last executing test programs: 5.303789325s ago: executing program 0 (id=1179): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000d80)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000940)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a00)={0x34, &(0x7f0000000a40)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.121775261s ago: executing program 4 (id=1209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @random="95000a1100", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df342", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x6, 0x400, 0x0, 0x0, {[@generic={0x3, 0x2}, @md5sig={0x13, 0x12, "6d84a22012be73afefa596f1a731aeae"}]}}}}}}}}, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0x3, 0x0, 0x1}, 'syz1\x00', 0x32}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {0x0}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361", 0x35}], 0x3}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f00000001c0)={{0x0, 0xea60}, 0x11, 0x873, 0x7fffffff}, 0x18) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x200008, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 2.970632374s ago: executing program 4 (id=1210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000001200)={@void, @void, @ipv4=@dccp={{0x6, 0x4, 0x2, 0x3d, 0x28, 0x65, 0x0, 0x7f, 0x21, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x4, 0x44, 0x1, 0x2}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x2, "d22dbf", 0xe, "3638a6"}}}}, 0x28) 2.907667516s ago: executing program 4 (id=1212): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r4, &(0x7f00000001c0)=""/70, 0xffffffd8) 2.890766147s ago: executing program 1 (id=1213): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d4262"], 0x38}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000580)=@urb_type_iso={0x0, {0xc, 0x1}, 0x80, 0x80, &(0x7f0000000480)="a13eca", 0x3, 0x800, 0x9, 0xd, 0xffff0000, 0x7fff, &(0x7f0000000540)="8543708a62ac599adcfb826ce2e1c99e5a34dfb04f91e6", [{0x0, 0x51a6, 0xb6}, {0x6, 0xdbd, 0x2}, {0x7ff, 0xfffffffd, 0x250bc75a}, {0x2, 0x9, 0x80000000}, {0x7ccf, 0x5, 0x8}, {0x1ff, 0x3, 0xffffffa8}, {0x0, 0x1, 0x5}, {0x1, 0x8, 0x3}, {0x2, 0x8, 0x4}, {0xffff, 0x8, 0x59b}, {0xdcae, 0x3, 0x6}, {0x941, 0x30, 0xfffffffd}, {0x400, 0x5, 0x2}]}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) close(r0) 2.015898529s ago: executing program 1 (id=1222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000600)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x13}, 0x2c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003200020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.015501839s ago: executing program 4 (id=1223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00\x00\x00\x00\x00\x00', 0x6) write(r0, 0x0, 0x0) 1.95640214s ago: executing program 4 (id=1224): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000300)="12", 0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000009a40)={0x2020}, 0x2020) 1.504353012s ago: executing program 0 (id=1225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000001200)={@void, @void, @ipv4=@dccp={{0x6, 0x4, 0x2, 0x3d, 0x28, 0x65, 0x0, 0x7f, 0x21, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x4, 0x44, 0x1, 0x2}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x2, "d22dbf", 0xe, "3638a6"}}}}, 0x28) 1.403056504s ago: executing program 3 (id=1227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="440100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c61746500"/234], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.353519556s ago: executing program 0 (id=1228): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='77', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r1, &(0x7f00000005c0)='3', 0x1) 1.250875418s ago: executing program 0 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x502ae}}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.214513989s ago: executing program 3 (id=1230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00\x00\x00\x00\x00\x00\x00', 0x7) 1.18478945s ago: executing program 0 (id=1231): syz_mount_image$nilfs2(&(0x7f0000000500), &(0x7f0000000840)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x3, 0xaf3, &(0x7f0000002400)="$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") sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1.157207291s ago: executing program 2 (id=1232): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d4262"], 0x38}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000580)=@urb_type_iso={0x0, {0xc, 0x1}, 0x80, 0x80, &(0x7f0000000480)="a13eca", 0x3, 0x800, 0x9, 0xd, 0xffff0000, 0x7fff, &(0x7f0000000540)="8543708a62ac599adcfb826ce2e1c99e5a34dfb04f91e6", [{0x0, 0x51a6, 0xb6}, {0x6, 0xdbd, 0x2}, {0x7ff, 0xfffffffd, 0x250bc75a}, {0x2, 0x9, 0x80000000}, {0x7ccf, 0x5, 0x8}, {0x1ff, 0x3, 0xffffffa8}, {0x0, 0x1, 0x5}, {0x1, 0x8, 0x3}, {0x2, 0x8, 0x4}, {0xffff, 0x8, 0x59b}, {0xdcae, 0x3, 0x6}, {0x941, 0x30, 0xfffffffd}, {0x4, 0xffffffff, 0x2}]}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) close(r0) 1.104892692s ago: executing program 1 (id=1233): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB], 0x6a) 1.104777602s ago: executing program 1 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00\x00\x00\x00\x00\x00', 0x6) write(r0, 0x0, 0x0) 1.104413222s ago: executing program 4 (id=1235): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r4, &(0x7f00000001c0)=""/70, 0xffffffd8) 1.103175172s ago: executing program 0 (id=1236): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000d80)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000640)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000940)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a00)={0x34, &(0x7f0000000a40)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.026800914s ago: executing program 1 (id=1237): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001140)=ANY=[@ANYBLOB="405085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 756.266581ms ago: executing program 3 (id=1238): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) accept(r1, 0x0, 0x0) 635.596414ms ago: executing program 3 (id=1239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000001200)={@void, @void, @ipv4=@dccp={{0x6, 0x4, 0x2, 0x3d, 0x28, 0x65, 0x0, 0x7f, 0x21, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x4, 0x44, 0x1, 0x2}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x2, "d22dbf", 0xe, "3638a6"}}}}, 0x28) 290.552583ms ago: executing program 2 (id=1240): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='77', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r1, &(0x7f00000005c0)='3', 0x1) 250.500844ms ago: executing program 2 (id=1241): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="440100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 250.046014ms ago: executing program 3 (id=1242): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) 209.760995ms ago: executing program 3 (id=1243): epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 192.520145ms ago: executing program 2 (id=1244): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000004440)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x20000010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 122.822837ms ago: executing program 2 (id=1245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)='6', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) shutdown(r0, 0x1) 58.916889ms ago: executing program 2 (id=1246): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x18b302) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000002c0)=0xb700) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 1 (id=1247): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r1}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, 0x0, 0x0) kernel console output (not intermixed with test programs): esent! [ 74.889505][ T5251] Cannot create hsr debugfs directory [ 74.894925][ T1769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.896412][ T1769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.958126][ T4931] usb 1-1: Using ep0 maxpacket: 32 [ 74.964484][ T4931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.967894][ T4931] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 74.969766][ T4931] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 74.972448][ T4931] usb 1-1: config 14 has no interface number 0 [ 74.973892][ T4931] usb 1-1: config 14 has no interface number 1 [ 74.975463][ T4931] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 74.981032][ T4931] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 74.982907][ T4931] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 74.985145][ T4931] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 74.991970][ T4931] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 74.993848][ T4931] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.999286][ T4931] usb 1-1: config 14 interface 57 has no altsetting 0 [ 75.000599][ T4931] usb 1-1: config 14 interface 228 has no altsetting 0 [ 75.004326][ T4931] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 75.005927][ T4931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.007424][ T4931] usb 1-1: Product: syz [ 75.008464][ T4931] usb 1-1: Manufacturer: syz [ 75.009369][ T4931] usb 1-1: SerialNumber: syz [ 75.249415][ T5300] 8021q: VLANs not supported on vcan0 [ 75.255069][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.358076][ T4357] Bluetooth: hci2: command 0x0409 tx timeout [ 75.382730][ T4406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.384615][ T4406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.390340][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.422580][ T4931] legousbtower 1-1:14.57: interrupt endpoints not found [ 75.517348][ T4357] Bluetooth: hci4: command 0x041b tx timeout [ 75.623367][ T4931] legousbtower 1-1:14.228: interrupt endpoints not found [ 76.453857][ T5251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.481840][ T5251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.657738][ T5382] xt_hashlimit: size too large, truncated to 1048576 [ 76.932684][ T5251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.972696][ T5251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.374760][ T5251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.394446][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.396299][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.437807][ T4357] Bluetooth: hci2: command 0x041b tx timeout [ 77.553626][ T4932] usb 1-1: USB disconnect, device number 4 [ 77.597550][ T4357] Bluetooth: hci4: command 0x040f tx timeout [ 77.691698][ T5251] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.701746][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.703540][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.704816][ T1769] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.705904][ T1769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.708629][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.767601][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.769379][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.771148][ T1769] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.772368][ T1769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.776890][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.815281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.819434][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.821988][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.823705][ T1769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.843854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.845787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.855576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.857808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.901267][ T5448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.904829][ T5448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.153353][ T5251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.156174][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.162825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.164594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.278088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.279598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.283560][ T5251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.964505][ T4357] Bluetooth: hci2: command 0x040f tx timeout [ 79.964511][ T4345] Bluetooth: hci4: command 0x0419 tx timeout [ 79.971313][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.973324][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.014115][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 80.035203][ T237] device hsr_slave_0 left promiscuous mode [ 80.069353][ T237] device hsr_slave_1 left promiscuous mode [ 80.093947][ T5530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.096209][ T5530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.137356][ T237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.138839][ T237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.140424][ T237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.141652][ T237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.143458][ T237] device bridge_slave_1 left promiscuous mode [ 80.144614][ T237] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.177923][ T237] device bridge_slave_0 left promiscuous mode [ 80.179258][ T237] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.220618][ T237] device hsr_slave_0 left promiscuous mode [ 80.267499][ T237] device hsr_slave_1 left promiscuous mode [ 80.303308][ T5530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.305073][ T5530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.347639][ T237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.349038][ T237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.350824][ T237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.352168][ T237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.353683][ T237] device bridge_slave_1 left promiscuous mode [ 