last executing test programs: 1m24.906164755s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) 42.534099242s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) 42.186976499s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 41.667253151s ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xa18402, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0x20cf01) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 37.328965755s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x1c, 0x28, 0x9, 0x0, 0x0, {0x6, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="58de5d25"}]}, 0x1c}}, 0x0) 36.983297106s ago: executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044325, &(0x7f0000000000)) 28.796386021s ago: executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) stat(&(0x7f0000000500)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x6, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009885f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016aff2fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4dbcacea29d4554d2d95ed4444e9bcbd6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ee7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed80c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722009dbe1232bcf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d9780100efdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02c6e1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204060042ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa35e548ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bd62c5a5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68ab763601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 27.696573994s ago: executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1405, 0x1}, 0x10}}, 0x0) 27.475649987s ago: executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 27.309146417s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = dup2(r0, r0) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) 27.099708839s ago: executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 26.333384354s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 8.923594166s ago: executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000f40)={'syz0\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x14) 3.435720469s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x301}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/22, 0x16}], 0x1) 3.214194005s ago: executing program 0: r0 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x10000}, 0x1c) getpeername$packet(r0, 0x0, &(0x7f0000004240)) 3.081334524s ago: executing program 0: syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x140, &(0x7f0000000340)="$eJzs2r9Kw1AUBvAzCEpHR6dAJQqa/1pXHcXN3SHU3DR4Y0oiSPsC4iQoXAdfQvAJfALJ6KZLB18icturplEhk9fh+y394LTpyblwp2PlWeqxwiLaHF4fTpbzLDV6wU6feSykmX0iMmQoq+rWpm9ePutlRfYPX9Br9W322V2PxcElS3jk624JAAAAAAAAAAAAAAAAAAAAAABaMjsqdAYivWAJj7xatRiNT0LOo7wgWtLUoV6moXa4iAl+J+cTzNU35Fh2ZUrEXi7r7vzvb1RYGwj+2pyvc5YOnWI0tpI0jKM4OvX9oOduue6270yf5TSfaN6rnqisHtzaOpn9dCQ7M2v7Zs9t9s3U+S+sJOLqvPlvX+ePgICA8BFaXp//3/T+mxDRYtB9lPef3c/4sSr+xTj1vj4A/OY9AAD//3cgO3s=") open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.623234249s ago: executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000003c0)=0x3) 2.446631645s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 2.328866895s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xdd49, 0xfffff000, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r3, 0x0, 0x2, 0x296c, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18360000020000000000000000ae40b5"], &(0x7f00000002c0)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x6, 0xfffffffd, 0xd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r0, r4], &(0x7f0000000a40)=[{0x0, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x9, 0x1}, {0x4, 0x1, 0xf, 0x3}, {0x2, 0x3, 0xe, 0xc}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000c900f2ff850000002d00000095", @ANYRESOCT=r10, @ANYRESOCT=r3, @ANYRES64=r5, @ANYRES8=r1, @ANYRES8=r9, @ANYRES16=r1, @ANYRES16=r7, @ANYRES8, @ANYRES8=r1, @ANYRES32=r4, @ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mballoc_alloc\x00', r13}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f0000000100)={'veth1_to_bridge\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) 2.21292612s ago: executing program 5: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munlock(&(0x7f0000006000/0x9000)=nil, 0x9000) mlock2(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000f40), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0xc4c85512, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 