last executing test programs: 19.300472382s ago: executing program 4 (id=2199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000002000000090001007379d100000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003"], 0x308}, 0x1, 0x0, 0x0, 0x40}, 0x800) 19.094567733s ago: executing program 4 (id=2200): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 18.544762581s ago: executing program 4 (id=2201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffff, 0x10}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x5, 0x4, 0x2, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x200000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @alu={0x4, 0x1, 0x3, 0xa, 0x9, 0x100, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 18.28675754s ago: executing program 4 (id=2203): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close(0x3) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001b00)=""/4096, 0xff7}], 0x4e}}], 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'}) close(r2) 17.872999386s ago: executing program 4 (id=2204): recvmmsg(0xffffffffffffffff, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 17.679273137s ago: executing program 4 (id=2205): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r1, 0xf2a10f80ab597717}, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x1000) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x79}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc9, 0x89, 0x7}}}}, 0x9) flock(r3, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f00000006c0)=""/210, 0xd2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x86, 0x0, {}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000bc0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000440)=""/154, 0x9a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6.23779411s ago: executing program 2 (id=2275): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='ext4_fc_commit_stop\x00', r1, 0x0, 0x9}, 0xfffffffffffffdab) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r9, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = syz_open_procfs(r3, &(0x7f00000144c0)='uid_map\x00') dup3(r10, r11, 0x0) setsockopt$netlink_NETLINK_RX_RING(r11, 0x10e, 0x6, 0x0, 0x0) io_submit(r9, 0x6, &(0x7f00000009c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x8080, 0xffffffffffffffff, &(0x7f0000000400)="2008280c51c06df6776206316dd152e03b1192169731277644059864c28d26ebfd425bda17ce097015d9fe237517eb37392d5def4b3453f10d9e8efa9ebe381b45f7dcdde69dd6610b5d7acaae03dee4bcc672cd06da753138cc0748a774f4980b0d68f97fc15a68d2f8ad78bbe9794461d26cc517753e8c3a880dd8bdd992592aef407fcf4b6d3e45d6d140e80315b90b711d6e66d72499c38f781d05c305919aeab2542f8930ecae38b4662d7c3e5f968092a361db3bd5a8195acede5b3cbe2e1b964d1f05f3", 0xc7, 0x7f00000000, 0x0, 0x4, r0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x7fff, r0, &(0x7f0000000300)="9094e6328061d75d881a5be62efda74a06558f8cfa0920a3cd8a0f061148ffe219cced87e9498a9e5d602571f0d73f3f575485adc3677b91324a254d976b6a63941b23569d6cbb8b2e84d94e13f8b2a0569af8f959558794849b0c3d3251a5d5bfdea25da2e0dbc86ef4961393c3dc6ff8626d2cc8e282b82b525730b03490ae92413af4e2a359c67fc8ec847e91c7", 0x8f, 0x4, 0x0, 0x1}, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f00000007c0)="b1ce48a8377bc11f27d3b13bb594e0c25567bfdf4c04d410632ff16620428b18421541d42570b70bb260998be5860c94762082842b70a538f88fe18ccf1f6497315f97691c074f9cca1470372664427507000c5a38f900241a2a", 0x5a, 0x3, 0x0, 0x2, r0}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xfff8, r6, &(0x7f0000000880)="d9a1ff4dfa7ec3572ed66b2b079cafe0d2e88eb7ee9613f2e4f35355d8da6da0c028d1dd93d6dc1db78e5616966f682ac9d8bff513491d5abca6baf88830057fae08890003c5e54250458a2a8f26a09dab12afb804c85082f279bcb6db61540192683cb8935089fe43dcda5d0ee05bf667afd1e43410fbfda14e429d0cf6691a7a567e07a251fd3c6c8a58c84a089582228aa72097a45b0721ec9fadde55d3aa4f8cbe691c952f78d0edbad3d757bd185ef56dfb6c7a9bbd380d01f1d290761af32b842913122264028a376e4c1bd403e5c64ea699db", 0xd6, 0xe, 0x0, 0x3}]) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 5.656468838s ago: executing program 3 (id=2279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x13) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e"], 0x54}}, 0x0) 5.352491205s ago: executing program 3 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f"], 0x3c}}, 0x0) 5.286728652s ago: executing program 0 (id=2282): io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) socket$packet(0x11, 0x0, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="04000000000000000800290000000000080028000000000056ca065a3a178999ae86b110087018f5cbf7d5d7b08665f63201a151cad24942f83ca48fbb4a2c7aa1c6dac21c92"], 0x58}}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000002040)) 5.125501156s ago: executing program 3 (id=2283): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x68) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 4.3108867s ago: executing program 2 (id=2285): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='uid_map\x00') readv(r0, &(0x7f0000000180), 0x0) getpgrp(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec03010000000000000000000000000a14000000fa030100ee"], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) sync() ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000480)={0x1000000}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) 4.310634364s ago: executing program 3 (id=2286): syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='b *:7'], 0x9) 4.226067735s ago: executing program 0 (id=2287): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 4.154538271s ago: executing program 3 (id=2289): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x7, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0xc, &(0x7f0000000040)={0x3, 0x2}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0x0, 0x0) setresuid(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3.290536407s ago: executing program 0 (id=2292): syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='ext4_fc_commit_stop\x00', r0, 0x0, 0x9}, 0xfffffffffffffdab) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_open_procfs(r1, &(0x7f00000144c0)='uid_map\x00') dup3(r7, r8, 0x0) setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0x6, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.268666756s ago: executing program 3 (id=2293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r1, 0xf2a10f80ab597717}, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x1000) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x79}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc9, 0x89, 0x7}}}}, 0x9) flock(r3, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f00000006c0)=""/210, 0xd2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x86, 0x0, {}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000bc0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000440)=""/154, 0x9a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.883498505s ago: executing program 2 (id=2294): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000002380)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001440)=""/56, 0x38, 0x1}}, 0x11c) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) write$UHID_INPUT(r0, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) 2.520236386s ago: executing program 1 (id=2296): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x2a, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xfd}]}]}]}}]}, 0x8c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.406872294s ago: executing program 1 (id=2297): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 2.10168187s ago: executing program 1 (id=2298): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x3ffe, r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x200580, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 1.963417489s ago: executing program 1 (id=2299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.874559953s ago: executing program 0 (id=2300): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.786547054s ago: executing program 1 (id=2301): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 1.634484784s ago: executing program 0 (id=2302): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x7, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0xc, &(0x7f0000000040)={0x3, 0x2}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "be12c945519c8f1709445776e1f6859b0bbc345082cd40e1239e9de67e8a5fec0681f1a523e3b81a9ac4ac39580c18f2a6a2caa3eab63cfcee20f4b5537b128304a235cf7918abd6aaf297b695adee12800e7c30277de9c4570103ed3bbada94232d46f984b59260cccf81967870b2af7863b8d1c0584bf5a164f2f9dd3771b0f8ad6238ad113b01fcca86606c6f59b9d1f9c6efb4c17a8d9a58b1b2ef91a90761ad83975a88c4a2d59fcdb0c407e09b44cdbb9dbd7f5b359bbe00064bc82ef443a79f844f6175b1685ff7d54f684bf8fdf1d0b70067d1ec4f40c4e9486dad70e40f4372ba08473f68161d7ca57501f5ef21a15585200e98187f9fa56bcb4ecd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0x0, 0x0) setresuid(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.612881669s ago: executing program 2 (id=2303): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x7, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0xc, &(0x7f0000000040)={0x3, 0x2}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 594.599176ms ago: executing program 1 (id=2304): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x13) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e"], 0x54}}, 0x0) 581.182211ms ago: executing program 0 (id=2305): io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="04000000000000000800290000000000080028000000000056ca065a3a178999ae86b110087018f5cbf7d5d7b08665f63201a151cad24942f83ca48fbb4a2c7aa1c6dac21c92"], 0x58}}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000002040)) 562.965965ms ago: executing program 2 (id=2306): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x3, {0x5, 0x15}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0xba01, 0x0, 0x80845}, 0x0) 0s ago: executing program 2 (id=2307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x1000, &(0x7f0000000340)="ddc97fa9960bd66e82b2979374e31db206cc1a829c898167b8d95a939c66165762d4072efdff8f91d86198a2e0b11ba404041bd8770487c21a8c059766567530f111b0ed274e1bd30001059bf25533430abb221ced8e86972604336428b7049b6951691838a338ed61896f8d4ef0a7b9f7c64662fcd5a939f9fe651a6a", 0x7d, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f00000003c0)="6afb02d41d9686ebc2e2a31eae446a56df0710f3a2106cf081dc") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) acct(&(0x7f00000001c0)='./file0\x00') socket$kcm(0x10, 0x3, 0x10) getgid() acct(0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) kernel console output (not intermixed with test programs): t is strongly recommended to keep mac addresses unique to avoid problems! [ 548.854148][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.867693][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.880058][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.892589][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.904237][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.916136][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.930715][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.953950][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.969389][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.981168][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.994764][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.008960][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.020721][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.033451][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.044339][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.057495][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.069602][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.082927][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.109826][T15754] veth0_vlan: entered promiscuous mode [ 549.128749][T15752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.139582][T15651] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.151037][T15651] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.163145][T15651] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.172281][T15651] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.193917][T15754] veth1_vlan: entered promiscuous mode [ 549.218551][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.241873][T12751] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.249015][T12751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.264231][T12751] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.271406][T12751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.316288][T15754] veth0_macvtap: entered promiscuous mode [ 549.336195][T15754] veth1_macvtap: entered promiscuous mode [ 549.354223][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.374526][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.386295][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.391537][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.406224][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.417928][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.419667][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.439275][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.449557][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.464332][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.474285][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.485025][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.497963][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.509115][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.519205][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.530174][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.541194][T15754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.563327][T15752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 549.581956][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.602262][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.614690][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.643483][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.659919][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.671200][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.683572][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.694402][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.705025][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.716013][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.726752][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.737353][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.749218][T15754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.762816][T15754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.772310][T15754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.879964][ T5234] Bluetooth: hci1: command tx timeout [ 549.885514][ T8099] Bluetooth: hci2: command tx timeout [ 549.967053][ T8099] Bluetooth: hci5: command tx timeout [ 550.069219][T15754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.149316][T15754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.229909][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.241674][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.265263][T12746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.277871][T12746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.287885][T15752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.332670][T15752] veth0_vlan: entered promiscuous mode [ 550.346308][T15752] veth1_vlan: entered promiscuous mode [ 550.375000][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.383842][T15752] veth0_macvtap: entered promiscuous mode [ 550.387651][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.400005][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.409153][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.409458][T15752] veth1_macvtap: entered promiscuous mode [ 550.418462][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.430785][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.443002][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.451223][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.459014][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.461603][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.466418][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.480372][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.484405][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.494876][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.517124][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.533776][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.551952][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.572921][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.580619][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.582190][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.588054][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.588082][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.588106][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.588130][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.588153][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.588176][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.588199][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.615436][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.623458][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.631017][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.636906][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.647454][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.651416][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.703884][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.704711][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.717804][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.722233][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.735916][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.739956][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.754205][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.757093][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.772459][T15752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.774275][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.789287][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.797105][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.804520][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.813006][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.817419][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.820483][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.831443][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.849619][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.853658][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.858376][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.869590][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.875371][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.887720][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.892789][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.905302][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.910673][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.923247][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.929153][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.941659][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.946752][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.955726][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.973567][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.975729][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 550.984782][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.991249][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 551.005091][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.009023][ T5276] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 551.020872][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.028184][ T5276] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 551.039391][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.060140][T15752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.082640][T15752] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.091667][T15752] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.101052][T15752] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.110127][T15752] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.144069][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.156124][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.182640][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.204414][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.449787][T15950] 9pnet_fd: Insufficient options for proto=fd [ 551.966865][ T8099] Bluetooth: hci2: command tx timeout [ 552.036761][ T8099] Bluetooth: hci5: command tx timeout [ 552.123027][T15957] nbd1: detected capacity change from 0 to 6 [ 552.181100][T15961] block nbd1: shutting down sockets [ 552.190351][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.199559][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.214089][T15958] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.223268][T15958] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.231766][T15958] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.241016][T15958] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.249335][T15958] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.258504][T15958] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.266318][T15958] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.276390][T15958] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.285847][T15958] ldm_validate_partition_table(): Disk read failed. [ 552.292748][T15958] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.302107][T15958] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.310320][T15958] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.319744][T15958] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.329434][T15958] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.338542][T15958] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.346560][T15958] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.355691][T15958] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.364980][T15958] Dev nbd1: unable to read RDB block 0 [ 552.370557][T15958] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.380711][T15958] Buffer I/O error on dev nbd1, logical block 0, async page read [ 552.388742][T15958] nbd1: unable to read partition table [ 552.394462][T15958] nbd1: partition table beyond EOD, truncated [ 552.401811][ T5244] ldm_validate_partition_table(): Disk read failed. [ 552.408800][ T5244] Dev nbd1: unable to read RDB block 0 [ 552.414640][ T5244] nbd1: unable to read partition table [ 552.420420][ T5244] nbd1: partition table beyond EOD, truncated [ 552.428571][ T5244] ldm_validate_partition_table(): Disk read failed. [ 552.435507][ T5244] Dev nbd1: unable to read RDB block 0 [ 552.442786][ T5244] nbd1: unable to read partition table [ 552.458005][ T5244] nbd1: partition table beyond EOD, truncated [ 552.593752][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'. [ 552.656358][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 552.667826][T15977] bridge_slave_1: left allmulticast mode [ 552.673564][T15977] bridge_slave_1: left promiscuous mode [ 552.679716][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.689191][T15977] bridge_slave_0: left allmulticast mode [ 552.694846][T15977] bridge_slave_0: left promiscuous mode [ 552.700642][T15977] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.789484][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 553.808392][T16002] netlink: 'syz.1.1891': attribute type 16 has an invalid length. [ 553.816257][T16002] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1891'. [ 555.655141][T16026] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 555.661956][T16026] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 555.679796][T16026] hsr_slave_0: left promiscuous mode [ 555.687231][T16026] hsr_slave_1: left promiscuous mode [ 555.711221][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'. [ 556.726372][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 556.734032][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 556.746366][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 556.754830][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 556.764424][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 556.772320][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 556.783033][T16056] 9pnet_fd: Insufficient options for proto=fd [ 556.821364][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 556.954152][ T8567] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.069450][T16052] chnl_net:caif_netlink_parms(): no params data found [ 557.274832][ T8567] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.370473][ T8567] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.438654][ T8567] bond0: (slave netdevsim0): Releasing backup interface [ 557.447459][ T8567] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.482431][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.504419][T16052] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.513954][T16052] bridge_slave_0: entered allmulticast mode [ 557.525020][T16052] bridge_slave_0: entered promiscuous mode [ 557.543554][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.614483][T16052] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.623784][T16052] bridge_slave_1: entered allmulticast mode [ 557.631927][T16052] bridge_slave_1: entered promiscuous mode [ 558.109401][T16052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.126411][T16052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.136402][ T8567] bridge_slave_1: left allmulticast mode [ 558.144686][ T8567] bridge_slave_1: left promiscuous mode [ 558.151052][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.161828][ T8567] bridge_slave_0: left allmulticast mode [ 558.168001][ T8567] bridge_slave_0: left promiscuous mode [ 558.174318][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.273317][ T8567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.287180][ T8567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.299126][ T8567] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 558.311601][ T8567] bond0 (unregistering): Released all slaves [ 558.337429][T16052] team0: Port device team_slave_0 added [ 558.345840][T16052] team0: Port device team_slave_1 added [ 558.389288][T16052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.396389][T16052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.428409][T16052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.451687][T16052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.460325][T16052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.491088][T16052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.557671][T16052] hsr_slave_0: entered promiscuous mode [ 558.576033][T16052] hsr_slave_1: entered promiscuous mode [ 558.607636][T16052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.616765][T16052] Cannot create hsr debugfs directory [ 558.634807][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 558.724231][ T8567] hsr_slave_0: left promiscuous mode [ 558.739392][ T8567] hsr_slave_1: left promiscuous mode [ 558.754688][ T8567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.763183][T16095] 9pnet_fd: Insufficient options for proto=fd [ 558.782105][ T8567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.810694][ T8567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.836661][ T8099] Bluetooth: hci6: command tx timeout [ 558.847811][ T8567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.894591][ T8567] veth1_macvtap: left promiscuous mode [ 558.902609][ T8567] veth0_macvtap: left promiscuous mode [ 558.909281][ T8567] veth1_vlan: left promiscuous mode [ 558.914764][ T8567] veth0_vlan: left promiscuous mode [ 559.044349][ T8567] team0 (unregistering): Port device team_slave_1 removed [ 559.055924][ T8567] team0 (unregistering): Port device team_slave_0 removed [ 559.129328][T16108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1927'. [ 559.151129][T16108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1927'. [ 559.522749][T16052] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 559.537267][T16052] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 559.547246][T16052] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 559.556032][T16052] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 559.631785][T16052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.647386][T16052] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.658457][T12758] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.665568][T12758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.682709][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.689850][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.001519][T16127] loop3: detected capacity change from 0 to 