80.354839][ T237] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.388291][ T237] device bridge_slave_0 left promiscuous mode [ 80.389554][ T237] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.507463][ T237] device veth1_macvtap left promiscuous mode [ 80.508544][ T237] device veth0_macvtap left promiscuous mode [ 80.509653][ T237] device veth1_vlan left promiscuous mode [ 80.510784][ T237] device veth0_vlan left promiscuous mode [ 80.587455][ T237] device veth1_macvtap left promiscuous mode [ 80.588771][ T237] device veth0_macvtap left promiscuous mode [ 80.589946][ T237] device veth1_vlan left promiscuous mode [ 80.590986][ T237] device veth0_vlan left promiscuous mode [ 81.818123][ T5549] loop2: detected capacity change from 0 to 7 [ 81.821631][ T5549] Dev loop2: unable to read RDB block 7 [ 81.822775][ T5549] loop2: AHDI p1 p2 p3 [ 81.823594][ T5549] loop2: partition table partially beyond EOD, truncated [ 81.825260][ T5549] loop2: p3 start 335544320 is beyond EOD, truncated [ 81.997275][ T4357] Bluetooth: hci2: command 0x0419 tx timeout [ 82.629079][ T237] team0 (unregistering): Port device team_slave_1 removed [ 82.779406][ T237] team0 (unregistering): Port device team_slave_0 removed [ 82.928205][ T237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.117939][ T237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.828822][ T237] bond0 (unregistering): Released all slaves [ 85.950154][ T5613] siw: device registration error -23 [ 85.954134][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 86.023430][ T5613] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.826243][ T5623] loop3: detected capacity change from 0 to 32768 [ 86.829258][ T5623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.298 (5623) [ 86.837987][ T5623] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.840013][ T5623] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 86.841594][ T5623] BTRFS info (device loop3): turning on sync discard [ 86.843127][ T5623] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 86.844707][ T5623] BTRFS info (device loop3): use zstd compression, level 3 [ 86.845862][ T5623] BTRFS info (device loop3): turning on async discard [ 86.847036][ T5623] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 86.849084][ T5623] BTRFS info (device loop3): trying to use backup root at mount time [ 86.850382][ T5623] BTRFS info (device loop3): enabling auto defrag [ 86.851475][ T5623] BTRFS info (device loop3): using free space tree [ 86.908845][ T5614] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 86.911410][ T5623] BTRFS error (device loop3): failed to load root extent [ 86.912675][ T5623] BTRFS warning (device loop3): try to load backup roots slot 1 [ 86.914127][ T5614] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 86.916429][ T5623] BTRFS warning (device loop3): couldn't read tree root [ 86.917667][ T5623] BTRFS warning (device loop3): try to load backup roots slot 2 [ 86.919966][ T5623] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 86.921925][ T5623] BTRFS warning (device loop3): couldn't read tree root [ 86.922940][ T5623] BTRFS warning (device loop3): try to load backup roots slot 3 [ 86.931656][ T5623] BTRFS info (device loop3): enabling ssd optimizations [ 86.933052][ T5623] BTRFS info (device loop3): rebuilding free space tree [ 86.941554][ T5623] BTRFS info (device loop3): checking UUID tree [ 87.622258][ T4648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.743061][ T5650] loop3: detected capacity change from 0 to 512 [ 87.745913][ T5650] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.747996][ T5650] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.750380][ T5650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.764839][ T5650] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.772618][ T5650] EXT4-fs (loop3): 1 truncate cleaned up [ 87.773548][ T5650] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.818211][ T4648] EXT4-fs (loop3): unmounting filesystem. [ 87.939069][ T237] team0 (unregistering): Port device team_slave_1 removed [ 88.110323][ T237] team0 (unregistering): Port device team_slave_0 removed [ 88.267838][ T237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.468519][ T237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.586663][ T27] audit: type=1326 audit(89.570:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.591572][ T27] audit: type=1326 audit(89.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.597034][ T27] audit: type=1326 audit(89.580:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.601205][ T27] audit: type=1326 audit(89.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.605087][ T27] audit: type=1326 audit(89.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.609788][ T27] audit: type=1326 audit(89.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.613493][ T27] audit: type=1326 audit(89.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.618184][ T27] audit: type=1326 audit(89.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.621800][ T27] audit: type=1326 audit(89.590:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.625955][ T27] audit: type=1326 audit(89.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5662 comm="syz.3.304" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffff965781a8 code=0x7ffc0000 [ 89.665680][ T5667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.667676][ T5667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.228733][ T237] bond0 (unregistering): Released all slaves [ 90.298039][ T5671] siw: device registration error -23 [ 90.299389][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 90.358602][ T5671] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.783270][ T5251] device veth0_vlan entered promiscuous mode [ 90.786722][ T5251] device veth1_vlan entered promiscuous mode [ 90.788837][ T5519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'. [ 90.794339][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.796027][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.797845][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.806174][ T5615] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.808729][ T5616] netlink: 132 bytes leftover after parsing attributes in process `syz.4.294'. [ 90.817484][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.819206][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.832478][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.835537][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.845016][ T5251] device veth0_macvtap entered promiscuous mode [ 90.848018][ T5251] device veth1_macvtap entered promiscuous mode [ 90.861329][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.863231][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.864918][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.876185][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.883798][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.885796][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.889491][ T5677] MTD: Couldn't look up './dev/mtdblock0': -2 [ 90.891228][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.892841][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.910470][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.912214][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.915397][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.919837][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.925010][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.934646][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.936645][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.938726][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.940561][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.943173][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.944901][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.947508][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.949800][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.952588][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.954084][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.955859][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.959535][ T5251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.960900][ T5251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.979032][ T5251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.983030][ T5251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.035691][ T5614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.037161][ T5614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.039985][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.053992][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.055478][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.056970][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.096452][ T5691] mmap: syz.0.314 (5691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.146770][ T5696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 91.289714][ T5710] MTD: Couldn't look up './dev/mtdblock0': -2 [ 91.591286][ T5724] siw: device registration error -23 [ 91.592729][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 91.645743][ T5724] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.326708][ T5735] loop2: detected capacity change from 0 to 256 [ 92.346644][ T5735] exfat: Deprecated parameter 'utf8' [ 92.356225][ T5735] exfat: Deprecated parameter 'namecase' [ 92.360420][ T5735] exfat: Deprecated parameter 'namecase' [ 92.382073][ T5735] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 92.461193][ T5745] MTD: Couldn't look up './dev/mtdblock0': -2 [ 92.720421][ T5762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.724163][ T5762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.893979][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 92.943598][ T5773] xt_TPROXY: Can be used only with -p tcp or -p udp [ 93.153965][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 93.191561][ T5776] loop2: detected capacity change from 0 to 4096 [ 93.213509][ T5778] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.215615][ T5776] NILFS error (device loop2): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 93.220322][ T5776] Remounting filesystem read-only [ 93.234869][ T5157] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 93.331817][ T5786] MTD: Couldn't look up './dev/mtdblock0': -2 [ 93.657762][ T5807] loop3: detected capacity change from 0 to 256 [ 94.193759][ T5821] loop4: detected capacity change from 0 to 32768 [ 94.214847][ T5821] ======================================================= [ 94.214847][ T5821] WARNING: The mand mount option has been deprecated and [ 94.214847][ T5821] and is ignored by this kernel. Remove the mand [ 94.214847][ T5821] option from the mount to silence this warning. [ 94.214847][ T5821] ======================================================= [ 94.304030][ T5821] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 94.317039][ T5821] JBD2: Ignoring recovery information on journal [ 94.689169][ T5821] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 94.698440][ T5848] binder: BINDER_SET_CONTEXT_MGR already set [ 94.699702][ T5848] binder: 5847:5848 ioctl 4018620d 20000040 returned -16 [ 94.701291][ T5848] binder: tried to use weak ref as strong ref [ 94.702348][ T5848] binder: 5847:5848 Acquire 1 refcount change on invalid ref 0 ret -22 [ 94.703912][ T5848] binder: 5847:5848 got transaction to invalid handle, 1 [ 94.705043][ T5848] binder: 5848:5847 cannot find target node [ 94.705961][ T5848] binder: 5847:5848 transaction async to 0:0 failed 33/29201/-22, size 0-0 line 3062 [ 94.750458][ T4666] ocfs2: Unmounting device (7,4) on (node local) [ 94.849470][ T5860] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 94.906540][ T5865] loop4: detected capacity change from 0 to 512 [ 94.918100][ T5855] loop2: detected capacity change from 0 to 32768 [ 94.918141][ T5865] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.941218][ T5855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.377 (5855) [ 94.960952][ T5855] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.964585][ T5855] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 94.973722][ T5855] BTRFS info (device loop2): enabling auto defrag [ 94.981285][ T5855] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.986335][ T5855] BTRFS info (device loop2): use zstd compression, level 3 [ 94.991971][ T5855] BTRFS info (device loop2): turning on async discard [ 94.995020][ T5855] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 95.000229][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 95.003169][ T5855] BTRFS info (device loop2): trying to use backup root at mount time [ 95.004615][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 95.007037][ T5855] BTRFS info (device loop2): setting nodatacow, compression disabled [ 95.010773][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 95.013214][ T5855] BTRFS info (device loop2): enabling ssd optimizations [ 95.015801][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 95.018941][ T5855] BTRFS info (device loop2): using spread ssd allocation scheme [ 95.021531][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 95.023156][ T5855] BTRFS info (device loop2): using free space tree [ 95.024389][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 95.118727][ T5881] 9pnet_fd: Insufficient options for proto=fd [ 95.150466][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 95.153566][ T5855] BTRFS error (device loop2): failed to load root extent [ 95.154834][ T5855] BTRFS warning (device loop2): try to load backup roots slot 1 [ 95.156409][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 95.158699][ T5855] BTRFS warning (device loop2): couldn't read tree root [ 95.159893][ T5855] BTRFS warning (device loop2): try to load backup roots slot 2 [ 95.161405][ T5855] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 95.163336][ T5855] BTRFS warning (device loop2): couldn't read tree root [ 