'syz0\x00'}) 2.154653058s ago: executing program 4: r0 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x10000}, 0x1c) getpeername$packet(r0, 0x0, &(0x7f0000004240)) 1.897954886s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xdd49, 0xfffff000, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r3, 0x0, 0x2, 0x296c, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18360000020000000000000000ae40b5"], &(0x7f00000002c0)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x6, 0xfffffffd, 0xd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r0, r4], &(0x7f0000000a40)=[{0x0, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x9, 0x1}, {0x4, 0x1, 0xf, 0x3}, {0x2, 0x3, 0xe, 0xc}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000c900f2ff850000002d00000095", @ANYRESOCT=r10, @ANYRESOCT=r3, @ANYRES64=r5, @ANYRES8=r1, @ANYRES8=r9, @ANYRES16=r1, @ANYRES16=r7, @ANYRES8, @ANYRES8=r1, @ANYRES32=r4, @ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mballoc_alloc\x00', r13}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f0000000100)={'veth1_to_bridge\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) 1.837269226s ago: executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0984124, &(0x7f0000000180)) 1.592230269s ago: executing program 5: syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x140, &(0x7f0000000340)="$eJzs2r9Kw1AUBvAzCEpHR6dAJQqa/1pXHcXN3SHU3DR4Y0oiSPsC4iQoXAdfQvAJfALJ6KZLB18icturplEhk9fh+y394LTpyblwp2PlWeqxwiLaHF4fTpbzLDV6wU6feSykmX0iMmQoq+rWpm9ePutlRfYPX9Br9W322V2PxcElS3jk624JAAAAAAAAAAAAAAAAAAAAAABaMjsqdAYivWAJj7xatRiNT0LOo7wgWtLUoV6moXa4iAl+J+cTzNU35Fh2ZUrEXi7r7vzvb1RYGwj+2pyvc5YOnWI0tpI0jKM4OvX9oOduue6270yf5TSfaN6rnqisHtzaOpn9dCQ7M2v7Zs9t9s3U+S+sJOLqvPlvX+ePgICA8BFaXp//3/T+mxDRYtB9lPef3c/4sSr+xTj1vj4A/OY9AAD//3cgO3s=") open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.43340901s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004a008d2a00000000000000000a0000"], 0x24}}, 0x0) 1.369948125s ago: executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000f40)={'syz0\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) tkill(r1, 0x14) 1.232540557s ago: executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) sendmmsg$inet6(r0, &(0x7f0000003200)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000080)="cc", 0x1}], 0x1}}], 0x1, 0x40) 1.110902972s ago: executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) 1.076158695s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) 799.462263ms ago: executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/packet\x00') read$msr(r0, &(0x7f0000000180)=""/126, 0x7e) 791.627725ms ago: executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 580.247511ms ago: executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) sendto$inet(r0, 0x0, 0x0, 0x24000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 549.734974ms ago: executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x403, 0x17, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_lifetime={0x4, 0x3}]}, 0xb8}}, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xc0742, 0x47) r1 = fanotify_init(0x200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dfa90000005f7819800008000d00b22e7b1c716a1101ee8ff8e76cad7f3f087f00d06a14f89698c46ef40164f188560ae4131b548d31e0cc2648183fef9132b1282ed3072b4bc8bad1f16923b9825c976aa682e13ec7423bc57ff842ddb94e34da833eddfe29fffe47df70cb74913b977a8ee8d2cbe6cba00cf0048ed9102f87435c504fcce623e42644f2c1b8be3d4e702d2ab33e9de44a39dd88872d602a194149ce7798b4729da10f9337476bd0923d8dce2110179d41d40019b27cb553b673ef1c33", @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x3800}, 0x0) fanotify_mark(r1, 0x80, 0x48001014, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x2}) getresgid(&(0x7f00000000c0), 0x0, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) open(0x0, 0x8040, 0x88) fanotify_mark(r1, 0x20, 0x8000010, r3, &(0x7f0000000100)='./bus\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@mcast1, @in=@dev}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xfffffffffffffff2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 510.94079ms ago: executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @private=0xa010102}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000000), 0x1, 0x4d9, &(0x7f0000000240)="$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") r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001b40)={&(0x7f00000014c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000019c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xae}]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x4, [@multicast2, @rand_addr]}, @noop, @timestamp_prespec={0x44, 