device loop1): open_ctree failed [ 666.723056][T13828] F2FS-fs (loop4): invalid crc value [ 666.803048][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 666.861739][T13864] loop0: detected capacity change from 0 to 512 [ 666.906353][T13864] EXT4-fs: Ignoring removed oldalloc option [ 666.912336][T13864] EXT4-fs: Ignoring removed oldalloc option [ 666.930234][T13828] F2FS-fs (loop4): Found nat_bits in checkpoint [ 666.953010][T13864] EXT4-fs (loop0): orphan cleanup on readonly fs [ 666.971687][T13864] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1093: Parent and EA inode have the same ino 15 [ 666.988042][T13869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'. [ 667.004137][T13873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.011693][T13873] IPv6: NLM_F_CREATE should be set when creating new route [ 667.057499][T13864] EXT4-fs (loop0): Remounting filesystem read-only [ 667.064625][T13864] EXT4-fs (loop0): 1 orphan inode deleted [ 667.071662][T13864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 667.452584][T13828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 667.834005][T13884] bond0: entered promiscuous mode [ 667.902874][T13884] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 667.917618][T13297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.917818][T13888] loop3: detected capacity change from 0 to 764 [ 667.987159][T13884] bond0: left promiscuous mode [ 668.092238][T13886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1098'. [ 668.842377][T13904] loop1: detected capacity change from 0 to 128 [ 668.870876][T13905] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 669.220932][T13904] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 669.455313][T13899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1104'. [ 670.057139][T13913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1106'. [ 670.239785][T13923] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 670.611256][T13928] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.691625][T13928] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.010703][T13921] dccp_close: ABORT with 32 bytes unread [ 671.219792][T13928] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.239388][T13933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 671.296416][T13928] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.371970][T13943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.504293][T13928] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.521289][T13928] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.799768][T13947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.044585][T13943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.074879][T13928] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.102301][T13928] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.130450][T13947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.365746][T13954] netlink: 'syz.2.1118': attribute type 16 has an invalid length. [ 672.373867][T13954] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1118'. [ 672.378209][T13943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.666843][T13947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.691047][T13943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.743692][T13947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.808247][T13943] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.824965][T13943] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.846601][T13943] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.872603][T13943] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.964634][T13947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.997160][T13947] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.034643][T13947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.420108][T13947] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.545748][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.587381][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.691156][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.701138][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.773698][T13981] loop2: detected capacity change from 0 to 512 [ 673.954603][T13981] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1129: Invalid inode bitmap blk 4 in block_group 0 [ 673.973379][T13981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.515455][T13992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.581940][T13992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.606044][ T29] audit: type=1804 