32768 [ 560.007879][T16052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.031079][T16127] btrfs: Deprecated parameter 'usebackuproot' [ 560.047244][T16127] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 560.070073][T16127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1929 (16127) [ 560.136497][T16127] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.147658][T16127] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 560.157775][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 560.164972][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 560.172478][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 560.180559][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.194019][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 560.202630][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.263247][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 560.318322][T16127] BTRFS warning (device loop3): couldn't read tree root [ 560.342229][T16127] BTRFS warning (device loop3): try to load backup roots slot 1 [ 560.374587][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 560.405976][T16127] BTRFS warning (device loop3): couldn't read tree root [ 560.413156][T16127] BTRFS warning (device loop3): try to load backup roots slot 2 [ 560.421517][ T8567] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 560.453218][T12758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.453741][T16127] BTRFS warning (device loop3): couldn't read tree root [ 560.471540][T16127] BTRFS warning (device loop3): try to load backup roots slot 3 [ 560.485006][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'. [ 560.488927][T16127] BTRFS info (device loop3): rebuilding free space tree [ 560.571719][T16156] chnl_net:caif_netlink_parms(): no params data found [ 560.580063][T16127] BTRFS info (device loop3): disabling free space tree [ 560.601777][T16127] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 560.615314][T16127] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 560.628122][T12758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.647157][T16052] veth0_vlan: entered promiscuous mode [ 560.701635][T12758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.717182][T16127] loop3: detected capacity change from 32768 to 0 [ 560.760587][T16052] veth1_vlan: entered promiscuous mode [ 560.782388][T12758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.824449][T16156] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.832037][T16156] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.841209][T12746] kworker/u8:14: attempt to access beyond end of device [ 560.841209][T12746] loop3: rw=4097, sector=10392, nr_sectors = 8 limit=0 [ 560.843532][T16156] bridge_slave_0: entered allmulticast mode [ 560.862344][T16156] bridge_slave_0: entered promiscuous mode [ 560.869966][T12746] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 560.881156][T15651] BTRFS error (device loop3 state A): Transaction aborted (error -5) [ 560.889457][T16156] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.899187][T15651] BTRFS: error (device loop3 state A) in __btrfs_update_delayed_inode:1096: errno=-5 IO failure [ 560.909917][T16156] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.919727][T16156] bridge_slave_1: entered allmulticast mode [ 560.926561][ T8099] Bluetooth: hci6: command tx timeout [ 560.926652][T15651] BTRFS info (device loop3 state EA): forced readonly [ 560.934811][T16156] bridge_slave_1: entered promiscuous mode [ 560.953935][T15651] BTRFS: error (device loop3 state EA) in __btrfs_run_delayed_items:1174: errno=-5 IO failure [ 560.992602][T16156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.001082][T16200] loop1: detected capacity change from 0 to 32768 [ 561.002788][T15651] BTRFS warning (device loop3 state EA): Skipping commit of aborted transaction. [ 561.037192][T16156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.040956][T16200] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1936 (16200) [ 561.049249][T15651] BTRFS: error (device loop3 state EA) in cleanup_transaction:2017: errno=-5 IO failure [ 561.080340][T16052] veth0_macvtap: entered promiscuous mode [ 561.086914][T16200] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 561.108063][T15651] BTRFS info (device loop3 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 561.114614][T16200] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 561.121727][T16156] team0: Port device team_slave_0 added [ 561.149215][T16200] BTRFS info (device loop1): using free-space-tree [ 561.166798][T16052] veth1_macvtap: entered promiscuous mode [ 561.206008][T16156] team0: Port device team_slave_1 added [ 561.241539][T12758] bridge_slave_1: left allmulticast mode [ 561.249092][T12758] bridge_slave_1: left promiscuous mode [ 561.254807][T12758] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.297770][T12758] bridge_slave_0: left allmulticast mode [ 561.303490][T12758] bridge_slave_0: left promiscuous mode [ 561.309282][T12758] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.326508][ T29] audit: type=1800 audit(1728405626.070:149): pid=16200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1936" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 561.348862][ T29] audit: type=1800 audit(1728405626.080:150): pid=16200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1936" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 561.393984][T15754] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 561.643189][T12758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.661518][T12758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.681223][T12758] bond0 (unregistering): Released all slaves [ 561.740012][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.752128][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.762197][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.772652][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.782498][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.792959][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.803241][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.814116][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.823972][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.834432][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.844400][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.854855][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.864707][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.875188][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.886146][T16052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.917417][T16156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.924521][T16156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.965153][T16156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.980425][T16156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.988809][T16156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.096473][T16156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.130388][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.144398][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.166782][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.186509][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.196356][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.240374][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.256563][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.274787][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.284739][ T8099] Bluetooth: hci0: command tx timeout [ 562.311545][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.332188][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.352241][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.372916][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.392925][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.413536][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.437515][T16052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.455836][T16256] loop1: detected capacity change from 0 to 32768 [ 562.499601][T16052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.508563][T16052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.517876][T16052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.526921][T16052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.606734][T16256] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 562.647269][T12758] hsr_slave_0: left promiscuous mode [ 562.654369][T12758] hsr_slave_1: left promiscuous mode [ 562.663537][T12758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.671367][T12758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.680860][T12758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.688319][T12758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.698223][T12758] veth1_macvtap: left promiscuous mode [ 562.703724][T12758] veth0_macvtap: left promiscuous mode [ 562.709273][T12758] veth1_vlan: left promiscuous mode [ 562.714622][T12758] veth0_vlan: left promiscuous mode [ 562.735723][T16256] XFS (loop1): Ending clean mount [ 562.741894][T16256] XFS (loop1): Quotacheck needed: Please wait. [ 562.754424][T16256] XFS (loop1): Quotacheck: Done. [ 562.891802][T12758] team0 (unregistering): Port device team_slave_1 removed [ 562.903617][T15754] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 562.918978][T12758] team0 (unregistering): Port device team_slave_0 removed [ 562.997265][ T8099] Bluetooth: hci6: command tx timeout [ 563.161664][T16156] hsr_slave_0: entered promiscuous mode [ 563.243688][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.254788][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.277115][T16156] hsr_slave_1: entered promiscuous mode [ 563.332515][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 563.500431][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.521414][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.582907][T12746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.623066][T12746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.764137][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 563.772983][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 563.780670][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 563.796972][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 563.808225][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 563.815605][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 563.991780][T12758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.099177][T12758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.190155][T12758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.204587][T16289] loop3: detected capacity change from 0 to 32768 [ 564.261461][T16289] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1943 (16289) [ 564.300014][T12758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.366545][ T8099] Bluetooth: hci0: command tx timeout [ 564.402319][T16289] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 564.417446][T16156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 564.418840][T16289] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 564.438865][T16156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 564.447693][T16156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 564.470161][T16156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 564.482665][T16289] BTRFS info (device loop3): using free-space-tree [ 564.595262][T16300] chnl_net:caif_netlink_parms(): no params data found [ 564.656661][ T29] audit: type=1800 audit(1728405629.420:151): pid=16289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1943" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 564.725152][T15651] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 564.789084][T12758] bridge_slave_1: left allmulticast mode [ 564.809253][T12758] bridge_slave_1: left promiscuous mode [ 564.814958][T12758] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.839750][T12758] bridge_slave_0: left allmulticast mode [ 564.854198][T12758] bridge_slave_0: left promiscuous mode [ 564.862046][T12758] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.078420][ T8099] Bluetooth: hci6: command tx timeout [ 565.169926][T16338] loop3: detected capacity change from 0 to 32768 [ 565.177485][T16338] btrfs: Deprecated parameter 'usebackuproot' [ 565.183874][T16338] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 565.215078][T16338] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1945 (16338) [ 565.421804][T12758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.460503][T16338] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 565.515016][T16338] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 565.527224][T12758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.539606][T12758] bond0 (unregistering): Released all slaves [ 565.550869][T16336] netlink: 'syz.4.1946': attribute type 1 has an invalid length. [ 565.568368][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 565.595324][T16338] BTRFS warning (device loop3): couldn't read tree root [ 565.620416][T16338] BTRFS warning (device loop3): try to load backup roots slot 1 [ 565.628624][T12746] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 565.658573][T16300] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.665689][T16338] BTRFS warning (device loop3): couldn't read tree root [ 565.683362][T16300] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.691563][T16338] BTRFS warning (device loop3): try to load backup roots slot 2 [ 565.700381][T16300] bridge_slave_0: entered allmulticast mode [ 565.707521][ T11] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 565.707645][T16300] bridge_slave_0: entered promiscuous mode [ 565.725550][T16338] BTRFS warning (device loop3): couldn't read tree root [ 565.733674][T16338] BTRFS warning (device loop3): try to load backup roots slot 3 [ 565.751449][T16338] BTRFS info (device loop3): rebuilding free space tree [ 565.761432][T16338] BTRFS info (device loop3): disabling free space tree [ 565.768649][T16338] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 565.778600][T16338] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 565.786720][T16156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.805598][T16300] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.823469][T16300] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.835223][T16300] bridge_slave_1: entered allmulticast mode [ 565.844191][T16300] bridge_slave_1: entered promiscuous mode [ 565.866823][T16338] loop3: detected capacity change from 32768 to 0 [ 565.876560][ T8099] Bluetooth: hci2: command tx timeout [ 566.027131][ T12] kworker/u8:1: attempt to access beyond end of device [ 566.027131][ T12] loop3: rw=4097, sector=10392, nr_sectors = 8 limit=0 [ 566.044115][T16156] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.053864][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'. [ 566.063880][ T12] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 566.077049][T15651] BTRFS error (device loop3 state A): Transaction aborted (error -5) [ 566.089940][T15651] BTRFS: error (device loop3 state A) in __btrfs_update_delayed_inode:1096: errno=-5 IO failure [ 566.109911][T16300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.131436][T12758] hsr_slave_0: left promiscuous mode [ 566.147489][T15651] BTRFS info (device loop3 state EA): forced readonly [ 566.155246][T12758] hsr_slave_1: left promiscuous mode [ 566.164707][T15651] BTRFS: error (device loop3 state EA) in __btrfs_run_delayed_items:1174: errno=-5 IO failure [ 566.187858][T12758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.197732][T12758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.204946][T15651] BTRFS warning (device loop3 state EA): Skipping commit of aborted transaction. [ 566.218863][T12758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.226255][T12758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.268685][T15651] BTRFS: error (device loop3 state EA) in cleanup_transaction:2017: errno=-5 IO failure [ 566.278780][T15651] BTRFS info (device loop3 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 566.289998][T12758] veth1_macvtap: left promiscuous mode [ 566.361890][T12758] veth0_macvtap: left promiscuous mode [ 566.384116][T12758] veth1_vlan: left promiscuous mode [ 566.403884][T12758] veth0_vlan: left promiscuous mode [ 566.411423][T16363] loop4: detected capacity change from 0 to 32768 [ 566.437209][ T8099] Bluetooth: hci0: command tx timeout [ 566.483359][T16363] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 566.540381][T16363] XFS (loop4): Ending clean mount [ 566.563731][T16363] XFS (loop4): Quotacheck needed: Please wait. [ 566.601146][T16363] XFS (loop4): Quotacheck: Done. [ 566.758109][T12758] team0 (unregistering): Port device team_slave_1 removed [ 566.785571][T12758] team0 (unregistering): Port device team_slave_0 removed [ 566.859045][T16052] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 566.962015][T16300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.032938][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.040076][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.107238][T16401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.188899][T16300] team0: Port device team_slave_0 added [ 567.197332][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.204429][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.663482][T16300] team0: Port device team_slave_1 added [ 567.762394][T16300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.774250][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.800810][T16300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.880042][T16300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.887818][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.917135][T16300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.956545][ T8099] Bluetooth: hci2: command tx timeout [ 567.992275][T16300] hsr_slave_0: entered promiscuous mode [ 568.000621][T16300] hsr_slave_1: entered promiscuous mode [ 568.007104][T16300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.014672][T16300] Cannot create hsr debugfs directory [ 568.529010][ T8099] Bluetooth: hci0: command tx timeout [ 568.602175][T16156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.805568][T16156] veth0_vlan: entered promiscuous mode [ 568.894133][T16156] veth1_vlan: entered promiscuous mode [ 569.011109][T16156] veth0_macvtap: entered promiscuous mode [ 569.027794][T16156] veth1_macvtap: entered promiscuous mode [ 569.108601][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.184615][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.215208][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.251511][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.284745][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.315676][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.338831][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.378619][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.397332][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.429304][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.450150][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.469135][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.483105][T16156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.596627][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.597786][T16453] loop3: detected capacity change from 0 to 32768 [ 569.616045][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.627839][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.640199][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.650468][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.694060][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.704780][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.717719][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.728396][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.739609][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.750176][T16453] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 569.761339][T16156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.773339][T16156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.798658][T16156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.831239][T16453] XFS (loop3): Ending clean mount [ 569.840881][T16453] XFS (loop3): Quotacheck needed: Please wait. [ 569.841154][T16300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 569.881331][T16300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 569.890885][T16453] XFS (loop3): Quotacheck: Done. [ 569.949242][T16300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 569.963044][T16156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.988807][T15651] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 569.997619][T16156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.009156][T16156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.018511][T16156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.037259][ T8099] Bluetooth: hci2: command tx timeout [ 570.080944][T16300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 570.244301][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.254932][T16300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.262632][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.339425][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.343225][T16300] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.362145][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.382805][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.390053][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.412579][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.419714][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.582977][T16508] 9pnet_fd: Insufficient options for proto=fd [ 571.306317][T16300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.064541][T16300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.117509][ T8099] Bluetooth: hci2: command tx timeout [ 572.160105][T16300] veth0_vlan: entered promiscuous mode [ 572.200357][T16300] veth1_vlan: entered promiscuous mode [ 572.232621][T16300] veth0_macvtap: entered promiscuous mode [ 572.274465][T16549] loop0: detected capacity change from 0 to 764 [ 572.413701][T16300] veth1_macvtap: entered promiscuous mode [ 572.440579][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.187758][T16561] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 573.364895][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.411782][ T29] audit: type=1326 audit(1728405638.180:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.3.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4a57dff9 code=0x7fc00000 [ 573.458603][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.479462][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.489356][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.500395][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.520447][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.530034][T16567] 9pnet_fd: Insufficient options for proto=fd [ 573.547252][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.558594][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.569168][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.582769][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.593550][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.607300][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.618758][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.951537][T16300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.789399][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.876480][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.897444][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.918451][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.928616][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.939800][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.950413][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.961002][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.970929][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.981488][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.057953][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.068772][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.079717][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.090532][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.104598][T16300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.135937][T16300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.150922][T16300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.160206][T16300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.662547][T16300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.271624][T12758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.279711][T12758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.303567][T12758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.316532][T12758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.328138][T16600] loop0: detected capacity change from 0 to 764 [ 580.524677][T16611] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 582.044101][T16626] netlink: 'syz.1.1994': attribute type 16 has an invalid length. [ 582.052139][T16626] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1994'. [ 584.751041][T16674] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.282132][T16674] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.420079][T16674] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.597160][T16674] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.670790][T16674] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.681663][T16674] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.696050][T16674] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.706731][T16674] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.000952][T16729] netlink: 'syz.0.2027': attribute type 16 has an invalid length. [ 588.104504][T16729] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2027'. [ 588.295427][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 588.414652][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 588.432867][T16742] autofs: Unknown parameter '0x0000000000000000' [ 588.447690][T16740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2036'. [ 588.856706][T16756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2041'. [ 589.768984][T16771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.911460][T16771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.175250][T16783] autofs: Unknown parameter 'fd0x0000000000000000' [ 590.229122][T16771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.351325][T16771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.416916][T16771] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.434717][T16771] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.494964][T16771] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.512349][T16771] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.665780][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2055'. [ 591.155440][T16809] autofs: Unknown parameter 'fd0x0000000000000000' [ 593.098060][T16846] autofs: Unknown parameter 'fd0x0000000000000000' [ 593.962729][ T1061] bridge_slave_1: left allmulticast mode [ 593.979928][ T1061] bridge_slave_1: left promiscuous mode [ 594.004154][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.030463][ T1061] bridge_slave_0: left allmulticast mode [ 594.050818][ T1061] bridge_slave_0: left promiscuous mode [ 594.082538][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.310162][ T1061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.335172][ T1061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.361616][ T1061] bond0 (unregistering): Released all slaves [ 594.652937][ T1061] hsr_slave_0: left promiscuous mode [ 594.665343][ T1061] hsr_slave_1: left promiscuous mode [ 594.680890][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.701526][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.721074][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.740869][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.762850][ T1061] veth1_macvtap: left promiscuous mode [ 594.779183][ T1061] veth0_macvtap: left promiscuous mode [ 594.792899][ T1061] veth1_vlan: left promiscuous mode [ 594.806418][ T1061] veth0_vlan: left promiscuous mode [ 595.101437][ T1061] team0 (unregistering): Port device team_slave_1 removed [ 595.128564][ T1061] team0 (unregistering): Port device team_slave_0 removed [ 595.673720][T16873] loop4: detected capacity change from 0 to 1024 [ 595.750192][T16873] hfsplus: extend alloc file! (8192,65536,366) [ 596.423088][T16892] loop2: detected capacity change from 0 to 1024 [ 596.790364][T16892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.288715][ T1061] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 597.314851][ T1061] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 597.419540][ T1061] EXT4-fs (loop2): This should not happen!! Data will be lost [ 597.419540][ T1061] [ 597.431678][ T1061] EXT4-fs (loop2): Total free blocks count 0 [ 597.439596][ T1061] EXT4-fs (loop2): Free/Dirty block details [ 597.445800][ T1061] EXT4-fs (loop2): free_blocks=68451041280 [ 597.452502][ T1061] EXT4-fs (loop2): dirty_blocks=64 [ 597.459521][ T1061] EXT4-fs (loop2): Block reservation details [ 597.465516][ T1061] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 597.689674][T16300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.157674][T16898] loop0: detected capacity change from 0 to 32768 [ 598.216130][T16898] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2088 (16898) [ 598.282983][T16898] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 598.357510][T16898] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 598.366231][T16898] BTRFS info (device loop0): using free-space-tree [ 598.702444][ T29] audit: type=1800 audit(1728405663.440:153): pid=16898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2088" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 598.705555][T16937] loop3: detected capacity change from 0 to 1024 [ 599.156631][ T29] audit: type=1800 audit(1728405663.460:154): pid=16898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2088" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 599.193989][T16937] hfsplus: extend alloc file! (8192,65536,366) [ 599.660926][T16156] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 600.863523][T16985] netlink: 'syz.1.2112': attribute type 10 has an invalid length. [ 600.897126][T16985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.929432][T16985] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 601.982565][T16989] loop2: detected capacity change from 0 to 32768 [ 602.007653][T16989] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2113 (16989) [ 602.073731][T16989] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 602.089549][T17015] loop4: detected capacity change from 0 to 764 [ 602.126593][T16989] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 602.198424][T16989] BTRFS info (device loop2): using free-space-tree [ 603.579178][T17043] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 603.949707][T16989] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 603.949911][T16989] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 604.028475][T16989] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 604.038785][T16989] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 604.049632][T16989] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 604.125139][T16989] BTRFS error (device loop2): open_ctree failed [ 605.891822][T17076] overlayfs: failed to resolve './file0': -2 [ 606.034188][T17080] loop1: detected capacity change from 0 to 764 [ 606.272820][T17088] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 606.733626][T17092] Process accounting resumed [ 607.138972][T17097] dccp_xmit_packet: Payload too large (65475) for featneg. [ 607.823873][T17085] loop2: detected capacity change from 0 to 32768 [ 607.833511][T17085] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2140 (17085) [ 607.878972][T17085] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 607.889348][T17085] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 607.898110][T17085] BTRFS info (device loop2): using free-space-tree [ 607.993834][T17129] loop3: detected capacity change from 0 to 1024 [ 608.049411][T17133] overlayfs: failed to resolve './file0': -2 [ 608.096089][T17129] hfsplus: extend alloc file! (8192,65536,366) [ 608.109689][ T29] audit: type=1800 audit(1728405672.880:155): pid=17085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2140" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 608.308433][ T29] audit: type=1800 audit(1728405673.080:156): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2140" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 608.309447][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'. [ 608.617318][T16300] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 609.610011][T17166] overlayfs: failed to resolve './file0': -2 [ 610.285252][T17180] netlink: 644 bytes leftover after parsing attributes in process `syz.2.2164'. [ 610.323007][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 611.396801][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 611.461766][T17218] bond0: entered promiscuous mode [ 611.469074][T17218] bond_slave_0: entered promiscuous mode [ 611.474909][T17218] bond_slave_1: entered promiscuous mode [ 612.286090][T17216] dccp_close: ABORT with 60 bytes unread [ 612.311623][T17216] bond0: left promiscuous mode [ 612.316568][T17216] bond_slave_0: left promiscuous mode [ 612.322211][T17216] bond_slave_1: left promiscuous mode [ 612.418194][T17232] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 613.468764][T17257] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 613.497509][T17257] macsec1: entered promiscuous mode [ 613.528070][T17257] macsec1: entered allmulticast mode [ 613.544840][T17257] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 613.567119][T17257] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 613.583796][T17257] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 622.284158][T17287] netlink: 'syz.1.2196': attribute type 16 has an invalid length. [ 622.292176][T17287] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2196'. [ 622.345121][ T8099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 622.361014][ T8099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 622.375048][ T8099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 622.400005][ T8099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 622.409883][ T8099] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 622.423795][ T8099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 622.765910][T17289] chnl_net:caif_netlink_parms(): no params data found [ 622.770603][T17281] loop3: detected capacity change from 0 to 32768 [ 622.781306][T17281] btrfs: Deprecated parameter 'usebackuproot' [ 622.788288][T17281] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 622.803801][T17281] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2198 (17281) [ 622.838792][T17281] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 622.866173][T17281] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 622.984742][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 623.007207][T17289] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.014485][T17289] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.028469][T17281] BTRFS warning (device loop3): couldn't read tree root [ 623.035735][T17281] BTRFS warning (device loop3): try to load backup roots slot 1 [ 623.044457][ T53] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 623.044560][T17289] bridge_slave_0: entered allmulticast mode [ 623.064488][T17289] bridge_slave_0: entered promiscuous mode [ 623.072789][T17289] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.080153][T17289] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.090979][T17289] bridge_slave_1: entered allmulticast mode [ 623.097877][T17289] bridge_slave_1: entered promiscuous mode [ 623.103867][T17281] BTRFS warning (device loop3): couldn't read tree root [ 623.111050][T17281] BTRFS warning (device loop3): try to load backup roots slot 2 [ 623.120668][ T53] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 623.133836][T17281] BTRFS warning (device loop3): couldn't read tree root [ 623.146552][T17281] BTRFS warning (device loop3): try to load backup roots slot 3 [ 623.163289][T17281] BTRFS info (device loop3): rebuilding free space tree [ 623.165438][T17289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.194400][T17281] BTRFS info (device loop3): disabling free space tree [ 623.201764][T17289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.215508][T17281] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 623.244329][T17281] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 623.258696][T17289] team0: Port device team_slave_0 added [ 623.270063][T17289] team0: Port device team_slave_1 added [ 623.304806][T17289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.313425][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.341038][T17289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.379065][T17289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.386674][T17281] loop3: detected capacity change from 32768 to 0 [ 623.393357][T12758] kworker/u8:16: attempt to access beyond end of device [ 623.393357][T12758] loop3: rw=6145, sector=10400, nr_sectors = 8 limit=0 [ 623.414664][T12758] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 623.425834][T12758] kworker/u8:16: attempt to access beyond end of device [ 623.425834][T12758] loop3: rw=6145, sector=10408, nr_sectors = 8 limit=0 [ 623.441210][T12758] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 623.443167][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.451877][T12758] kworker/u8:16: attempt to access beyond end of device [ 623.451877][T12758] loop3: rw=6145, sector=10416, nr_sectors = 8 limit=0 [ 623.492674][T12758] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 623.503189][T12758] kworker/u8:16: attempt to access beyond end of device [ 623.503189][T12758] loop3: rw=6145, sector=10424, nr_sectors = 8 limit=0 [ 623.516959][T12758] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 623.528328][T12758] BTRFS: error (device loop3) in btrfs_commit_transaction:2524: errno=-5 IO failure (Error while writing out transaction) [ 623.529787][T17289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.541371][T12758] BTRFS info (device loop3 state E): forced readonly [ 623.541394][T12758] BTRFS warning (device loop3 state E): Skipping commit of aborted transaction. [ 623.541410][T12758] BTRFS error (device loop3 state EA): Transaction aborted (error -5) [ 623.541427][T12758] BTRFS: error (device loop3 state EA) in cleanup_transaction:2017: errno=-5 IO failure [ 623.624528][T17289] hsr_slave_0: entered promiscuous mode [ 623.634268][T17289] hsr_slave_1: entered promiscuous mode [ 623.642905][T17289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.659191][T17289] Cannot create hsr debugfs directory [ 623.685362][T15651] BTRFS info (device loop3 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 623.868839][T17289] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.971411][T17289] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.050358][T17289] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.153630][T17289] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.440171][ T5234] Bluetooth: hci4: command tx timeout [ 624.681763][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.692198][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.718424][T17289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 624.732852][T17289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 624.767070][T17289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 624.789857][ T8099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 624.797610][ T8099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 624.804834][ T8099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 624.812748][ T8099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 624.820419][ T8099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 624.832229][ T8099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 624.841597][T17289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 624.980337][T17348] netlink: 'syz.1.2212': attribute type 1 has an invalid length. [ 624.991328][T17348] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2212'. [ 625.029377][T17289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.045824][T17289] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.052478][T17351] 9pnet_fd: Insufficient options for proto=fd [ 625.118843][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.126033][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.154118][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.161434][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.235847][T17345] chnl_net:caif_netlink_parms(): no params data found [ 625.317594][T17345] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.327336][T17345] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.335132][T17345] bridge_slave_0: entered allmulticast mode [ 625.342588][T17345] bridge_slave_0: entered promiscuous mode [ 625.353312][T17345] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.361550][T17345] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.369021][T17345] bridge_slave_1: entered allmulticast mode [ 625.383430][T17345] bridge_slave_1: entered promiscuous mode [ 625.437649][T17345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.454478][T17345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.486401][T17345] team0: Port device team_slave_0 added [ 625.497090][T17345] team0: Port device team_slave_1 added [ 625.529220][T17345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.544749][T17345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.571247][T17345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.583438][T17345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.592637][T17345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.619052][T17345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.667418][T17345] hsr_slave_0: entered promiscuous mode [ 625.673756][T17345] hsr_slave_1: entered promiscuous mode [ 625.680556][T17345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.688610][T17345] Cannot create hsr debugfs directory [ 625.712980][T17289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.776492][T17345] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.803356][T17289] veth0_vlan: entered promiscuous mode [ 625.817372][T17289] veth1_vlan: entered promiscuous mode [ 625.830778][T17345] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.855258][T17289] veth0_macvtap: entered promiscuous mode [ 625.868055][T17289] veth1_macvtap: entered promiscuous mode [ 