0x4, 0x6b}]}}}], 0x70}, 0x40) 285.469159ms ago: executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"/3245], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000004c00)={{r4, 0x0, 0x1000, 0x3, 0x7f, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x3, 0xcc}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000005c00)) r6 = creat(&(0x7f0000007f80)='./bus\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x48, 0x30, 0x305, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4, 0x9}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000001300), 0x4) ioctl$int_in(r10, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r10, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x2200c851, &(0x7f0000001340)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmmsg(r10, &(0x7f0000003540)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001400)=""/223, 0xdf}, {&(0x7f0000001500)=""/81, 0x51}, {&(0x7f0000001580)=""/186, 0xba}, {&(0x7f0000001640)=""/85, 0x55}], 0x4}, 0x6}, {{&(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001780)=""/93, 0x5d}], 0x1, &(0x7f0000001840)=""/178, 0xb2}, 0x1}, {{&(0x7f0000001900)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/209, 0xd1}, {&(0x7f0000002a80)=""/174, 0xae}, {&(0x7f0000002b40)=""/240, 0xf0}, {&(0x7f0000002c40)=""/36, 0x24}], 0x5, &(0x7f0000002d00)=""/123, 0x7b}, 0x6}, {{&(0x7f0000002d80)=@rc, 0x80, &(0x7f0000003400)=[{&(0x7f0000002e00)=""/186, 0xba}, {&(0x7f0000002ec0)=""/139, 0x8b}, {&(0x7f0000002f80)=""/39, 0x27}, {&(0x7f0000002fc0)=""/65, 0x41}, {&(0x7f0000003040)=""/119, 0x77}, {&(0x7f00000030c0)=""/254, 0xfe}, {&(0x7f00000031c0)=""/107, 0x6b}, {&(0x7f0000003240)=""/251, 0xfb}, {&(0x7f0000003340)=""/158, 0x9e}], 0x9, &(0x7f00000034c0)=""/97, 0x61}}], 0x4, 0x200, &(0x7f0000003640)={0x0, 0x3938700}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003840)={0x11, 0xc, &(0x7f0000004680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2c}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7db}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000036c0)='syzkaller\x00', 0x8, 0x9, &(0x7f0000003700)=""/9, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003740)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000003780)=[r6], &(0x7f00000037c0)=[{0x5, 0x2, 0xa, 0x7}, {0x1, 0x8, 0x4, 0x6}, {0x5, 0x2, 0xf, 0xa}, {0x3, 0x2, 0x10, 0x2}, {0x2, 0x1, 0x0, 0x5}, {0x3, 0x4, 0xfffffffd, 0x9}], 0x10, 0x5f}, 0x90) sendto$inet6(r10, &(0x7f0000003900)="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", 0x184, 0x1, 0x0, 0x0) shutdown(r10, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000003c80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000000640)={r11, 0x9, 0x0, [0xfffffffffffffffd, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85b3, 0x0, 0x0, 0x0, 0x0, 0xd74e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xb062, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x5, 0x0, 0x800]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r9, 0x0, @inherit={0x58, 0x0}, @devid=r11}) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000380)={{r6}, r8, 0x6, @inherit={0x58, &(0x7f0000000140)={0x1, 0x2, 0x4, 0x1, {0x10, 0x89e1, 0x3, 0x7, 0x1}, [0x6, 0xfffffffeffffffff]}}, @devid=r11}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000000c0)={{r0}, r5, 0x0, @inherit={0x70, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x4, {0xc, 0x4, 0xfffffffffffffc00, 0x7, 0xdd}, [0x3ff, 0x1, 0xffffffff, 0x8, 0x0]}}, @devid=r11}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 0s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xdd49, 0xfffff000, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r3, 0x0, 0x2, 0x296c, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18360000020000000000000000ae40b5"], &(0x7f00000002c0)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x6, 0xfffffffd, 0xd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r0, r4], &(0x7f0000000a40)=[{0x0, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x9, 0x1}, {0x4, 0x1, 0xf, 0x3}, {0x2, 0x3, 0xe, 0xc}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000c900f2ff850000002d00000095", @ANYRESOCT=r10, @ANYRESOCT=r3, @ANYRES64=r5, @ANYRES8=r1, @ANYRES8=r9, @ANYRES16=r1, @ANYRES16=r7, @ANYRES8, @ANYRES8=r1, @ANYRES32=r4, @ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mballoc_alloc\x00', r13}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f0000000100)={'veth1_to_bridge\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) kernel console output (not intermixed with test programs): vice loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 204.956990][ T6581] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.128539][ T1092] hfsplus: b-tree write err: -5, ino 4 [ 205.171965][ T6596] loop4: detected capacity change from 0 to 512 [ 205.188909][ T6596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 205.222122][ T6596] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 205.331763][ T6599] loop2: detected capacity change from 0 to 512 [ 205.404988][ T6599] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 205.426564][ T5117] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 205.432950][ T6601] loop5: detected capacity change from 0 to 512 [ 205.532237][ T6601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.551839][ T6601] ext4 filesystem being mounted at /root/syzkaller-testdir2839246234/syzkaller.kKABU6/117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.935766][ T5111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.013722][ T6615] sctp: [Deprecated]: syz-executor.0 (pid 6615) Use of int in max_burst socket option. [ 206.013722][ T6615] Use struct sctp_assoc_value instead [ 206.147886][ T6617] sctp: [Deprecated]: syz-executor.1 (pid 6617) Use of int in max_burst socket option. [ 206.147886][ T6617] Use struct sctp_assoc_value instead [ 206.237281][ T6615] Zero length message leads to an empty skb [ 206.595713][ T6628] loop5: detected capacity change from 0 to 1024 [ 206.663011][ T6634] loop4: detected capacity change from 0 to 512 [ 207.041788][ T6634] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 207.145013][ T6634] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 207.272591][ T6634] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.336375][ T11] hfsplus: b-tree write err: -5, ino 4 [ 207.402006][ T6642] loop2: detected capacity change from 0 to 512 [ 207.429488][ T6642] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 207.648104][ T6005] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 207.888142][ T6652] No such timeout policy "syz1" [ 207.920749][ T6652] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 208.047340][ T6657] loop3: detected capacity change from 0 to 512 [ 208.086395][ T6657] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 208.274791][ T6661] sctp: [Deprecated]: syz-executor.4 (pid 6661) Use of int in max_burst socket option. [ 208.274791][ T6661] Use struct sctp_assoc_value instead [ 208.892359][ T6668] sctp: [Deprecated]: syz-executor.3 (pid 6668) Use of int in max_burst socket option. [ 208.892359][ T6668] Use struct sctp_assoc_value instead [ 209.143400][ T6630] loop0: detected capacity change from 0 to 40427 [ 209.252832][ T6630] F2FS-fs (loop0): invalid crc value [ 209.267125][ T6673] loop1: detected capacity change from 0 to 512 [ 209.296121][ T6673] EXT4-fs: Mount option(s) incompatible with ext3 [ 209.311290][ T6677] loop5: detected capacity change from 0 to 512 [ 209.334456][ T6630] F2FS-fs (loop0): Found nat_bits in checkpoint [ 209.365894][ T6677] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.5: corrupted in-inode xattr: invalid ea_ino [ 209.610388][ T6680] loop4: detected capacity change from 0 to 1024 [ 209.653278][ T6677] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz-executor.5: couldn't read orphan inode 12 (err -117) [ 209.759067][ T6677] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.194037][ T11] hfsplus: b-tree write err: -5, ino 4 [ 210.207456][ T6689] loop1: detected capacity change from 0 to 512 [ 210.277173][ T5111] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 210.318439][ T6689] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 210.574599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 210.648425][ T6696] loop5: detected capacity change from 0 to 256 [ 210.747404][ T6696] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 210.764430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 211.127180][ T6701] sctp: [Deprecated]: syz-executor.2 (pid 6701) Use of int in max_burst socket option. [ 211.127180][ T6701] Use struct sctp_assoc_value instead [ 211.237901][ T6703] sctp: [Deprecated]: syz-executor.1 (pid 6703) Use of int in max_burst socket option. [ 211.237901][ T6703] Use struct sctp_assoc_value instead [ 211.278512][ T5118] Bluetooth: hci4: command tx timeout [ 211.344970][ T6698] loop4: detected capacity change from 0 to 4096 [ 211.434892][ T6698] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 211.625800][ T6698] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 211.669800][ T6707] sctp: [Deprecated]: syz-executor.2 (pid 6707) Use of int in max_burst socket option. [ 211.669800][ T6707] Use struct sctp_assoc_value instead [ 211.886007][ T6005] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 