audit(1728419650.454:170): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1129" name="/newroot/25/file0/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 674.766097][T13997] netlink: 'syz.1.1131': attribute type 16 has an invalid length. [ 674.766189][T13997] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1131'. [ 674.817888][T13992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.042983][T13992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.115803][T13295] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci12/hci12:201' [ 675.115824][T13295] CPU: 0 UID: 0 PID: 13295 Comm: kworker/u9:1 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 675.115845][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 675.115856][T13295] Workqueue: hci12 hci_rx_work [ 675.115889][T13295] Call Trace: [ 675.115895][T13295] [ 675.115904][T13295] dump_stack_lvl+0x241/0x360 [ 675.115928][T13295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.115948][T13295] ? __pfx__printk+0x10/0x10 [ 675.115967][T13295] ? __kmalloc_cache_noprof+0x243/0x390 [ 675.115992][T13295] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 675.116013][T13295] sysfs_create_dir_ns+0x2ce/0x3a0 [ 675.116031][T13295] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 675.116053][T13295] kobject_add_internal+0x435/0x8d0 [ 675.116078][T13295] kobject_add+0x152/0x220 [ 675.116096][T13295] ? do_raw_spin_unlock+0x13c/0x8b0 [ 675.116119][T13295] ? device_add+0x3e7/0xbf0 [ 675.116136][T13295] ? __pfx_kobject_add+0x10/0x10 [ 675.116155][T13295] ? _raw_spin_unlock+0x28/0x50 [ 675.116173][T13295] ? get_device_parent+0x165/0x410 [ 675.116199][T13295] device_add+0x4e5/0xbf0 [ 675.116220][T13295] hci_conn_add_sysfs+0xe8/0x200 [ 675.116240][T13295] le_conn_complete_evt+0xc9f/0x12e0 [ 675.116261][T13295] ? trace_contention_end+0x3c/0x120 [ 675.116284][T13295] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 675.116301][T13295] ? __mutex_unlock_slowpath+0x21d/0x750 [ 675.116322][T13295] ? __copy_skb_header+0x437/0x5b0 [ 675.116344][T13295] ? skb_pull_data+0x112/0x230 [ 675.116370][T13295] hci_le_enh_conn_complete_evt+0x185/0x420 [ 675.116401][T13295] hci_event_packet+0xa55/0x1540 [ 675.116425][T13295] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 675.116453][T13295] ? __pfx_hci_event_packet+0x10/0x10 [ 675.116479][T13295] ? set_offload_codec_func+0x590/0x5a0 [ 675.116503][T13295] ? kcov_remote_start+0x97/0x7d0 [ 675.116529][T13295] hci_rx_work+0x3fe/0xd80 [ 675.116555][T13295] ? process_scheduled_works+0x976/0x1850 [ 675.116580][T13295] process_scheduled_works+0xa63/0x1850 [ 675.116618][T13295] ? __pfx_process_scheduled_works+0x10/0x10 [ 675.116645][T13295] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 675.116663][T13295] ? assign_work+0x364/0x3d0 [ 675.116689][T13295] worker_thread+0x870/0xd30 [ 675.116718][T13295] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 675.116737][T13295] ? __kthread_parkme+0x169/0x1d0 [ 675.116764][T13295] ? __pfx_worker_thread+0x10/0x10 [ 675.116789][T13295] kthread+0x2f0/0x390 [ 675.116806][T13295] ? __pfx_worker_thread+0x10/0x10 [ 675.116830][T13295] ? __pfx_kthread+0x10/0x10 [ 675.116848][T13295] ret_from_fork+0x4b/0x80 [ 675.116873][T13295] ? __pfx_kthread+0x10/0x10 [ 675.116889][T13295] ret_from_fork_asm+0x1a/0x30 [ 675.116921][T13295] [ 675.116936][T13295] kobject: kobject_add_internal failed for hci12:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 675.116957][T13295] Bluetooth: hci12: failed to register connection device [ 675.180830][T14003] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.257035][T13986] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 675.629997][T14003] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.670776][T14005] ptrace attach of "./syz-executor exec"[14009] was attempted by "./syz-executor exec"[14005] [ 675.806677][T14005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 675.806697][T14005] IPv6: NLM_F_CREATE should be set when creating new route [ 675.815866][T13259] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 20: comm syz-executor: path /25/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 675.816427][T13259] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 675.816929][T13259] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 20: comm syz-executor: path /25/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 675.817286][T13259] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 675.817777][T13259] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 20: comm syz-executor: path /25/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 675.818108][T13259] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 