625.884811][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.898305][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.908592][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.919326][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.929499][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.940543][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.950775][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.962375][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.972952][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.985753][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.996144][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.007858][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.017976][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.028870][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.056696][T17289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.067142][T17345] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.089317][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.106240][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.117224][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.130765][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.141280][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.159152][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.176584][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.189017][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.203869][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.226136][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.236351][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.246833][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.266646][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.279592][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.290460][T17289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.301175][T17289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.314668][T17289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.323963][T17289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.332754][T17289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.357812][T17345] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.403111][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.422384][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.516652][ T5234] Bluetooth: hci4: command tx timeout [ 626.523354][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.536072][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.546072][T17345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 626.558593][T17372] loop1: detected capacity change from 0 to 32768 [ 626.570105][T17345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 626.603160][T17372] btrfs: Deprecated parameter 'usebackuproot' [ 626.623412][T17345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 626.646625][T17372] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 626.657110][T17372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2217 (17372) [ 626.679019][T17345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 626.809641][T17345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.821198][T17372] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 626.842156][T17372] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 626.924677][ T5234] Bluetooth: hci1: command tx timeout [ 626.929615][T17345] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.940041][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.947173][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.977825][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.984929][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.000408][T17379] netlink: 'syz.0.2195': attribute type 16 has an invalid length. [ 627.008435][T17379] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2195'. [ 627.480117][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 627.506947][T17372] BTRFS warning (device loop1): couldn't read tree root [ 627.515892][T17372] BTRFS warning (device loop1): try to load backup roots slot 1 [ 627.524201][ T53] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 627.579872][T17372] BTRFS warning (device loop1): couldn't read tree root [ 627.587018][T17372] BTRFS warning (device loop1): try to load backup roots slot 2 [ 627.602685][ T53] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 627.617119][T17372] BTRFS warning (device loop1): couldn't read tree root [ 627.634350][T17372] BTRFS warning (device loop1): try to load backup roots slot 3 [ 627.692809][T17345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.754970][T17345] veth0_vlan: entered promiscuous mode [ 627.771457][T17345] veth1_vlan: entered promiscuous mode [ 627.777754][T17372] BTRFS info (device loop1): rebuilding free space tree [ 627.788026][T17372] BTRFS info (device loop1): disabling free space tree [ 627.795911][T17372] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 627.799812][T17345] veth0_macvtap: entered promiscuous mode [ 627.812710][T17372] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 627.823109][T17345] veth1_macvtap: entered promiscuous mode [ 627.849090][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.859694][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.869651][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.883537][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.893802][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.907763][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.919855][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.952658][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.965174][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.979230][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.991019][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.006112][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.016779][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.027596][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.037994][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.049171][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.061327][T17345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.078585][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.089621][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.099641][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.113372][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.126332][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.137464][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.147943][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.159323][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.172878][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.184021][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.197292][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.208186][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.219966][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.231093][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.241107][T17345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.252097][T17345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.263131][T17345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.279202][T17345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.288203][T17345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.297003][T17345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.305726][T17345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.316828][T17372] loop1: detected capacity change from 32768 to 0 [ 628.323885][ T11] kworker/u8:0: attempt to access beyond end of device [ 628.323885][ T11] loop1: rw=6145, sector=10392, nr_sectors = 8 limit=0 [ 628.342995][ T11] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 628.356182][ T11] kworker/u8:0: attempt to access beyond end of device [ 628.356182][ T11] loop1: rw=6145, sector=10400, nr_sectors = 8 limit=0 [ 628.370469][ T11] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 628.381414][ T11] kworker/u8:0: attempt to access beyond end of device [ 628.381414][ T11] loop1: rw=6145, sector=10408, nr_sectors = 8 limit=0 [ 628.414128][ T11] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 628.422846][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.424296][ T11] kworker/u8:0: attempt to access beyond end of device [ 628.424296][ T11] loop1: rw=6145, sector=10416, nr_sectors = 8 limit=0 [ 628.446531][ T11] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 628.466879][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.500896][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.509556][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.563013][ T11] BTRFS: error (device loop1) in btrfs_commit_transaction:2524: errno=-5 IO failure (Error while writing out transaction) [ 628.583936][ T11] BTRFS info (device loop1 state E): forced readonly [ 628.592358][ T11] BTRFS warning (device loop1 state E): Skipping commit of aborted transaction. [ 628.598024][ T5234] Bluetooth: hci4: command tx timeout [ 628.606480][ T11] BTRFS error (device loop1 state EA): Transaction aborted (error -5) [ 628.615009][ T11] BTRFS: error (device loop1 state EA) in cleanup_transaction:2017: errno=-5 IO failure [ 628.620464][T17416] 9pnet_fd: Insufficient options for proto=fd [ 628.629434][T15754] BTRFS info (device loop1 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 628.810449][T17427] loop3: detected capacity change from 0 to 128 [ 628.830369][T17427] EXT4-fs (loop3): Test dummy encryption mode enabled [ 628.863063][T17427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 628.899477][T17427] System zones: 1-3, 19-19, 35-36 [ 628.911073][T17427] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 628.933450][T17427] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.961001][ T29] audit: type=1800 audit(1728405693.730:157): pid=17427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2227" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 629.022679][ T5234] Bluetooth: hci1: command tx timeout [ 629.494084][ T8099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 629.502473][ T8099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 629.512807][ T8099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 629.521452][ T8099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 629.530037][ T8099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 629.537525][ T8099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 629.628315][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 629.679056][T17441] chnl_net:caif_netlink_parms(): no params data found [ 629.701001][T17345] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 629.813459][T17441] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.828023][T17441] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.836289][T17460] 9pnet_fd: Insufficient options for proto=fd [ 629.836528][T17441] bridge_slave_0: entered allmulticast mode [ 629.852316][T17441] bridge_slave_0: entered promiscuous mode [ 629.872702][T17441] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.890480][T17441] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.906061][T17441] bridge_slave_1: entered allmulticast mode [ 629.916231][T17441] bridge_slave_1: entered promiscuous mode [ 629.955053][T17441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.984051][T17441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.020551][T17441] team0: Port device team_slave_0 added [ 630.039796][T17441] team0: Port device team_slave_1 added [ 630.099021][T17441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.111520][T17441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.146687][T17441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.383131][T17441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.429491][T17441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.456959][T17441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.512536][T17441] hsr_slave_0: entered promiscuous mode [ 630.523015][T17441] hsr_slave_1: entered promiscuous mode [ 630.532869][T17441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.541412][T17441] Cannot create hsr debugfs directory [ 630.548720][T17479] loop2: detected capacity change from 0 to 128 [ 630.556483][T17479] EXT4-fs (loop2): Test dummy encryption mode enabled [ 630.567477][T17479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 630.575437][T17479] System zones: 1-3, 19-19, 35-36 [ 630.586809][T17479] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 630.601407][T17479] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.636865][T17483] netlink: 'syz.3.2240': attribute type 16 has an invalid length. [ 630.648789][ T29] audit: type=1800 audit(1728405695.420:158): pid=17479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2244" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 630.679077][T17483] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2240'. [ 630.688516][ T8099] Bluetooth: hci4: command tx timeout [ 630.699479][T17441] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.769937][T17441] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.830477][T17441] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.889527][T17441] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.980964][T17441] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 630.991931][T17441] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 631.001732][T17441] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 631.010884][T17441] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 631.077945][ T8099] Bluetooth: hci1: command tx timeout [ 631.088940][T17441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.110603][T17441] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.126712][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.133864][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.167580][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.174718][ T8567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.254469][T17490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2245'. [ 631.307209][T17441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.420735][T16300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 631.443494][T17441] veth0_vlan: entered promiscuous mode [ 631.494332][T17441] veth1_vlan: entered promiscuous mode [ 631.536147][T17441] veth0_macvtap: entered promiscuous mode [ 631.556676][ T8099] Bluetooth: hci5: command tx timeout [ 631.595314][T17441] veth1_macvtap: entered promiscuous mode [ 631.648816][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.716559][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.745656][T17501] 9pnet_fd: Insufficient options for proto=fd [ 631.754902][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.768028][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.777898][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.788469][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.798608][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.809114][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.818993][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.829470][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.839971][T17503] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2250'. [ 