95.164592][ T5855] BTRFS warning (device loop2): try to load backup roots slot 3 [ 95.168956][ T5855] BTRFS info (device loop2): rebuilding free space tree [ 95.174973][ T5855] BTRFS info (device loop2): checking UUID tree [ 95.244122][ T5157] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.406891][ T5907] MTD: Couldn't look up './dev/mtdblock0': -2 [ 95.455509][ T5908] binder: 5906:5908 tried to acquire reference to desc 0, got 1 instead [ 95.457649][ T5908] binder_alloc: 5906: binder_alloc_buf, no vma [ 95.458626][ T5908] binder: cannot allocate buffer: vma cleared, target dead or dying [ 95.458656][ T5908] binder: 5906:5908 transaction async to 5906:0 failed 38/29189/-3, size 0-0 line 3247 [ 95.461199][ T5237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5237) [ 95.505504][ T5917] MTD: Couldn't look up './dev/mtdblock0': -2 [ 95.773881][ T5931] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.223564][ T5959] MTD: Couldn't look up './dev/mtdblock0': -2 [ 96.248145][ T5963] loop1: detected capacity change from 0 to 128 [ 96.283038][ T5966] __nla_validate_parse: 32 callbacks suppressed [ 96.283049][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 96.297595][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 96.333786][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 96.401971][ T5963] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.420534][ T5963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.456382][ T5963] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 96.510114][ T5963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.512229][ T5963] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 96.526455][ T5963] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 96.623021][ T5251] EXT4-fs (loop1): unmounting filesystem. [ 96.973878][ T6003] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 97.372574][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 97.453561][ T6013] siw: device registration error -23 [ 97.457548][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 97.520430][ T6013] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.736960][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 97.738863][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 97.750822][ T6017] nvme_fabrics: missing parameter 'nqn=%s' [ 97.830245][ T6022] MTD: Couldn't look up './dev/mtdblock0': -2 [ 97.890221][ T6035] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 98.002854][ T6048] binder: BINDER_SET_CONTEXT_MGR already set [ 98.004001][ T6048] binder: 6046:6048 ioctl 4018620d 20000040 returned -16 [ 98.014255][ T6048] binder: 6046:6048 got transaction to invalid handle, 1 [ 98.015547][ T6048] binder: 6048:6046 cannot find target node [ 98.016699][ T6048] binder: 6046:6048 transaction async to 0:0 failed 41/29201/-22, size 0-0 line 3062 [ 98.024720][ T5231] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.204513][ T6062] MTD: Couldn't look up './dev/mtdblock0': -2 [ 98.224739][ T6068] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 98.317335][ T6074] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 98.326261][ T6074] PKCS7: Only support pkcs7_signedData type [ 98.380333][ T6081] binder: BINDER_SET_CONTEXT_MGR already set [ 98.381743][ T6081] binder: 6075:6081 ioctl 4018620d 20000040 returned -16 [ 98.387887][ T6081] binder: 6075:6081 got transaction to invalid handle, 1 [ 98.389284][ T6081] binder: 6081:6075 cannot find target node [ 98.390323][ T6081] binder: 6075:6081 transaction async to 0:0 failed 44/29201/-22, size 0-0 line 3062 [ 98.393723][ T4392] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.654674][ T6111] siw: device registration error -23 [ 98.656214][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 98.713366][ T6111] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.985416][ T6118] MTD: Couldn't look up './dev/mtdblock0': -2 [ 99.031966][ T6115] netlink: 84 bytes leftover after parsing attributes in process `syz.0.456'. [ 99.254087][ T6144] netlink: 80 bytes leftover after parsing attributes in process `syz.4.464'. [ 99.317115][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.321212][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.614307][ T6178] loop3: detected capacity change from 0 to 8 [ 99.627848][ T6178] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 99.631221][ T5237] udevd[5237]: incorrect cramfs checksum on /dev/loop3 [ 99.692648][ T6181] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 99.701426][ T6181] device bond1 entered promiscuous mode [ 99.702557][ T6181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.821179][ T6193] MTD: Couldn't look up './dev/mtdblock0': -2 [ 99.879568][ T6196] siw: device registration error -23 [ 99.937288][ T6196] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.204485][ T6199] loop0: detected capacity change from 0 to 2048 [ 100.209466][ T6201] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 100.226883][ T6170] loop1: detected capacity change from 0 to 40427 [ 100.248136][ T6202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.253424][ T6170] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 100.490856][ T6212] loop3: detected capacity change from 0 to 32768 [ 100.492788][ T6212] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 100.757825][ T6227] overlayfs: overlapping lowerdir path [ 101.002798][ T6232] MTD: Couldn't look up './dev/mtdblock0': -2 [ 101.121837][ T6240] device-mapper: ioctl: Invalid data size in the ioctl structure: 185 [ 101.381704][ T6255] siw: device registration error -23 [ 101.383146][ T6255] __nla_validate_parse: 3 callbacks suppressed [ 101.383153][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 101.433460][ T6255] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.647885][ T6215] loop0: detected capacity change from 0 to 32768 [ 101.650414][ T6215] XFS (loop0): invalid log iosize: 0 [not 12-30] [ 101.661032][ T6260] MTD: Couldn't look up './dev/mtdblock0': -2 [ 101.711219][ T5237] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.734229][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 101.934992][ T6280] loop4: detected capacity change from 0 to 128 [ 101.956946][ T6282] loop0: detected capacity change from 0 to 128 [ 102.032869][ T6282] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.034927][ T6280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.056588][ T6289] MTD: Couldn't look up './dev/mtdblock0': -2 [ 102.394903][ T4666] EXT4-fs (loop4): unmounting filesystem. [ 102.414638][ T4654] EXT4-fs (loop0): unmounting filesystem. [ 102.584907][ T6302] No source specified [ 102.756694][ T6297] loop4: detected capacity change from 0 to 32768 [ 102.771219][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 102.772231][ T6297] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 102.835357][ T6322] siw: device registration error -23 [ 102.836827][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 102.898187][ T6322] xt_TPROXY: Can be used only with -p tcp or -p udp [ 103.236560][ T5237] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 103.470688][ T6335] loop1: detected capacity change from 0 to 32768 [ 103.482609][ T6335] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 103.529528][ T6351] No source specified [ 103.532186][ T5237] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 103.656587][ T6367] loop3: detected capacity change from 0 to 256 [ 103.673128][ T6367] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 103.701765][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 104.023083][ T6384] siw: device registration error -23 [ 104.026854][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 104.083934][ T6384] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.326586][ T6379] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 104.967711][ T5237] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.869892][ T6431] set_capacity_and_notify: 1 callbacks suppressed [ 105.869900][ T6431] loop0: detected capacity change from 0 to 32768 [ 105.873354][ T6431] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 105.900689][ T6442] loop1: detected capacity change from 0 to 64 [ 105.921401][ T5237] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.999154][ T6448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.004103][ T6448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.100270][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.102362][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.105313][ T6459] netlink: 43 bytes leftover after parsing attributes in process `syz.3.582'. [ 106.412032][ T6482] siw: device registration error -23 [ 106.461157][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 106.484319][ T4357] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 106.489275][ T4357] CPU: 0 PID: 4357 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 106.490695][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 106.492421][ T4357] Workqueue: hci2 hci_rx_work [ 106.493229][ T4357] Call trace: [ 106.493801][ T4357] dump_backtrace+0x1c4/0x1f0 [ 106.494521][ T4357] show_stack+0x2c/0x3c [ 106.495162][ T4357] __dump_stack+0x30/0x40 [ 106.495795][ T4357] dump_stack_lvl+0xf4/0x15c [ 106.496514][ T4357] dump_stack+0x1c/0x5c [ 106.497202][ T4357] sysfs_create_dir_ns+0x244/0x264 [ 106.498104][ T4357] kobject_add_internal+0x5a8/0xb18 [ 106.499025][ T4357] kobject_add+0x144/0x20c [ 106.499743][ T4357] device_add+0x3dc/0xe4c [ 106.500506][ T4357] hci_conn_add_sysfs+0xb8/0x1bc [ 106.501390][ T4357] le_conn_complete_evt+0xd3c/0x1300 [ 106.502339][ T4357] hci_le_enh_conn_complete_evt+0x114/0x3b8 [ 106.503401][ T4357] hci_le_meta_evt+0x2c0/0x4a8 [ 106.504266][ T4357] hci_event_packet+0x64c/0xe60 [ 106.505101][ T4357] hci_rx_work+0x320/0xa94 [ 106.505861][ T4357] process_one_work+0x7e4/0x13bc [ 106.506712][ T4357] worker_thread+0x8cc/0xfe8 [ 106.507500][ T4357] kthread+0x254/0x2e0 [ 106.508180][ T4357] ret_from_fork+0x10/0x20 [ 106.603661][ T6484] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.715452][ T4357] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 106.741341][ T4357] Bluetooth: hci2: failed to register connection device [ 107.320195][ T6488] loop0: detected capacity change from 0 to 32768 [ 107.328024][ T6488] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 107.365101][ T5237] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 107.804119][ T6522] siw: device registration error -23 [ 107.824484][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 107.977640][ T6523] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.682818][ T6527] loop3: detected capacity change from 0 to 32768 [ 108.690478][ T6527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.605 (6527) [ 108.696716][ T6527] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.699276][ T6527] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 108.700963][ T6527] BTRFS info (device loop3): using free space tree [ 108.739629][ T6540] MTD: Couldn't look up './dev/mtdblock0': -2 [ 108.797356][ T4357] Bluetooth: hci2: command 0x2016 tx timeout [ 108.822913][ T6527] BTRFS info (device loop3): enabling ssd optimizations [ 108.830469][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.832326][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.067290][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.383693][ T6474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.546589][ T14] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 109.556059][ T4648] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.558991][ T14] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 109.560432][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.561740][ T14] usb 1-1: Product: syz [ 109.562393][ T14] usb 1-1: Manufacturer: syz [ 109.563166][ T14] usb 1-1: SerialNumber: syz [ 109.725020][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.726959][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.751366][ T6587] MTD: Couldn't look up './dev/mtdblock0': -2 [ 109.816124][ T6589] siw: device registration error -23 [ 109.819301][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 109.878292][ T6589] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.090214][ T14] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 110.092747][ T14] usb 1-1: unit 2 not found! [ 110.112868][ T14] usb 1-1: USB disconnect, device number 5 [ 110.346682][ T5237] udevd[5237]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.423669][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.449154][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.606234][ T6612] loop2: detected capacity change from 0 to 256 [ 110.620180][ T6612] FAT-fs (loop2): Unrecognized mount option "0x0000000000000004" or missing value [ 110.754580][ T6576] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.756249][ T6576] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.758747][ T6576] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.760273][ T6576] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.877476][ T6624] loop0: detected capacity change from 0 to 32768 [ 110.889192][ T6624] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 110.890953][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.893050][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.926467][ T5237] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 111.517790][ T6645] loop4: detected capacity change from 0 to 512 [ 111.529763][ T6645] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 111.615677][ T6653] siw: device registration error -23 [ 111.619524][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 111.674194][ T6653] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.084936][ T6665] loop1: detected capacity change from 0 to 32768 [ 112.115210][ T6665] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 112.134541][ T6667] loop4: detected capacity change from 0 to 32768 [ 112.139509][ T6667] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 112.202794][ T6674] MTD: Couldn't look up './dev/mtdblock0': -2 [ 112.865137][ T5120] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.930054][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.931881][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.027066][ T6684] loop4: detected capacity change from 0 to 4096 [ 113.030545][ T6684] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 113.052169][ T6684] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 113.112501][ T6697] siw: device registration error -23 [ 113.113950][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 113.164060][ T6697] xt_TPROXY: Can be used only with -p tcp or -p udp [ 113.591875][ T6712] MTD: Couldn't look up './dev/mtdblock0': -2 [ 113.806020][ T6721] loop2: detected capacity change from 0 to 32768 [ 113.809177][ T6721] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.811168][ T6721] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 113.812881][ T6721] BTRFS info (device loop2): enabling auto defrag [ 113.814131][ T6721] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.815800][ T6721] BTRFS info (device loop2): use zstd compression, level 3 [ 113.817204][ T6721] BTRFS info (device loop2): turning on async discard [ 113.818638][ T6721] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 113.820751][ T6721] BTRFS info (device loop2): trying to use backup root at mount time [ 113.822416][ T6721] BTRFS info (device loop2): setting nodatacow, compression disabled [ 113.823907][ T6721] BTRFS info (device loop2): enabling ssd optimizations [ 113.825219][ T6721] BTRFS info (device loop2): using spread ssd allocation scheme [ 113.826664][ T6721] BTRFS info (device loop2): using free space tree [ 113.840009][ T4952] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 113.847366][ T6721] BTRFS error (device loop2): failed to load root extent [ 113.848438][ T6721] BTRFS warning (device loop2): try to load backup roots slot 1 [ 113.858303][ T4952] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 113.866428][ T6721] BTRFS warning (device loop2): couldn't read tree root [ 113.867770][ T6721] BTRFS warning (device loop2): try to load backup roots slot 2 [ 113.876805][ T6721] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 113.879666][ T6721] BTRFS warning (device loop2): couldn't read tree root [ 113.880793][ T6721] BTRFS warning (device loop2): try to load backup roots slot 3 [ 113.942032][ T6721] BTRFS info (device loop2): rebuilding free space tree [ 113.945297][ T6721] BTRFS info (device loop2): checking UUID tree [ 113.977654][ T5157] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.053323][ T6761] MTD: Couldn't look up './dev/mtdblock0': -2 [ 114.170948][ T6745] loop1: detected capacity change from 0 to 32768 [ 114.173108][ T6745] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.671 (6745) [ 114.482963][ T6745] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.487076][ T6745] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 114.493197][ T6745] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 114.494930][ T6745] BTRFS info (device loop1): use zstd compression, level 3 [ 114.503709][ T6745] BTRFS info (device loop1): using free space tree [ 114.640085][ T6745] BTRFS info (device loop1): enabling ssd optimizations [ 114.808338][ T6807] siw: device registration error -23 [ 114.811484][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 115.119312][ T6807] xt_TPROXY: Can be used only with -p tcp or -p udp [ 115.148276][ T5251] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.441207][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.447532][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.601683][ T6821] MTD: Couldn't look up './dev/mtdblock0': -2 [ 115.966627][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.975770][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.249297][ T6850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.696'. [ 116.525600][ T6851] binder: BINDER_SET_CONTEXT_MGR already set [ 116.529541][ T6851] binder: 6849:6851 ioctl 4018620d 20000040 returned -16 [ 116.531408][ T6851] binder: 6849:6851 got transaction to invalid handle, 1 [ 116.532720][ T6851] binder: 6851:6849 cannot find target node [ 116.533891][ T6851] binder: 6849:6851 transaction async to 0:0 failed 46/29201/-22, size 0-0 line 3062 [ 116.535978][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.664911][ T6857] loop1: detected capacity change from 0 to 512 [ 116.678822][ T6857] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 116.899621][ T6877] binder: BINDER_SET_CONTEXT_MGR already set [ 116.900780][ T6877] binder: 6876:6877 ioctl 4018620d 20000040 returned -16 [ 116.912792][ T6877] binder: 6876:6877 got transaction to invalid handle, 1 [ 116.914086][ T6877] binder: 6877:6876 cannot find target node [ 116.915648][ T6877] binder: 6876:6877 transaction async to 0:0 failed 48/29201/-22, size 0-0 line 3062 [ 116.929923][ T5238] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.054918][ T6884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.056726][ T6884] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 117.280821][ T4343] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 117.283220][ T4343] CPU: 1 PID: 4343 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 117.284448][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 117.286179][ T4343] Workqueue: hci1 hci_rx_work [ 117.286945][ T4343] Call trace: [ 117.287480][ T4343] dump_backtrace+0x1c4/0x1f0 [ 117.288257][ T4343] show_stack+0x2c/0x3c [ 117.288972][ T4343] __dump_stack+0x30/0x40 [ 117.289819][ T4343] dump_stack_lvl+0xf4/0x15c [ 117.290622][ T4343] dump_stack+0x1c/0x5c [ 117.291354][ T4343] sysfs_create_dir_ns+0x244/0x264 [ 117.292232][ T4343] kobject_add_internal+0x5a8/0xb18 [ 117.293127][ T4343] kobject_add+0x144/0x20c [ 117.293860][ T4343] device_add+0x3dc/0xe4c [ 117.294582][ T4343] hci_conn_add_sysfs+0xb8/0x1bc [ 117.295402][ T4343] le_conn_complete_evt+0xd3c/0x1300 [ 117.296248][ T4343] hci_le_enh_conn_complete_evt+0x114/0x3b8 [ 117.297254][ T4343] hci_le_meta_evt+0x2c0/0x4a8 [ 117.298063][ T4343] hci_event_packet+0x64c/0xe60 [ 117.298875][ T4343] hci_rx_work+0x320/0xa94 [ 117.299609][ T4343] process_one_work+0x7e4/0x13bc [ 117.300418][ T4343] worker_thread+0x8cc/0xfe8 [ 117.301239][ T4343] kthread+0x254/0x2e0 [ 117.301940][ T4343] ret_from_fork+0x10/0x20 [ 117.305618][ T4343] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 117.308250][ T4343] Bluetooth: hci1: failed to register connection device [ 117.401080][ T6881] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 117.402523][ T6881] netlink: 756 bytes leftover after parsing attributes in process `syz.3.713'. [ 117.490030][ T6903] MTD: Couldn't look up './dev/mtdblock0': -2 [ 117.712347][ T6909] loop2: detected capacity change from 0 to 512 [ 117.716392][ T6909] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 117.865470][ T6917] binder: 6916:6917 ioctl c0306201 0 returned -14 [ 117.873698][ T6917] binder: 6916:6917 got transaction to invalid handle, 1 [ 117.875035][ T6917] binder: 6917:6916 cannot find target node [ 117.890320][ T6917] binder: 6916:6917 transaction async to 0:0 failed 52/29201/-22, size 0-0 line 3062 [ 117.969009][ T6923] No source specified [ 117.974545][ T6914] loop4: detected capacity change from 0 to 32768 [ 117.981517][ T6914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.723 (6914) [ 117.994501][ T6914] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.007607][ T6914] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 118.012617][ T6914] BTRFS info (device loop4): using free space tree [ 118.196248][ T6914] BTRFS info (device loop4): enabling ssd optimizations [ 118.253976][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.255749][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.408537][ T6967] binder: 6966:6967 ioctl c0306201 0 returned -14 [ 118.419185][ T6967] binder: 6966:6967 got transaction to invalid handle, 1 [ 118.422830][ T6967] binder: 6967:6966 cannot find target node [ 118.427848][ T6967] binder: 6966:6967 transaction async to 0:0 failed 56/29201/-22, size 0-0 line 3062 [ 118.556882][ T6978] MTD: Couldn't look up './dev/mtdblock0': -2 [ 118.667897][ T6982] loop2: detected capacity change from 0 to 7 [ 118.672178][ T6982] Dev loop2: unable to read RDB block 7 [ 118.673220][ T6982] loop2: AHDI p1 p2 p3 [ 118.673908][ T6982] loop2: partition table partially beyond EOD, truncated [ 118.681924][ T6982] loop2: p3 start 335544320 is beyond EOD, truncated [ 118.726518][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.740372][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.779681][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.795624][ T4666] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.800845][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.840695][ T6994] binder: 6993:6994 ioctl c0306201 0 returned -14 [ 118.843323][ T6994] binder: 6993:6994 got transaction to invalid handle, 1 [ 119.019460][ T7007] MTD: Couldn't look up './dev/mtdblock0': -2 [ 119.075273][ T6997] loop3: detected capacity change from 0 to 32768 [ 119.082160][ T6997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.754 (6997) [ 119.088726][ T6997] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.090352][ T6997] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 119.091911][ T6997] BTRFS info (device loop3): enabling auto defrag [ 119.097552][ T6997] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 119.099748][ T6997] BTRFS info (device loop3): use zstd compression, level 3 [ 119.100953][ T6997] BTRFS info (device loop3): turning on async discard [ 119.103323][ T6997] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 119.108090][ T6997] BTRFS info (device loop3): trying to use backup root at mount time [ 119.109795][ T6997] BTRFS info (device loop3): setting nodatacow, compression disabled [ 119.111141][ T6997] BTRFS info (device loop3): enabling ssd optimizations [ 119.112285][ T6997] BTRFS info (device loop3): using spread ssd allocation scheme [ 119.113900][ T6997] BTRFS info (device loop3): using free space tree [ 119.224043][ T7019] loop4: detected capacity change from 0 to 32768 [ 119.226828][ T7019] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.761 (7019) [ 119.295994][ T4406] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 119.298555][ T6997] BTRFS error (device loop3): failed to load root extent [ 119.299965][ T6997] BTRFS warning (device loop3): try to load backup roots slot 1 [ 119.301459][ T6810] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 119.306438][ T6997] BTRFS warning (device loop3): couldn't read tree root [ 119.329494][ T6997] BTRFS warning (device loop3): try to load backup roots slot 2 [ 119.380458][ T7041] siw: device registration error -23 [ 119.404429][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 119.437485][ T4357] Bluetooth: hci1: command 0x2016 tx timeout [ 119.539715][ T7043] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.127299][ T6997] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 120.129402][ T6997] BTRFS warning (device loop3): couldn't read tree root [ 120.130571][ T6997] BTRFS warning (device loop3): try to load backup roots slot 3 [ 120.148693][ T7039] binder: BINDER_SET_CONTEXT_MGR already set [ 120.149803][ T7039] binder: 7037:7039 ioctl 4018620d 20000040 returned -16 [ 120.151215][ T7039] binder: 7037:7039 got transaction to invalid handle, 1 [ 120.180106][ T7045] jffs2: notice: (7045) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 120.240667][ T6997] BTRFS info (device loop3): rebuilding free space tree [ 120.246129][ T6997] BTRFS info (device loop3): checking UUID tree [ 120.339236][ T4648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.340832][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.347191][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.390796][ T5120] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (5120) [ 120.449242][ T7068] loop0: detected capacity change from 0 to 32768 [ 120.452690][ T7068] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.775 (7068) [ 120.619278][ T7072] loop3: detected capacity change from 0 to 32768 [ 120.706327][ T7072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.771 (7072) [ 120.924612][ T7072] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.926602][ T7072] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 120.928150][ T7072] BTRFS info (device loop3): turning on sync discard [ 120.929148][ T7072] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 120.930682][ T7072] BTRFS info (device loop3): use zstd compression, level 3 [ 120.932275][ T7072] BTRFS info (device loop3): turning on async discard [ 120.933319][ T7072] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 120.934924][ T7072] BTRFS info (device loop3): trying to use backup root at mount time [ 120.936264][ T7072] BTRFS info (device loop3): enabling auto defrag [ 120.937381][ T7072] BTRFS info (device loop3): using free space tree [ 121.003682][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.005259][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.026446][ T271] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 121.029854][ T7072] BTRFS error (device loop3): failed to load root extent [ 121.031065][ T7072] BTRFS warning (device loop3): try to load backup roots slot 1 [ 121.034126][ T6810] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 121.036396][ T7072] BTRFS warning (device loop3): couldn't read tree root [ 121.037688][ T7072] BTRFS warning (device loop3): try to load backup roots slot 2 [ 121.039429][ T7072] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 121.042085][ T7072] BTRFS warning (device loop3): couldn't read tree root [ 121.043291][ T7072] BTRFS warning (device loop3): try to load backup roots slot 3 [ 121.054272][ T7072] BTRFS info (device loop3): enabling ssd optimizations [ 121.055968][ T7072] BTRFS info (device loop3): rebuilding free space tree [ 121.061548][ T7072] BTRFS info (device loop3): checking UUID tree [ 121.542271][ T7105] jffs2: notice: (7105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.603991][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 121.662457][ T7108] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.891676][ T4648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.902707][ T7111] binder: 7110:7111 got transaction to invalid handle, 1 [ 121.904076][ T7111] binder_debug: 4 callbacks suppressed [ 121.904088][ T7111] binder: 7111:7110 cannot find target node [ 121.906308][ T7111] binder: 7110:7111 transaction async to 0:0 failed 67/29201/-22, size 0-0 line 3062 [ 122.074776][ T7113] loop0: detected capacity change from 0 to 32768 [ 122.084184][ T7113] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.782 (7113) [ 122.096751][ T7113] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.096959][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.101831][ T7113] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 122.103239][ T7113] BTRFS info (device loop0): enabling auto defrag [ 122.112174][ T7113] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.113988][ T7113] BTRFS info (device loop0): use zstd compression, level 3 [ 122.115435][ T7113] BTRFS info (device loop0): turning on async discard [ 122.116671][ T7113] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.119151][ T7113] BTRFS info (device loop0): trying to use backup root at mount time [ 122.120510][ T7113] BTRFS info (device loop0): setting nodatacow, compression disabled [ 122.121754][ T7113] BTRFS info (device loop0): enabling ssd optimizations [ 122.125167][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.135286][ T7113] BTRFS info (device loop0): using spread ssd allocation scheme [ 122.136982][ T7113] BTRFS info (device loop0): using free space tree [ 122.252130][ T6323] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 122.254466][ T7113] BTRFS error (device loop0): failed to load root extent [ 122.255625][ T7113] BTRFS warning (device loop0): try to load backup roots slot 1 [ 122.262511][ T4952] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 122.264824][ T7113] BTRFS warning (device loop0): couldn't read tree root [ 122.266010][ T7113] BTRFS warning (device loop0): try to load backup roots slot 2 [ 122.268827][ T7113] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 122.270606][ T7113] BTRFS warning (device loop0): couldn't read tree root [ 122.271932][ T7113] BTRFS warning (device loop0): try to load backup roots slot 3 [ 122.295148][ T7113] BTRFS info (device loop0): rebuilding free space tree [ 122.300840][ T7113] BTRFS info (device loop0): checking UUID tree [ 122.372133][ T4654] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.509989][ T7153] binder: 7152:7153 got transaction to invalid handle, 1 [ 122.511442][ T7153] binder: 7153:7152 cannot find target node [ 122.512432][ T7153] binder: 7152:7153 transaction async to 0:0 failed 71/29201/-22, size 0-0 line 3062 [ 122.524673][ T7150] loop4: detected capacity change from 0 to 32768 [ 122.526609][ T7150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.791 (7150) [ 122.530756][ T7150] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.532353][ T7150] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 122.533786][ T7150] BTRFS info (device loop4): turning on sync discard [ 122.534863][ T7150] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.536446][ T7150] BTRFS info (device loop4): use zstd compression, level 3 [ 122.537799][ T7150] BTRFS info (device loop4): turning on async discard [ 122.538979][ T7150] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.540824][ T7150] BTRFS info (device loop4): trying to use backup root at mount time [ 122.542178][ T7150] BTRFS info (device loop4): enabling auto defrag [ 122.543211][ T7150] BTRFS info (device loop4): using free space tree [ 122.657667][ T7156] loop0: detected capacity change from 0 to 32768 [ 122.661840][ T7156] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.787 (7156) [ 122.738361][ T5237] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.751405][ T6323] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 122.753965][ T7150] BTRFS error (device loop4): failed to load root extent [ 122.755274][ T7150] BTRFS warning (device loop4): try to load backup roots slot 1 [ 122.756856][ T5614] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 122.761653][ T7150] BTRFS warning (device loop4): couldn't read tree root [ 122.762903][ T7150] BTRFS warning (device loop4): try to load backup roots slot 2 [ 122.764413][ T7150] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 122.766287][ T7150] BTRFS warning (device loop4): couldn't read tree root [ 122.767558][ T7150] BTRFS warning (device loop4): try to load backup roots slot 3 [ 122.790886][ T7150] BTRFS info (device loop4): enabling ssd optimizations [ 122.792656][ T7150] BTRFS info (device loop4): rebuilding free space tree [ 122.801132][ T7150] BTRFS info (device loop4): checking UUID tree [ 123.801629][ T7060] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.803314][ T7060] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.804940][ T7060] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.819689][ T7060] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.921232][ T4666] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.002383][ T7186] loop3: detected capacity change from 0 to 32768 [ 124.018087][ T7186] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.797 (7186) [ 124.023558][ T7186] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.030238][ T7186] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 124.032319][ T7186] BTRFS info (device loop3): enabling auto defrag [ 124.033323][ T7186] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 124.034793][ T7186] BTRFS info (device loop3): use zstd compression, level 3 [ 124.035871][ T7186] BTRFS info (device loop3): turning on async discard [ 124.036976][ T7186] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 124.056920][ T7186] BTRFS info (device loop3): trying to use backup root at mount time [ 124.059728][ T7191] loop0: detected capacity change from 0 to 32768 [ 124.060049][ T7186] BTRFS info (device loop3): setting nodatacow, compression disabled [ 124.062051][ T7186] BTRFS info (device loop3): enabling ssd optimizations [ 124.064816][ T7191] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.798 (7191) [ 124.067052][ T7186] BTRFS info (device loop3): using spread ssd allocation scheme [ 124.069235][ T7186] BTRFS info (device loop3): using free space tree [ 124.073129][ T7191] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.076995][ T7191] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 124.079955][ T7191] BTRFS info (device loop0): using free space tree [ 124.156629][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 124.213617][ T7205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.500439][ T7231] binder: 7230:7231 got transaction to invalid handle, 1 [ 124.501921][ T7231] binder: 7231:7230 cannot find target node [ 124.505166][ T7231] binder: 7230:7231 transaction async to 0:0 failed 75/29201/-22, size 0-0 line 3062 [ 124.522371][ T7191] BTRFS info (device loop0): enabling ssd optimizations [ 124.544705][ T4406] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 124.548619][ T7186] BTRFS error (device loop3): failed to load root extent [ 124.550163][ T7186] BTRFS warning (device loop3): try to load backup roots slot 1 [ 124.553571][ T4406] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 124.556065][ T7186] BTRFS warning (device loop3): couldn't read tree root [ 124.557688][ T7186] BTRFS warning (device loop3): try to load backup roots slot 2 [ 124.559438][ T7186] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 124.563849][ T4654] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.566936][ T7186] BTRFS warning (device loop3): couldn't read tree root [ 124.568797][ T7186] BTRFS warning (device loop3): try to load backup roots slot 3 [ 124.656700][ T7186] BTRFS info (device loop3): rebuilding free space tree [ 124.661318][ T7186] BTRFS info (device loop3): checking UUID tree [ 124.661640][ T7243] No source specified [ 124.691756][ T4648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.785194][ T7249] loop2: detected capacity change from 0 to 32768 [ 124.810349][ T7249] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.809 (7249) [ 124.834312][ T7251] loop1: detected capacity change from 0 to 32768 [ 124.836225][ T7251] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.810 (7251) [ 126.124547][ T7251] sched: RT throttling activated [ 126.132038][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.133141][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.627937][ T5237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (5237) [ 126.634696][ T5128] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 126.651576][ T7273] jffs2: notice: (7273) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.670801][ T5120] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 126.732007][ T7283] No source specified [ 126.916351][ T7279] loop0: detected capacity change from 0 to 32768 [ 126.933354][ T7279] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.815 (7279) [ 126.962501][ T7279] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.964497][ T7279] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 126.966247][ T7279] BTRFS info (device loop0): using free space tree [ 126.993621][ T7278] loop2: detected capacity change from 0 to 32768 [ 126.995850][ T7278] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 127.446378][ T7279] BTRFS info (device loop0): enabling ssd optimizations [ 127.767139][ T4654] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.872252][ T7329] jffs2: notice: (7329) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.983916][ T5138] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5138) [ 128.182026][ T7350] loop0: detected capacity change from 0 to 32768 [ 128.184100][ T7350] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 128.285189][ T7354] siw: device registration error -23 [ 128.289493][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 128.521047][ T7356] xt_TPROXY: Can be used only with -p tcp or -p udp [ 129.068704][ T7363] jffs2: notice: (7363) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.284463][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.298128][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.396066][ T7393] jffs2: notice: (7393) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.439291][ T7396] netlink: 84 bytes leftover after parsing attributes in process `syz.0.859'. [ 129.548733][ T7403] loop3: detected capacity change from 0 to 2048 [ 129.555042][ T7408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.708788][ T7420] jffs2: notice: (7420) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.807298][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.921895][ T7426] loop3: detected capacity change from 0 to 32768 [ 129.928408][ T7426] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.930160][ T7426] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 129.931720][ T7426] BTRFS info (device loop3): turning on sync discard [ 129.932924][ T7426] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 129.934460][ T7426] BTRFS info (device loop3): use zstd compression, level 3 [ 129.935678][ T7426] BTRFS info (device loop3): turning on async discard [ 129.936769][ T7426] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 129.938600][ T7426] BTRFS info (device loop3): trying to use backup root at mount time [ 129.939930][ T7426] BTRFS info (device loop3): enabling auto defrag [ 129.941068][ T7426] BTRFS info (device loop3): using free space tree [ 129.970529][ T7431] netlink: 84 bytes leftover after parsing attributes in process `syz.1.873'. [ 129.991276][ T14] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 129.993524][ T14] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.995351][ T14] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 130.001555][ T14] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 130.017137][ T14] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 130.019312][ T14] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.021299][ T14] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 130.033064][ T14] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 130.037664][ T14] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 130.039353][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.040803][ T14] usb 1-1: Product: syz [ 130.041597][ T14] usb 1-1: Manufacturer: syz [ 130.042540][ T14] usb 1-1: SerialNumber: syz [ 130.046318][ T14] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 130.051180][ T14] ti_usb_3410_5052 1-1:2.0: missing endpoints [ 130.053353][ T4952] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 130.056014][ T7426] BTRFS error (device loop3): failed to load root extent [ 130.057428][ T7426] BTRFS warning (device loop3): try to load backup roots slot 1 [ 130.059091][ T39] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 130.061453][ T7426] BTRFS warning (device loop3): couldn't read tree root [ 130.062779][ T7426] BTRFS warning (device loop3): try to load backup roots slot 2 [ 130.064318][ T7426] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 130.066190][ T7426] BTRFS warning (device loop3): couldn't read tree root [ 130.067759][ T7426] BTRFS warning (device loop3): try to load backup roots slot 3 [ 130.072024][ T7426] BTRFS info (device loop3): enabling ssd optimizations [ 130.073565][ T7426] BTRFS info (device loop3): rebuilding free space tree [ 130.078626][ T7426] BTRFS info (device loop3): checking UUID tree [ 130.470040][ T24] usb 1-1: USB disconnect, device number 6 [ 130.586794][ T7469] jffs2: notice: (7469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.704542][ T4648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.880545][ T7483] netlink: 84 bytes leftover after parsing attributes in process `syz.3.885'. [ 130.966908][ T7480] loop2: detected capacity change from 0 to 32768 [ 