675.818698][T13259] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 20: comm syz-executor: path /25/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 675.997016][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.006471][ T30] INFO: task syz.4.882:12311 blocked for more than 146 seconds. [ 676.006492][ T30] Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 676.006503][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.006512][ T30] task:syz.4.882 state:D stack:26736 pid:12311 tgid:12306 ppid:11646 flags:0x00004006 [ 676.006559][ T30] Call Trace: [ 676.006566][ T30] [ 676.006575][ T30] __schedule+0x1895/0x4b30 [ 676.006604][ T30] ? schedule+0x90/0x320 [ 676.006620][ T30] ? lock_release+0xbf/0xa30 [ 676.006637][ T30] ? __pfx___schedule+0x10/0x10 [ 676.006655][ T30] ? __pfx_lock_release+0x10/0x10 [ 676.006672][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 676.006691][ T30] ? mutex_spin_on_owner+0x26c/0x330 [ 676.006716][ T30] ? schedule+0x90/0x320 [ 676.006732][ T30] schedule+0x14b/0x320 [ 676.006749][ T30] schedule_preempt_disabled+0x13/0x30 [ 676.006766][ T30] __mutex_lock+0x6a7/0xd70 [ 676.006787][ T30] ? __mutex_lock+0x52a/0xd70 [ 676.006807][ T30] ? chaoskey_release+0x169/0x2f0 [ 676.006830][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 676.006856][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 676.006874][ T30] ? lock_release+0xbf/0xa30 [ 676.006893][ T30] chaoskey_release+0x169/0x2f0 [ 676.006915][ T30] ? __pfx_chaoskey_release+0x10/0x10 [ 676.006937][ T30] __fput+0x23f/0x880 [ 676.006966][ T30] task_work_run+0x24f/0x310 [ 676.006988][ T30] ? __pfx_task_work_run+0x10/0x10 [ 676.007009][ T30] ? switch_task_namespaces+0xe4/0x110 [ 676.007033][ T30] do_exit+0xa2f/0x28e0 [ 676.007052][ T30] ? rcu_is_watching+0x15/0xb0 [ 676.007073][ T30] ? __pfx_do_exit+0x10/0x10 [ 676.007090][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 676.007114][ T30] ? __pfx_lock_release+0x10/0x10 [ 676.007131][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 676.007157][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 676.007175][ T30] do_group_exit+0x207/0x2c0 [ 676.007195][ T30] get_signal+0x16a3/0x1740 [ 676.007222][ T30] ? __pfx_get_signal+0x10/0x10 [ 676.007242][ T30] ? snd_seq_ioctl+0x29d/0x400 [ 676.007264][ T30] arch_do_signal_or_restart+0x96/0x860 [ 676.007289][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 676.007318][ T30] ? rcu_is_watching+0x15/0xb0 [ 676.007339][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 676.007358][ T30] do_syscall_64+0x100/0x230 [ 676.007422][ T30] ? clear_bhb_loop+0x35/0x90 [ 676.007445][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.007465][ T30] RIP: 0033:0x7f710717dff9 [ 676.007479][ T30] RSP: 002b:00007f7107ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.007497][ T30] RAX: ffffffffffffffea RBX: 00007f7107336130 RCX: 00007f710717dff9 [ 676.007511][ T30] RDX: 0000000020000bc0 RSI: 00000000404c534a RDI: 0000000000000005 [ 676.007523][ T30] RBP: 00007f71071f0296 R08: 0000000000000000 R09: 0000000000000000 [ 676.007534][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.007545][ T30] R13: 0000000000000000 R14: 00007f7107336130 R15: 00007ffcc5f6d4a8 [ 676.007563][ T30] [ 676.007572][ T30] INFO: task syz.2.897:12424 blocked for more than 146 seconds. [ 676.007583][ T30] Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 676.007593][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.007600][ T30] task:syz.2.897 state:D stack:28016 pid:12424 tgid:12416 ppid:9498 flags:0x00000004 [ 676.007645][ T30] Call Trace: [ 676.007651][ T30] [ 676.007659][ T30] __schedule+0x1895/0x4b30 [ 676.007685][ T30] ? __pfx___schedule+0x10/0x10 [ 676.007702][ T30] ? __pfx_lock_release+0x10/0x10 [ 676.007719][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 676.007743][ T30] ? schedule+0x90/0x320 [ 676.007759][ T30] schedule+0x14b/0x320 [ 676.007776][ T30] schedule_preempt_disabled+0x13/0x30 [ 676.007793][ T30] __mutex_lock+0x6a7/0xd70 [ 676.007814][ T30] ? __mutex_lock+0x52a/0xd70 [ 676.007833][ T30] ? chaoskey_open+0xb8/0x210 [ 676.007859][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 676.007878][ T30] ? usb_find_interface+0xf7/0x160 [ 676.007898][ T30] ? __pfx_usb_find_interface+0x10/0x10 [ 676.007917][ T30] ? __pfx_lock_release+0x10/0x10 [ 676.007933][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 676.007955][ T30] chaoskey_open+0xb8/0x210 [ 676.007975][ T30] ? __pfx_chaoskey_open+0x10/0x10 [ 676.007997][ T30] usb_open+0x14b/0x1d0 [ 676.008018][ T30] chrdev_open+0x521/0x600 [ 676.008040][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 