631.840381][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.867201][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.879537][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.890372][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.900502][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.911177][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.921257][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.934123][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.948771][T17441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.962970][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.975471][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.986152][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.017456][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.030781][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.042493][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.064437][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.086357][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.096860][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.107464][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.117926][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.133735][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.152872][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.164653][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.174911][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.185708][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.196901][T17441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.431713][T17441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.449090][T17441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.470028][T17510] netlink: 'syz.2.2251': attribute type 10 has an invalid length. [ 632.488707][T17510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.498734][T17510] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 632.516258][T17441] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.530880][T17441] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.541566][T17441] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.577719][T17441] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.584819][T17518] loop3: detected capacity change from 0 to 128 [ 632.596233][T17518] EXT4-fs (loop3): Test dummy encryption mode enabled [ 632.619025][T17518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 632.636137][T17518] System zones: 1-3, 19-19, 35-36 [ 632.642626][T17518] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 632.662040][T12746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.664183][T17518] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.674931][T12746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.689003][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.699631][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.709682][ T29] audit: type=1800 audit(1728405697.480:159): pid=17518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2256" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 633.053426][T17534] netlink: 'syz.0.2260': attribute type 16 has an invalid length. [ 633.064052][T17534] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2260'. [ 633.071335][T17536] 9pnet_fd: Insufficient options for proto=fd [ 633.161898][ T8099] Bluetooth: hci1: command tx timeout [ 633.187104][T17539] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2262'. [ 633.467851][T17345] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 633.637464][ T8099] Bluetooth: hci5: command tx timeout [ 633.674082][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 633.683303][ T5234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 633.690718][ T5234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 633.698865][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 633.706137][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 633.734070][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 634.487276][T17542] chnl_net:caif_netlink_parms(): no params data found [ 634.549147][T17572] autofs: Bad value for 'fd' [ 634.588115][T17542] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.595332][T17542] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.605630][T17542] bridge_slave_0: entered allmulticast mode [ 634.613112][T17542] bridge_slave_0: entered promiscuous mode [ 634.620979][T17542] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.628369][T17542] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.635631][T17542] bridge_slave_1: entered allmulticast mode [ 634.644066][T17542] bridge_slave_1: entered promiscuous mode [ 634.664293][T17542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.675544][T17542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.705701][T17542] team0: Port device team_slave_0 added [ 634.713832][T17542] team0: Port device team_slave_1 added [ 634.757258][T17542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.789898][T17542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.818418][T17542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.839047][T17542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.846021][T17542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.872033][T17542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.944205][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 634.955882][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 634.980146][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 634.991798][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.001229][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.014672][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.023066][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.138831][T17542] hsr_slave_0: entered promiscuous mode [ 635.145807][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.153464][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.153726][T17542] hsr_slave_1: entered promiscuous mode [ 635.161066][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.174395][T17542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.174522][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.182610][T17542] Cannot create hsr debugfs directory [ 635.191511][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.203237][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.211235][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.213975][T17593] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 635.219411][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.232071][T17593] macsec1: entered promiscuous mode [ 635.238658][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.240631][T17593] macsec1: entered allmulticast mode [ 635.251925][T17593] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 635.254853][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.270413][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.278080][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.286052][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.294114][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.303494][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.311169][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.324792][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.361474][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.405897][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.414656][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.422486][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.430165][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.437812][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.446271][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.454711][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.462249][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.469754][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.482739][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 635.491888][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.500985][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.556002][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.594670][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.615995][T17542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.637118][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.647603][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.679832][T17602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2281'. [ 635.702631][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.716945][ T5234] Bluetooth: hci5: command tx timeout [ 635.796706][ T5234] Bluetooth: hci7: command tx timeout [ 635.833767][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.962462][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 635.996518][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.003952][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.026519][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.034570][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.056495][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.063912][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.086495][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.093911][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.116725][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.124144][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.146703][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.154128][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.176512][ T5276] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 636.492278][ T5276] hid-generic 0001:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 636.563688][T17542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.674707][T17542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.803855][T17542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.930470][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 637.408500][T17542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 637.445180][T17542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 637.500661][T17542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 637.522511][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 637.533781][T17542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 637.739562][T17542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.797925][ T5234] Bluetooth: hci5: command tx timeout [ 637.843064][T17542] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.876877][ T5234] Bluetooth: hci7: command tx timeout [ 637.910835][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.917931][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.000761][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.007898][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.096550][ T5712] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 638.132369][T17646] netlink: 'syz.0.2292': attribute type 16 has an invalid length. [ 638.158742][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.226775][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.262305][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.270388][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 638.279052][ T5712] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 638.301035][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.310460][T17646] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2292'. [ 638.312655][ T5712] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 638.330049][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.338167][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.345635][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 638.356005][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.373091][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.380863][ T5712] usb 4-1: Product: syz [ 638.385046][ T5712] usb 4-1: Manufacturer: syz [ 638.401323][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.411418][ T5712] usb 4-1: SerialNumber: syz [ 638.427477][ T5712] usb 4-1: config 0 descriptor?? [ 638.432540][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.450009][T17644] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 638.476754][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.499743][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.531857][T17542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.539189][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.557035][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.569925][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.591170][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.626575][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.641416][T17663] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 638.648950][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.677166][T17663] macsec1: entered promiscuous mode [ 638.682469][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.691252][T17663] macsec1: entered allmulticast mode [ 638.699361][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.717121][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.731981][T17663] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 638.736891][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.764764][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.789025][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.810527][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.829679][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.859484][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.880448][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.900638][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.925565][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.959970][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.979898][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.988649][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 638.996063][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.034156][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.044784][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.054584][T17673] netlink: 'syz.1.2299': attribute type 10 has an invalid length. [ 