130.987004][ T7480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.887 (7480) [ 130.999830][ T7480] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.009873][ T7480] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 131.014082][ T7480] BTRFS info (device loop2): enabling auto defrag [ 131.023912][ T7480] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 131.030981][ T7480] BTRFS info (device loop2): use zstd compression, level 3 [ 131.036471][ T7480] BTRFS info (device loop2): turning on async discard [ 131.045312][ T7480] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.050213][ T7480] BTRFS info (device loop2): trying to use backup root at mount time [ 131.054126][ T7480] BTRFS info (device loop2): setting nodatacow, compression disabled [ 131.056621][ T7480] BTRFS info (device loop2): enabling ssd optimizations [ 131.059341][ T7480] BTRFS info (device loop2): using spread ssd allocation scheme [ 131.060360][ T7493] loop3: detected capacity change from 0 to 2048 [ 131.061744][ T7480] BTRFS info (device loop2): using free space tree [ 131.064736][ T7497] jffs2: notice: (7497) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.117401][ T7493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.126315][ T7493] fs-verity: sha512 using implementation "sha512-ce" [ 131.178583][ T7505] loop0: detected capacity change from 0 to 32768 [ 131.187527][ T7505] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.896 (7505) [ 131.213371][ T4952] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 131.215643][ T4648] EXT4-fs (loop3): unmounting filesystem. [ 131.217077][ T7480] BTRFS error (device loop2): failed to load root extent [ 131.218659][ T7480] BTRFS warning (device loop2): try to load backup roots slot 1 [ 131.220295][ T4873] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 131.222629][ T7480] BTRFS warning (device loop2): couldn't read tree root [ 131.223998][ T7480] BTRFS warning (device loop2): try to load backup roots slot 2 [ 131.231972][ T7480] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 131.245740][ T5128] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.252583][ T7480] BTRFS warning (device loop2): couldn't read tree root [ 131.253986][ T7480] BTRFS warning (device loop2): try to load backup roots slot 3 [ 131.321422][ T7480] BTRFS info (device loop2): rebuilding free space tree [ 131.325898][ T7480] BTRFS info (device loop2): checking UUID tree [ 131.743868][ T5157] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.841111][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.901'. [ 131.856380][ T7538] netlink: 84 bytes leftover after parsing attributes in process `syz.2.900'. [ 132.607333][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.681121][ T7562] loop4: detected capacity change from 0 to 32768 [ 132.688437][ T7562] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.910 (7562) [ 132.700278][ T7562] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.702777][ T7562] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 132.704695][ T7562] BTRFS info (device loop4): enabling auto defrag [ 132.706221][ T7562] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 132.708347][ T7562] BTRFS info (device loop4): use zstd compression, level 3 [ 132.709832][ T7562] BTRFS info (device loop4): turning on async discard [ 132.711155][ T7562] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 132.713136][ T7562] BTRFS info (device loop4): trying to use backup root at mount time [ 132.714586][ T7562] BTRFS info (device loop4): setting nodatacow, compression disabled [ 132.716083][ T7562] BTRFS info (device loop4): enabling ssd optimizations [ 132.718152][ T7562] BTRFS info (device loop4): using spread ssd allocation scheme [ 132.719725][ T7562] BTRFS info (device loop4): using free space tree [ 132.726620][ T237] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 132.729548][ T7562] BTRFS error (device loop4): failed to load root extent [ 132.730994][ T7562] BTRFS warning (device loop4): try to load backup roots slot 1 [ 132.732583][ T237] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 132.735271][ T7562] BTRFS warning (device loop4): couldn't read tree root [ 132.736626][ T7562] BTRFS warning (device loop4): try to load backup roots slot 2 [ 132.738400][ T7562] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 132.740525][ T7562] BTRFS warning (device loop4): couldn't read tree root [ 132.741929][ T7562] BTRFS warning (device loop4): try to load backup roots slot 3 [ 132.745735][ T7562] BTRFS info (device loop4): rebuilding free space tree [ 132.751501][ T7562] BTRFS info (device loop4): checking UUID tree [ 132.781269][ T4666] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.796837][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.799090][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.800894][ T22] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.802618][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.805119][ T22] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 132.807071][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.876890][ T5237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (5237) [ 132.932130][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.935078][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.133514][ T7598] netlink: 84 bytes leftover after parsing attributes in process `syz.2.917'. [ 133.187417][ T7600] loop2: detected capacity change from 0 to 2048 [ 133.205313][ T7600] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 133.210122][ T7600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.287898][ T22] gud 1-1:1.0: Unexpected status OK for failed transfer [ 133.289318][ T22] gud: probe of 1-1:1.0 failed with error -32 [ 133.386283][ T7604] process 'syz.2.918' launched './file0' with NULL argv: empty string added [ 133.510712][ T6995] usb 1-1: USB disconnect, device number 7 [ 133.988210][ T7613] loop1: detected capacity change from 0 to 32768 [ 133.990220][ T7613] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 134.047746][ T5237] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.590852][ T7632] netlink: 84 bytes leftover after parsing attributes in process `syz.4.928'. [ 134.658206][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.659947][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.223953][ T7644] loop2: detected capacity change from 0 to 32768 [ 135.230696][ T7644] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 135.265016][ T5237] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 135.759090][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.776322][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.033367][ T7627] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.035116][ T7627] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.036608][ T7627] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.038547][ T7627] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.404280][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.406820][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.604767][ T7688] netlink: 84 bytes leftover after parsing attributes in process `syz.4.945'. [ 136.820831][ T7690] loop2: detected capacity change from 0 to 32768 [ 136.840815][ T7690] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 136.913077][ T5237] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 136.964330][ T7698] binder: 7697:7698 tried to acquire reference to desc 0, got 1 instead [ 136.966354][ T7698] binder: 7698:7697 failed to get security context [ 136.976111][ T7698] binder: 7697:7698 transaction call to 7697:0 failed 80/29201/-22, size 0-0 line 3214 [ 136.997214][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.998886][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.003139][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.255487][ T7716] netlink: 76 bytes leftover after parsing attributes in process `syz.3.957'. [ 137.290752][ T7720] netlink: 84 bytes leftover after parsing attributes in process `syz.0.959'. [ 137.425105][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'. [ 137.431982][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'. [ 137.501110][ T7733] loop3: detected capacity change from 0 to 32768 [ 137.506153][ T7733] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 137.547331][ T5237] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.599356][ T7723] loop1: detected capacity change from 0 to 32768 [ 137.619158][ T7723] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 137.734775][ T7742] overlayfs: failed to resolve './file1': -2 [ 137.972907][ T7745] binder: 7744:7745 ioctl c0306201 0 returned -14 [ 137.974399][ T7745] binder: 7744:7745 got transaction to invalid handle, 1 [ 137.975664][ T7745] binder: 7745:7744 cannot find target node [ 137.976071][ T5237] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 137.976659][ T7745] binder: 7744:7745 transaction async to 0:0 failed 84/29201/-22, size 0-0 line 3062 [ 138.363628][ T7774] binder: 7773:7774 ioctl c0306201 0 returned -14 [ 138.365047][ T7774] binder: 7773:7774 got transaction to invalid handle, 1 [ 138.366261][ T7774] binder: 7774:7773 cannot find target node [ 138.371725][ T7774] binder: 7773:7774 transaction async to 0:0 failed 88/29201/-22, size 0-0 line 3062 [ 138.441916][ T7781] loop1: detected capacity change from 0 to 2048 [ 138.487806][ T7783] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.531669][ T7770] loop3: detected capacity change from 0 to 32768 [ 138.533599][ T7770] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 138.691698][ T5120] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 138.732225][ T7795] loop1: detected capacity change from 0 to 32768 [ 138.748118][ T7795] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 138.761119][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.762847][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.769176][ T7797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.991'. [ 138.805872][ T5237] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.995955][ T7806] overlayfs: failed to resolve './file1/file0': -2 [ 139.323615][ T7812] binder: 7811:7812 got transaction to invalid handle, 1 [ 139.325006][ T7812] binder: 7812:7811 cannot find target node [ 139.327030][ T7812] binder: 7811:7812 transaction async to 0:0 failed 92/29201/-22, size 0-0 line 3062 [ 139.464630][ T7816] loop4: detected capacity change from 0 to 32768 [ 139.516668][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.998'. [ 139.518895][ T7816] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.520667][ T7816] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 139.522294][ T7816] BTRFS info (device loop4): enabling auto defrag [ 139.524819][ T7816] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 139.526431][ T7816] BTRFS info (device loop4): use zstd compression, level 3 [ 139.530037][ T7816] BTRFS info (device loop4): turning on async discard [ 139.531436][ T7816] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 139.535550][ T7816] BTRFS info (device loop4): trying to use backup root at mount time [ 139.536819][ T7816] BTRFS info (device loop4): setting nodatacow, compression disabled [ 139.538810][ T7816] BTRFS info (device loop4): enabling ssd optimizations [ 139.539874][ T7816] BTRFS info (device loop4): using spread ssd allocation scheme [ 139.541907][ T7816] BTRFS info (device loop4): using free space tree [ 139.989143][ T5646] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 139.991584][ T7816] BTRFS error (device loop4): failed to load root extent [ 139.992729][ T7816] BTRFS warning (device loop4): try to load backup roots slot 1 [ 139.994318][ T4873] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 139.998322][ T7816] BTRFS warning (device loop4): couldn't read tree root [ 139.998835][ T7844] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.1002'. [ 139.999522][ T7816] BTRFS warning (device loop4): try to load backup roots slot 2 [ 140.008720][ T7816] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 140.010599][ T7816] BTRFS warning (device loop4): couldn't read tree root [ 140.011718][ T7816] BTRFS warning (device loop4): try to load backup roots slot 3 [ 140.049135][ T7816] BTRFS info (device loop4): rebuilding free space tree [ 140.053395][ T7816] BTRFS info (device loop4): checking UUID tree [ 140.105901][ T4666] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.181160][ T7863] binder: BINDER_SET_CONTEXT_MGR already set [ 140.184653][ T7863] binder: 7862:7863 ioctl 4018620d 20000040 returned -16 [ 140.186063][ T5237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (5237) [ 140.189949][ T7863] binder: 7862:7863 got transaction to invalid handle, 1 [ 140.191276][ T7863] binder: 7863:7862 cannot find target node [ 140.333701][ T7870] loop2: detected capacity change from 0 to 32768 [ 140.335601][ T7870] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 140.379045][ T5120] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.853166][ T7878] overlayfs: failed to resolve './file1/file0': -2 [ 141.214245][ T6995] libceph: connect (1)[c::]:6789 error -101 [ 141.215528][ T6995] libceph: mon0 (1)[c::]:6789 connect error [ 141.244015][ T6995] libceph: connect (1)[c::]:6789 error -101 [ 141.245126][ T6995] libceph: mon0 (1)[c::]:6789 connect error [ 141.301950][ T7891] loop2: detected capacity change from 0 to 32768 [ 141.468395][ T7901] binder: BINDER_SET_CONTEXT_MGR already set [ 141.469679][ T7901] binder: 7898:7901 ioctl 4018620d 20000040 returned -16 [ 141.471335][ T7901] binder: 7898:7901 got transaction to invalid handle, 1 [ 141.483492][ T7902] loop0: detected capacity change from 0 to 32768 [ 141.485954][ T7891] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 141.488198][ T7902] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 141.498251][ T6995] libceph: connect (1)[c::]:6789 error -101 [ 141.502192][ T6995] libceph: mon0 (1)[c::]:6789 connect error [ 141.538548][ T5237] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 141.548264][ T5120] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.066527][ T6995] libceph: connect (1)[c::]:6789 error -101 [ 142.066653][ T7883] ceph: No mds server is up or the cluster is laggy [ 142.067914][ T6995] libceph: mon0 (1)[c::]:6789 connect error [ 142.349953][ T7915] loop3: detected capacity change from 0 to 32768 [ 142.352439][ T7915] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 142.536220][ T7922] overlayfs: failed to resolve './file1/file0': -2 [ 142.767538][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.769236][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.775364][ T7929] loop1: detected capacity change from 0 to 8 [ 142.804228][ T5237] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 142.980955][ T7933] loop4: detected capacity change from 0 to 8192 [ 143.026805][ T7936] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.136559][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.146287][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1034'. [ 143.152332][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.171882][ T7970] binder: BINDER_SET_CONTEXT_MGR already set [ 144.173210][ T7970] binder: 7967:7970 ioctl 4018620d 20000040 returned -16 [ 144.187565][ T7970] binder: 7967:7970 got transaction to invalid handle, 1 [ 144.192178][ T7970] binder_debug: 3 callbacks suppressed [ 144.192194][ T7970] binder: 7970:7967 cannot find target node [ 144.195569][ T7970] binder: 7967:7970 transaction async to 0:0 failed 101/29201/-22, size 0-0 line 3062 [ 144.256261][ T7972] loop1: detected capacity change from 0 to 32768 [ 144.258591][ T7972] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 144.325027][ T5237] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.506327][ T7982] overlayfs: failed to resolve './file1/file0': -2 [ 144.872959][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1053'. [ 145.183237][ T7997] binder: 7995:7997 got transaction to invalid handle, 1 [ 145.217991][ T7997] binder: 7997:7995 cannot find target node [ 145.223547][ T7997] binder: 7995:7997 transaction async to 0:0 failed 105/29201/-22, size 0-0 line 3062 [ 145.703630][ T4343] Bluetooth: hci4: unexpected cc 0x2029 length: 100 > 1 [ 145.781887][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1065'. [ 145.897371][ T8027] loop4: detected capacity change from 0 to 32768 [ 145.904328][ T8027] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.906224][ T8027] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 145.907885][ T8027] BTRFS info (device loop4): turning on sync discard [ 145.908927][ T8027] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.910367][ T8027] BTRFS info (device loop4): use zstd compression, level 3 [ 145.911410][ T8027] BTRFS info (device loop4): turning on async discard [ 145.912424][ T8027] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 145.914125][ T8027] BTRFS info (device loop4): trying to use backup root at mount time [ 145.915626][ T8027] BTRFS info (device loop4): enabling auto defrag [ 145.916820][ T8027] BTRFS info (device loop4): using free space tree [ 145.935462][ T271] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 145.937801][ T8027] BTRFS error (device loop4): failed to load root extent [ 145.938965][ T8027] BTRFS warning (device loop4): try to load backup roots slot 1 [ 145.940303][ T271] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 145.942498][ T8027] BTRFS warning (device loop4): couldn't read tree root [ 145.943700][ T8027] BTRFS warning (device loop4): try to load backup roots slot 2 [ 145.945061][ T8027] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 145.946958][ T8027] BTRFS warning (device loop4): couldn't read tree root [ 145.948251][ T8027] BTRFS warning (device loop4): try to load backup roots slot 3 [ 145.951678][ T8027] BTRFS info (device loop4): enabling ssd optimizations [ 145.953152][ T8027] BTRFS info (device loop4): rebuilding free space tree [ 145.957023][ T8027] BTRFS info (device loop4): checking UUID tree [ 146.137846][ T8051] loop0: detected capacity change from 0 to 32768 [ 146.150607][ T8052] overlayfs: failed to resolve './file1/file0': -2 [ 146.172356][ T8051] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1068 (8051) [ 146.491718][ T5120] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.023574][ T8063] loop1: detected capacity change from 0 to 128 [ 147.029934][ T8063] EXT4-fs: Invalid want_extra_isize 2147483647 [ 147.115771][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.117803][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.140380][ T4666] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.613453][ T8088] loop0: detected capacity change from 0 to 4096 [ 147.828062][ T8093] loop3: detected capacity change from 0 to 32768 [ 147.834245][ T8093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1082 (8093) [ 147.837647][ T8093] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.839550][ T8093] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 147.841272][ T8093] BTRFS info (device loop3): turning on sync discard [ 147.842354][ T8093] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 147.844001][ T8093] BTRFS info (device loop3): use zstd compression, level 3 [ 147.845251][ T8093] BTRFS info (device loop3): turning on async discard [ 147.846454][ T8093] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 147.848351][ T8093] BTRFS info (device loop3): trying to use backup root at mount time [ 147.849616][ T8093] BTRFS info (device loop3): enabling auto defrag [ 147.850803][ T8093] BTRFS info (device loop3): using free space tree [ 148.033821][ T5646] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 148.036292][ T8093] BTRFS error (device loop3): failed to load root extent [ 148.037652][ T8093] BTRFS warning (device loop3): try to load backup roots slot 1 [ 148.039126][ T5646] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 148.042835][ T8093] BTRFS warning (device loop3): couldn't read tree root [ 148.044131][ T8093] BTRFS warning (device loop3): try to load backup roots slot 2 [ 148.045692][ T8093] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 148.048353][ T8093] BTRFS warning (device loop3): couldn't read tree root [ 148.049614][ T8093] BTRFS warning (device loop3): try to load backup roots slot 3 [ 148.237486][ T8093] BTRFS info (device loop3): enabling ssd optimizations [ 148.239306][ T8093] BTRFS info (device loop3): rebuilding free space tree [ 148.278680][ T8093] BTRFS info (device loop3): checking UUID tree [ 148.482591][ T8124] loop2: detected capacity change from 0 to 32768 [ 148.489616][ T8125] overlayfs: failed to resolve './file1/file0': -2 [ 148.610996][ T8124] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1085 (8124) [ 148.809721][ T4648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.181122][ T5120] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (5120) [ 149.505729][ T8151] loop4: detected capacity change from 0 to 32768 [ 149.521735][ T8151] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 149.687455][ T112] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.812159][ T5237] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.219504][ T112] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 150.221255][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.222726][ T112] usb 1-1: Product: syz [ 150.223383][ T112] usb 1-1: Manufacturer: syz [ 150.224311][ T112] usb 1-1: SerialNumber: syz [ 150.310246][ T8161] binder: 8160:8161 tried to acquire reference to desc 0, got 1 instead [ 150.339033][ T6995] binder: undelivered transaction 110, process died. [ 150.439075][ T8166] loop4: detected capacity change from 0 to 32768 [ 150.471119][ T8166] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 150.812922][ T4343] Bluetooth: hci0: unexpected cc 0x2029 length: 100 > 1 [ 151.091408][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 151.278424][ T8193] binder: 8192:8193 tried to acquire reference to desc 0, got 1 instead [ 151.288999][ T5231] binder: undelivered transaction 115, process died. [ 151.332340][ T8191] loop3: detected capacity change from 0 to 32768 [ 151.339988][ T8191] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.341865][ T8191] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 151.343350][ T8191] BTRFS info (device loop3): turning on sync discard [ 151.344484][ T8191] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 151.346072][ T8191] BTRFS info (device loop3): use zstd compression, level 3 [ 151.347422][ T8191] BTRFS info (device loop3): turning on async discard [ 151.348612][ T8191] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 151.350371][ T8191] BTRFS info (device loop3): trying to use backup root at mount time [ 151.351718][ T8191] BTRFS info (device loop3): enabling auto defrag [ 151.352908][ T8191] BTRFS info (device loop3): using free space tree [ 151.382451][ T237] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 151.385176][ T8191] BTRFS error (device loop3): failed to load root extent [ 151.386493][ T8191] BTRFS warning (device loop3): try to load backup roots slot 1 [ 151.388269][ T4873] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 151.390664][ T8191] BTRFS warning (device loop3): couldn't read tree root [ 151.392183][ T8191] BTRFS warning (device loop3): try to load backup roots slot 2 [ 151.393864][ T8191] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 151.395873][ T8191] BTRFS warning (device loop3): couldn't read tree root [ 151.397082][ T8191] BTRFS warning (device loop3): try to load backup roots slot 3 [ 151.405540][ T8191] BTRFS info (device loop3): enabling ssd optimizations [ 151.407330][ T8191] BTRFS info (device loop3): rebuilding free space tree [ 151.412061][ T8191] BTRFS info (device loop3): checking UUID tree [ 151.446993][ T8219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.449959][ T8219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.110234][ T4648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.520595][ T8235] loop4: detected capacity change from 0 to 32768 [ 152.523078][ T8235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1122 (8235) [ 152.547903][ T8235] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.549939][ T8235] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 152.551557][ T8235] BTRFS info (device loop4): turning on sync discard [ 152.552762][ T8235] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 152.554343][ T8235] BTRFS info (device loop4): use zstd compression, level 3 [ 152.555661][ T8235] BTRFS info (device loop4): turning on async discard [ 152.556905][ T8235] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 152.559033][ T8235] BTRFS info (device loop4): trying to use backup root at mount time [ 152.560526][ T8235] BTRFS info (device loop4): enabling auto defrag [ 152.561695][ T8235] BTRFS info (device loop4): using free space tree [ 152.662954][ T8248] binder: 8246:8248 tried to acquire reference to desc 0, got 1 instead [ 152.694135][ T6995] binder: undelivered transaction 120, process died. [ 152.747608][ T4406] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 152.750426][ T8235] BTRFS error (device loop4): failed to load root extent [ 152.751841][ T8235] BTRFS warning (device loop4): try to load backup roots slot 1 [ 152.753590][ T6810] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 152.756056][ T8235] BTRFS warning (device loop4): couldn't read tree root [ 152.757459][ T8235] BTRFS warning (device loop4): try to load backup roots slot 2 [ 152.759689][ T8235] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 152.761741][ T8235] BTRFS warning (device loop4): couldn't read tree root [ 152.762995][ T8235] BTRFS warning (device loop4): try to load backup roots slot 3 [ 153.015413][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 153.017923][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 153.020852][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 153.024134][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 153.030974][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 153.039485][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 153.043312][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 153.050975][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 153.053683][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 153.055866][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 153.057980][ T112] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 153.060221][ T112] lan78xx: probe of 1-1:1.0 failed with error -71 [ 153.074950][ T112] usb 1-1: USB disconnect, device number 8 [ 153.247808][ T8235] BTRFS info (device loop4): enabling ssd optimizations [ 153.249452][ T8235] BTRFS info (device loop4): rebuilding free space tree [ 153.349587][ T8235] BTRFS info (device loop4): checking UUID tree [ 153.770830][ T4666] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.792006][ T8279] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 153.868720][ T8279] CIFS: Attempting to mount \\127.0.0.1\share [ 153.870323][ T8279] CIFS: VFS: No username specified [ 154.025268][ T8283] loop1: detected capacity change from 0 to 32768 [ 154.031359][ T8283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1132 (8283) [ 154.034701][ T8283] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.036642][ T8283] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 154.038309][ T8283] BTRFS info (device loop1): turning on sync discard [ 154.039425][ T8283] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.040962][ T8283] BTRFS info (device loop1): use zstd compression, level 3 [ 154.042175][ T8283] BTRFS info (device loop1): turning on async discard [ 154.043520][ T8283] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 154.045339][ T8283] BTRFS info (device loop1): trying to use backup root at mount time [ 154.046708][ T8283] BTRFS info (device loop1): enabling auto defrag [ 154.047848][ T8283] BTRFS info (device loop1): using free space tree [ 154.173544][ T39] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 154.176222][ T8283] BTRFS error (device loop1): failed to load root extent [ 154.177831][ T8283] BTRFS warning (device loop1): try to load backup roots slot 1 [ 154.180687][ T6197] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 154.183345][ T8283] BTRFS warning (device loop1): couldn't read tree root [ 154.184634][ T8283] BTRFS warning (device loop1): try to load backup roots slot 2 [ 154.186191][ T8283] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 154.188264][ T8283] BTRFS warning (device loop1): couldn't read tree root [ 154.189484][ T8283] BTRFS warning (device loop1): try to load backup roots slot 3 [ 154.242483][ T8283] BTRFS info (device loop1): enabling ssd optimizations [ 154.244646][ T8283] BTRFS info (device loop1): rebuilding free space tree [ 154.252727][ T8283] BTRFS info (device loop1): checking UUID tree [ 154.883607][ T8323] siw: device registration error -23 [ 154.889671][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 154.958247][ T8323] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.276909][ T5251] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.382260][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1138'. [ 155.422827][ T8334] jffs2: notice: (8334) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.473973][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.475897][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.506228][ T8333] loop3: detected capacity change from 0 to 32768 [ 155.508357][ T8333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1140 (8333) [ 155.511577][ T8333] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.513358][ T8333] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 155.515012][ T8333] BTRFS info (device loop3): turning on sync discard [ 155.516213][ T8333] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 155.517912][ T8333] BTRFS info (device loop3): use zstd compression, level 3 [ 155.519099][ T8333] BTRFS info (device loop3): turning on async discard [ 155.520204][ T8333] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.521858][ T8333] BTRFS info (device loop3): trying to use backup root at mount time [ 155.523186][ T8333] BTRFS info (device loop3): enabling auto defrag [ 155.524288][ T8333] BTRFS info (device loop3): using free space tree [ 155.633205][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'. [ 155.636101][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'. [ 155.678671][ T6197] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 155.681903][ T8333] BTRFS error (device loop3): failed to load root extent [ 155.683232][ T8333] BTRFS warning (device loop3): try to load backup roots slot 1 [ 155.684772][ T6197] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 155.688196][ T8333] BTRFS warning (device loop3): couldn't read tree root [ 155.689240][ T8333] BTRFS warning (device loop3): try to load backup roots slot 2 [ 155.690664][ T8333] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 155.692515][ T8333] BTRFS warning (device loop3): couldn't read tree root [ 155.693728][ T8333] BTRFS warning (device loop3): try to load backup roots slot 3 [ 155.700921][ T8333] BTRFS info (device loop3): enabling ssd optimizations [ 155.702598][ T8333] BTRFS info (device loop3): rebuilding free space tree [ 155.706028][ T8333] BTRFS info (device loop3): checking UUID tree [ 156.224995][ T8374] loop1: detected capacity change from 0 to 32768 [ 156.227032][ T8374] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1148 (8374) [ 156.276993][ T4648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.620525][ T5237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5237) [ 156.671863][ T8380] jffs2: notice: (8380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.698810][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'. [ 156.847360][ T8397] loop4: detected capacity change from 0 to 2048 [ 156.939267][ T8401] siw: device registration error -23 [ 156.946734][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 157.065094][ T8402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 157.469817][ T8405] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.535728][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.539011][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.612552][ T8414] jffs2: notice: (8414) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 157.652624][ T8421] jffs2: notice: (8421) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 157.716492][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1166'. [ 157.838699][ T8433] loop3: detected capacity change from 0 to 32768 [ 157.859115][ T8433] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.861076][ T8433] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 157.862737][ T8433] BTRFS info (device loop3): turning on sync discard [ 157.863886][ T8433] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 157.865561][ T8433] BTRFS info (device loop3): use zstd compression, level 3 [ 157.866693][ T8433] BTRFS info (device loop3): turning on async discard [ 157.867802][ T8433] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 157.869548][ T8433] BTRFS info (device loop3): trying to use backup root at mount time [ 157.870827][ T8433] BTRFS info (device loop3): enabling auto defrag [ 157.871925][ T8433] BTRFS info (device loop3): using free space tree [ 157.878508][ T4873] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 157.880869][ T8433] BTRFS error (device loop3): failed to load root extent [ 157.882169][ T8433] BTRFS warning (device loop3): try to load backup roots slot 1 [ 157.883631][ T4406] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 157.886082][ T8433] BTRFS warning (device loop3): couldn't read tree root [ 157.887198][ T8433] BTRFS warning (device loop3): try to load backup roots slot 2 [ 157.888853][ T8433] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 157.890800][ T8433] BTRFS warning (device loop3): couldn't read tree root [ 157.891836][ T8433] BTRFS warning (device loop3): try to load backup roots slot 3 [ 157.894907][ T8433] BTRFS info (device loop3): enabling ssd optimizations [ 157.896309][ T8433] BTRFS info (device loop3): rebuilding free space tree [ 157.900966][ T8433] BTRFS info (device loop3): checking UUID tree [ 158.479969][ T8460] loop4: detected capacity change from 0 to 2048 [ 158.498625][ T8464] jffs2: notice: (8464) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.510403][ T8466] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.588099][ T8473] jffs2: notice: (8473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.626368][ T4648] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.943198][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 158.998895][ T8478] xt_TPROXY: Can be used only with -p tcp or -p udp [ 159.237265][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 159.312258][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.314269][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.432768][ T8494] jffs2: notice: (8494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 159.561648][ T8500] loop1: detected capacity change from 0 to 2048 [ 159.567003][ T8501] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.627577][ T5238] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.809811][ T5238] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.811557][ T5238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.813094][ T5238] usb 1-1: Product: syz [ 159.813828][ T5238] usb 1-1: Manufacturer: syz [ 159.814613][ T5238] usb 1-1: SerialNumber: syz [ 159.844237][ T8505] jffs2: notice: (8505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 160.276184][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'. [ 160.449307][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 160.640048][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 160.838961][ T8527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 161.092436][ T8531] jffs2: notice: (8531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.131508][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.133477][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.191059][ T8537] jffs2: notice: (8537) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.266402][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1202'. [ 161.323387][ T8547] loop4: detected capacity change from 0 to 2048 [ 161.332202][ T8548] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.460702][ T8558] jffs2: notice: (8558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.505607][ T8561] input: syz1 as /devices/virtual/input/input2 [ 161.662277][ T8565] jffs2: notice: (8565) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.888657][ T8572] siw: device registration error -23 [ 161.894099][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 161.970930][ T8572] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.389372][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1214'. [ 162.413394][ T8578] loop2: detected capacity change from 0 to 2048 [ 162.439676][ T8579] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.511472][ T8587] jffs2: notice: (8587) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.582785][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 162.585363][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 162.591860][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 162.592000][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.595449][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.599673][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 162.604122][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 162.606453][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 162.608486][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 162.610679][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 162.615141][ T8596] jffs2: notice: (8596) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.617383][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 162.620565][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 162.622217][ T5238] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 162.657929][ T5238] lan78xx: probe of 1-1:1.0 failed with error -71 [ 162.663960][ T5238] usb 1-1: USB disconnect, device number 9 [ 163.268999][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1227'. [ 163.452773][ T8613] loop0: detected capacity change from 0 to 2048 [ 163.474561][ T8617] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.479221][ T8618] jffs2: notice: (8618) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.580912][ T8627] siw: device registration error -23 [ 163.584622][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 163.643408][ T8627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.829069][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.837327][ T4357] Bluetooth: hci0: command 0x0406 tx timeout [ 163.838503][ T4357] Bluetooth: hci1: command 0x0406 tx timeout [ 163.839623][ T4357] Bluetooth: hci3: command 0x0406 tx timeout [ 163.844690][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.107711][ T5238] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.432014][ T5238] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 164.433819][ T5238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.435295][ T5238] usb 1-1: Product: syz [ 164.435955][ T5238] usb 1-1: Manufacturer: syz [ 164.436816][ T5238] usb 1-1: SerialNumber: syz [ 164.613071][ T8657] ------------[ cut here ]------------ [ 164.614090][ T8657] kernel BUG at include/linux/scatterlist.h:163! [ 164.615241][ T8657] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 164.616502][ T8657] Modules linked in: [ 164.617156][ T8657] CPU: 1 PID: 8657 Comm: syz.1.1247 Not tainted syzkaller #0 [ 164.618405][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 164.620085][ T8657] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 164.621395][ T8657] pc : sg_init_one+0x1b4/0x1c8 [ 164.622197][ T8657] lr : sg_init_one+0x1b4/0x1c8 [ 164.623005][ T8657] sp : ffff800021397750 [ 164.623738][ T8657] x29: ffff800021397750 x28: ffff0000c9f95000 x27: dfff800000000000 [ 164.624476][ T8655] loop2: detected capacity change from 0 to 32768 [ 164.625126][ T8657] x26: ffff0000d3f83a0e x25: ffff700004272f00 x24: 1ffff00004272f14 [ 164.626883][ T8655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1246 (8655) [ 164.627508][ T8657] x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010 [ 164.627541][ T8657] x20: ffff8000213978a0 x19: 0000000000000000 x18: 0000000000000000 [ 164.632085][ T8657] x17: 0000000000000000 x16: ffff800011b90080 x15: 0000000000000000 [ 164.633219][ T8657] x14: 0000000000000003 x13: 1ffff00004272f15 x12: 0000000000080000 [ 164.634429][ T8657] x11: 0000000000001f78 x10: ffff800025e9a000 x9 : ffff80000a910304 [ 164.635649][ T8657] x8 : 0000000000001f79 x7 : 0000000000000000 x6 : 000000000000003f [ 164.636886][ T8657] x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010 [ 164.638217][ T8657] x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000 [ 164.639627][ T8657] Call trace: [ 164.640224][ T8657] sg_init_one+0x1b4/0x1c8 [ 164.640989][ T8657] software_key_eds_op+0x410/0x938 [ 164.641816][ T8657] asymmetric_key_eds_op+0x108/0x128 [ 164.642673][ T8657] keyctl_pkey_e_d_s+0x1c8/0x3a0 [ 164.643477][ T8657] __arm64_sys_keyctl+0x66c/0x8e0 [ 164.644319][ T8657] invoke_syscall+0x98/0x290 [ 164.645118][ T8657] el0_svc_common+0x13c/0x258 [ 164.645972][ T8657] do_el0_svc+0x5c/0x134 [ 164.646726][ T8657] el0_svc+0x58/0x128 [ 164.647414][ T8657] el0t_64_sync_handler+0x84/0xf0 [ 164.648280][ T8657] el0t_64_sync+0x18c/0x190 [ 164.649082][ T8657] Code: aa1503e0 977f91c6 17ffffec 976e8a31 (d4210000) [ 164.650271][ T8657] ---[ end trace 0000000000000000 ]--- [ 164.889563][ T8657] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 164.890732][ T8657] SMP: stopping secondary CPUs [ 164.891583][ T8657] Kernel Offset: disabled [ 164.892330][ T8657] CPU features: 0x0a0000,000f0097,a65bfea7 [ 164.893320][ T8657] Memory Limit: none [ 165.119556][ T8657] Rebooting in 86400 seconds..