676.008064][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 676.008087][ T30] ? security_file_open+0x513/0x990 [ 676.008111][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 676.008133][ T30] do_dentry_open+0x978/0x1460 [ 676.008161][ T30] vfs_open+0x3e/0x330 [ 676.008184][ T30] path_openat+0x2c84/0x3590 [ 676.008207][ T30] ? getname_flags+0xb7/0x540 [ 676.008235][ T30] ? __pfx_path_openat+0x10/0x10 [ 676.008251][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.008277][ T30] do_filp_open+0x235/0x490 [ 676.008295][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 676.008321][ T30] ? _raw_spin_unlock+0x28/0x50 [ 676.008336][ T30] ? alloc_fd+0x5a1/0x640 [ 676.008361][ T30] do_sys_openat2+0x13e/0x1d0 [ 676.008385][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 676.009010][ T30] __x64_sys_openat+0x247/0x2a0 [ 676.009038][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 676.009064][ T30] ? rcu_is_watching+0x15/0xb0 [ 676.009084][ T30] ? rcu_is_watching+0x15/0xb0 [ 676.009104][ T30] do_syscall_64+0xf3/0x230 [ 676.009122][ T30] ? clear_bhb_loop+0x35/0x90 [ 676.009143][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.009161][ T30] RIP: 0033:0x7f9f75f7c990 [ 676.009174][ T30] RSP: 002b:00007f9f76d30b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 676.009192][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9f75f7c990 [ 676.009204][ T30] RDX: 0000000000000002 RSI: 00007f9f76d30c10 RDI: 00000000ffffff9c [ 676.009216][ T30] RBP: 00007f9f76d30c10 R08: 0000000000000000 R09: 00007f9f76d30987 [ 676.009228][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 676.009239][ T30] R13: 0000000000000000 R14: 00007f9f76136208 R15: 00007ffddd260b48 [ 676.009257][ T30] [ 676.009279][ T30] INFO: lockdep is turned off. [ 676.009297][ T30] NMI backtrace for cpu 0 [ 676.009306][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 676.009323][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 676.009333][ T30] Call Trace: [ 676.009339][ T30] [ 676.009345][ T30] dump_stack_lvl+0x241/0x360 [ 676.009365][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 676.009383][ T30] ? __pfx__printk+0x10/0x10 [ 676.009400][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 676.009430][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 676.009460][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 676.009480][ T30] ? _printk+0xd5/0x120 [ 676.009495][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 676.009521][ T30] ? __pfx__printk+0x10/0x10 [ 676.009539][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 676.009563][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 676.009587][ T30] watchdog+0xff4/0x1040 [ 676.009612][ T30] ? watchdog+0x1ea/0x1040 [ 676.009636][ T30] ? __pfx_watchdog+0x10/0x10 [ 676.009659][ T30] kthread+0x2f0/0x390 [ 676.009675][ T30] ? __pfx_watchdog+0x10/0x10 [ 676.009696][ T30] ? __pfx_kthread+0x10/0x10 [ 676.009713][ T30] ret_from_fork+0x4b/0x80 [ 676.009737][ T30] ? __pfx_kthread+0x10/0x10 [ 676.009753][ T30] ret_from_fork_asm+0x1a/0x30 [ 676.009783][ T30] [ 676.009803][ T30] Sending NMI from CPU 0 to CPUs 1: [ 676.009859][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 676.010863][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 676.010874][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 676.010892][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 676.010902][ T30] Call Trace: [ 676.010908][ T30] [ 676.010914][ T30] dump_stack_lvl+0x241/0x360 [ 676.010934][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 676.010952][ T30] ? __pfx__printk+0x10/0x10 [ 676.010974][ T30] ? vscnprintf+0x5d/0x90 [ 676.010996][ T30] panic+0x349/0x880 [ 676.011013][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 676.011035][ T30] ? __pfx_panic+0x10/0x10 [ 676.011050][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 676.011069][ T30] ? __irq_work_queue_local+0x137/0x410 [ 676.011092][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 676.011109][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 676.011131][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 676.011154][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 676.011177][ T30] watchdog+0x1033/0x1040 [ 676.011200][ T30] ? watchdog+0x1ea/0x1040 [ 676.011225][ T30] ? __pfx_watchdog+0x10/0x10 [ 676.011247][ T30] kthread+0x2f0/0x390 [ 676.011263][ T30] ? __pfx_watchdog+0x10/0x10 [ 676.011285][ T30] ? __pfx_kthread+0x10/0x10 [ 676.011301][ T30] ret_from_fork+0x4b/0x80 [ 676.011325][ T30] ? __pfx_kthread+0x10/0x10 [ 676.011341][ T30] ret_from_fork_asm+0x1a/0x30 [ 676.011370][ T30] [ 676.011631][ T30] Kernel Offset: disabled