639.062558][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.074547][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.082408][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.083581][T17673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.093342][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.100793][T17673] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 639.117729][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.125854][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.127650][T17542] veth0_vlan: entered promiscuous mode [ 639.133764][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.147003][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.168703][T17542] veth1_vlan: entered promiscuous mode [ 639.170481][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.181837][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.189314][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.193207][T17542] veth0_macvtap: entered promiscuous mode [ 639.196743][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.205225][T17542] veth1_macvtap: entered promiscuous mode [ 639.210759][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.223837][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.225432][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.231268][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.231311][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.231335][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.231357][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.231379][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.231402][ T937] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 639.267231][ T937] hid-generic 0001:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 639.343865][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.361761][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.372587][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.382734][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.407066][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.423815][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.434927][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.450597][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.462628][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.473968][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.485510][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.495773][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.510518][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.523592][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.977385][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.987622][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.998488][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.008645][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.019377][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.038799][T17542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.086969][ T5234] Bluetooth: hci7: command tx timeout [ 640.348820][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.381542][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.416357][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.431399][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.441942][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.453251][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.463218][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.473763][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.483742][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.494288][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.504221][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.514771][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.524807][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.535384][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.546081][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.557141][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.567072][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.577609][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.587523][T17542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.598132][T17542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.613523][T17542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.953777][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'. [ 641.342105][ T30] INFO: task syz.0.1617:13964 blocked for more than 144 seconds. [ 641.349914][ T30] Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 641.357109][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.366284][ T30] task:syz.0.1617 state:D stack:25968 pid:13964 tgid:13957 ppid:12277 flags:0x00004006 [ 641.376553][ T30] Call Trace: [ 641.380060][T17702] Process accounting resumed [ 641.384781][ T30] [ 641.387806][ T30] __schedule+0x1895/0x4b30 [ 641.392307][ T30] ? schedule+0x90/0x320 [ 641.396667][ T30] ? schedule+0x90/0x320 [ 641.400914][ T30] ? lock_release+0xbf/0xa30 [ 641.405824][ T30] ? __pfx___schedule+0x10/0x10 [ 641.411707][ T30] ? __pfx_lock_release+0x10/0x10 [ 641.416782][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 641.425369][ T30] ? schedule+0x90/0x320 [ 641.429672][ T30] schedule+0x14b/0x320 [ 641.433854][ T30] schedule_preempt_disabled+0x13/0x30 [ 641.439396][ T30] __mutex_lock+0x6a7/0xd70 [ 641.443921][ T30] ? __mutex_lock+0x52a/0xd70 [ 641.448718][ T30] ? chaoskey_release+0x169/0x2f0 [ 641.453762][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 641.458969][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 641.464988][ T30] ? lock_release+0xbf/0xa30 [ 641.469651][ T30] chaoskey_release+0x169/0x2f0 [ 641.474519][ T30] ? __pfx_chaoskey_release+0x10/0x10 [ 641.480027][ T30] __fput+0x23f/0x880 [ 641.486575][ T30] task_work_run+0x24f/0x310 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 641.492430][ T30] ? __pfx_task_work_run+0x10/0x10 [ 641.497598][ T30] ? switch_task_namespaces+0xe4/0x110 [ 641.503078][ T30] do_exit+0xa2f/0x28e0 [ 641.507312][ T30] ? rcu_is_watching+0x15/0xb0 [ 641.512095][ T30] ? __pfx_do_exit+0x10/0x10 [ 641.516744][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 641.522488][ T30] ? __pfx_lock_release+0x10/0x10 [ 641.527575][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 641.533927][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 641.539140][ T30] do_group_exit+0x207/0x2c0 [ 641.543746][ T30] get_signal+0x16a3/0x1740 [ 641.548309][ T30] ? __pfx_get_signal+0x10/0x10 [ 641.553176][ T30] ? snd_seq_ioctl+0x29d/0x400 [ 641.558142][ T30] arch_do_signal_or_restart+0x96/0x860 [ 641.564211][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 641.570457][ T30] ? rcu_is_watching+0x15/0xb0 [ 641.575247][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 641.580854][ T30] do_syscall_64+0x100/0x230 [ 641.585462][ T30] ? clear_bhb_loop+0x35/0x90 [ 641.590199][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.596120][ T30] RIP: 0033:0x7f0b9c97dff9 [ 641.600566][ T30] RSP: 002b:00007f0b9d79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.609041][ T30] RAX: ffffffffffffffea RBX: 00007f0b9cb36130 RCX: 00007f0b9c97dff9 [ 641.617049][ T30] RDX: 0000000020000bc0 RSI: 00000000404c534a RDI: 0000000000000005 [ 641.625029][ T30] RBP: 00007f0b9c9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 641.633065][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.641097][ T30] R13: 0000000000000000 R14: 00007f0b9cb36130 R15: 00007ffc3bbc9b98 [ 641.649124][ T30] [ 641.652211][ T30] INFO: lockdep is turned off. [ 641.657422][ T30] NMI backtrace for cpu 0 [ 641.661752][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 641.671736][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 641.681797][ T30] Call Trace: [ 641.685081][ T30] [ 641.688019][ T30] dump_stack_lvl+0x241/0x360 [ 641.692710][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.697918][ T30] ? __pfx__printk+0x10/0x10 [ 641.702520][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 641.709479][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 641.714430][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 641.719901][ T30] ? _printk+0xd5/0x120 [ 641.724062][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 641.730059][ T30] ? __pfx__printk+0x10/0x10 [ 641.734656][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 641.740646][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 641.746624][ T30] watchdog+0xff4/0x1040 [ 641.750859][ T30] ? watchdog+0x1ea/0x1040 [ 641.755266][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.759935][ T30] kthread+0x2f0/0x390 [ 641.763996][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.768671][ T30] ? __pfx_kthread+0x10/0x10 [ 641.773259][ T30] ret_from_fork+0x4b/0x80 [ 641.777671][ T30] ? __pfx_kthread+0x10/0x10 [ 641.782250][ T30] ret_from_fork_asm+0x1a/0x30 [ 641.787013][ T30] [ 641.790480][ T30] Sending NMI from CPU 0 to CPUs 1: [ 641.795714][ C1] NMI backtrace for cpu 1 [ 641.795727][ C1] CPU: 1 UID: 0 PID: 16300 Comm: syz-executor Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 641.795747][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 641.795757][ C1] RIP: 0010:kasan_poison+0x2c/0x60 [ 641.795778][ C1] Code: 1e fa 40 f6 c7 07 75 36 48 89 f0 a8 07 75 38 48 89 f9 48 c1 e9 03 49 b8 00 00 00 00 00 fc ff df 4c 01 c1 48 01 f8 48 c1 e8 03 <0f> b6 f2 48 29 c8 4c 01 c0 48 89 cf 48 89 c2 e9 30 60 cb 09 90 0f [ 641.795792][ C1] RSP: 0018:ffffc90003a6f570 EFLAGS: 00000a06 [ 641.795807][ C1] RAX: 1ffff1100bf25a00 RBX: 0000000000000000 RCX: ffffed100bf25800 [ 641.795819][ C1] RDX: 00000000000000ff RSI: 0000000000001000 RDI: ffff88805f92c000 [ 641.795831][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff203a7e5 [ 641.795842][ C1] R10: dffffc0000000000 R11: fffffbfff203a7e6 R12: 0000000000000000 [ 641.795854][ C1] R13: 0000000000000013 R14: dffffc0000000000 R15: ffffea00017e4b00 [ 641.795866][ C1] FS: 000055556b1e7500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 641.795880][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.795892][ C1] CR2: 00005628e5008058 CR3: 0000000061526000 CR4: 00000000003526f0 [ 641.795906][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 641.795916][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 641.795926][ C1] Call Trace: [ 641.795932][ C1] [ 641.795939][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 641.795959][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 641.795976][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 641.796001][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 641.796021][ C1] ? nmi_handle+0x14f/0x5a0 [ 641.796037][ C1] ? nmi_handle+0x2a/0x5a0 [ 641.796053][ C1] ? kasan_poison+0x2c/0x60 [ 641.796068][ C1] ? default_do_nmi+0x63/0x160 [ 641.796088][ C1] ? exc_nmi+0x123/0x1f0 [ 641.796114][ C1] ? end_repeat_nmi+0xf/0x53 [ 641.796136][ C1] ? kasan_poison+0x2c/0x60 [ 641.796152][ C1] ? kasan_poison+0x2c/0x60 [ 641.796167][ C1] ? kasan_poison+0x2c/0x60 [ 641.796182][ C1] [ 641.796188][ C1] [ 641.796193][ C1] free_unref_folios+0x5c5/0x18d0 [ 641.796215][ C1] folios_put_refs+0x76c/0x860 [ 641.796237][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 641.796257][ C1] ? folio_batch_remove_exceptionals+0x18a/0x1f0 [ 641.796276][ C1] shmem_undo_range+0x64c/0x1cf0 [ 641.796294][ C1] ? 0xffffffffa0001af8 [ 641.796309][ C1] ? kernel_text_address+0xa7/0xe0 [ 641.796327][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 641.796342][ C1] ? unwind_get_return_address+0x4d/0x90 [ 641.796368][ C1] ? __pfx___d_free+0x10/0x10 [ 641.796385][ C1] ? stack_depot_save_flags+0x29/0x830 [ 641.796425][ C1] shmem_evict_inode+0x29b/0xa80 [ 641.796446][ C1] ? inode_wait_for_writeback+0x111/0x2a0 [ 641.796465][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 641.796484][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 641.796505][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 641.796526][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 641.796546][ C1] evict+0x4e8/0x9b0 [ 641.796565][ C1] ? __pfx_evict+0x10/0x10 [ 641.796583][ C1] ? iput+0x713/0xa50 [ 641.796606][ C1] do_unlinkat+0x512/0x830 [ 641.796628][ C1] ? __pfx_do_unlinkat+0x10/0x10 [ 641.796645][ C1] ? __might_fault+0xaa/0x120 [ 641.796661][ C1] ? __might_fault+0xc6/0x120 [ 641.796677][ C1] ? strncpy_from_user+0x131/0x250 [ 641.796697][ C1] ? getname_flags+0x1e3/0x540 [ 641.796718][ C1] __x64_sys_unlink+0x47/0x50 [ 641.796734][ C1] do_syscall_64+0xf3/0x230 [ 641.796750][ C1] ? clear_bhb_loop+0x35/0x90 [ 641.796767][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.796784][ C1] RIP: 0033:0x7fabeb77d5a7 [ 641.796797][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.796810][ C1] RSP: 002b:00007ffe91a969e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 641.796827][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fabeb77d5a7 [ 641.796839][ C1] RDX: 00007ffe91a96a10 RSI: 00007ffe91a96aa0 RDI: 00007ffe91a96aa0 [ 641.796850][ C1] RBP: 00007ffe91a96aa0 R08: 0000000000000000 R09: 0000000000000000 [ 641.796861][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe91a97b20 [ 641.796871][ C1] R13: 00007fabeb7f0134 R14: 000000000009c7d2 R15: 00007ffe91a97b60 [ 641.796890][ C1] [ 641.797725][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 641.797737][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 641.797757][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 641.797768][ T30] Call Trace: [ 641.797775][ T30] [ 641.797782][ T30] dump_stack_lvl+0x241/0x360 [ 641.797803][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.797822][ T30] ? __pfx__printk+0x10/0x10 [ 641.797842][ T30] ? vscnprintf+0x5d/0x90 [ 641.797863][ T30] panic+0x349/0x880 [ 641.797880][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 641.797902][ T30] ? __pfx_panic+0x10/0x10 [ 641.797917][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 641.797937][ T30] ? __irq_work_queue_local+0x137/0x410 [ 641.797960][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 641.797977][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 641.797998][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 641.798021][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 641.798043][ T30] watchdog+0x1033/0x1040 [ 641.798066][ T30] ? watchdog+0x1ea/0x1040 [ 641.798089][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.798111][ T30] kthread+0x2f0/0x390 [ 641.798128][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.798148][ T30] ? __pfx_kthread+0x10/0x10 [ 641.798166][ T30] ret_from_fork+0x4b/0x80 [ 641.798188][ T30] ? __pfx_kthread+0x10/0x10 [ 641.798205][ T30] ret_from_fork_asm+0x1a/0x30 [ 641.798233][ T30] [ 642.372454][ T30] Kernel Offset: disabled [ 642.376767][ T30] Rebooting in 86400 seconds..