211.929755][ T6005] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 212.006295][ T6715] sctp: [Deprecated]: syz-executor.5 (pid 6715) Use of int in max_burst socket option. [ 212.006295][ T6715] Use struct sctp_assoc_value instead [ 212.294460][ T6722] loop3: detected capacity change from 0 to 512 [ 212.408576][ T6722] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 212.433756][ T6722] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 212.492189][ T6722] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.574240][ T6732] No such timeout policy "syz1" [ 212.608440][ T6734] binder_alloc: 6733: binder_alloc_buf, no vma [ 212.624164][ T6732] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 212.717995][ T6727] loop0: detected capacity change from 0 to 512 [ 212.794588][ T5112] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 212.808235][ T6727] EXT4-fs: Mount option(s) incompatible with ext3 [ 212.906552][ T6740] loop1: detected capacity change from 0 to 256 [ 213.034270][ T6740] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 213.142656][ T6744] sctp: [Deprecated]: syz-executor.3 (pid 6744) Use of int in max_burst socket option. [ 213.142656][ T6744] Use struct sctp_assoc_value instead [ 213.740533][ T6756] loop0: detected capacity change from 0 to 512 [ 213.812276][ T6752] loop4: detected capacity change from 0 to 4096 [ 213.846866][ T6752] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 213.875888][ T6756] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 213.932097][ T6756] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 213.970397][ T6756] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.036229][ T6767] binder_alloc: 6766: binder_alloc_buf, no vma [ 214.064811][ T6752] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 214.307915][ T29] audit: type=1800 audit(1717293420.587:34): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 214.370818][ T6005] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 214.388874][ T6005] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 214.473771][ T5118] Bluetooth: hci1: command tx timeout [ 214.523719][ T5075] kernel write not supported for file [eventfd] (pid: 5075 comm: kworker/1:3) [ 214.666381][ T5113] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 214.750460][ T29] audit: type=1800 audit(1717293677.035:35): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1939 res=0 errno=0 [ 214.953300][ T5075] kernel write not supported for file [eventfd] (pid: 5075 comm: kworker/1:3) [ 216.100162][ T6811] loop1: detected capacity change from 0 to 128 [ 216.175695][ T29] audit: type=1800 audit(1717293934.466:36): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 216.241885][ T6811] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 216.301410][ T6811] sysv_count_free_blocks: cannot read free-list block [ 216.336119][ T5173] kernel write not supported for file [eventfd] (pid: 5173 comm: kworker/0:3) [ 216.382329][ T6820] loop5: detected capacity change from 0 to 512 [ 216.484169][ T6820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.508702][ T6811] sysv_count_free_inodes: unable to read inode table [ 216.515660][ T6825] sysv_count_free_blocks: cannot read free-list block [ 216.532347][ T6820] ext4 filesystem being mounted at /root/syzkaller-testdir2839246234/syzkaller.kKABU6/131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.535877][ T6825] sysv_count_free_inodes: unable to read inode table [ 216.603284][ T6831] loop3: detected capacity change from 0 to 512 [ 216.681994][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.721700][ T6831] ext4 filesystem being mounted at /root/syzkaller-testdir446297352/syzkaller.Acpb3f/104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.811345][ T5117] sysv_free_block: trying to free block not in datazone [ 216.853944][ T5117] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 217.272537][ T5111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.436246][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.851072][ T29] audit: type=1800 audit(1717293936.136:37): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 218.010933][ T6872] loop0: detected capacity change from 0 to 128 [ 218.023634][ T5175] kernel write not supported for file [eventfd] (pid: 5175 comm: kworker/0:4) [ 218.057535][ T6872] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 218.113414][ T5178] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 218.140972][ T6872] sysv_count_free_blocks: cannot read free-list block [ 218.318371][ T6872] sysv_count_free_inodes: unable to read inode table [ 218.333552][ T6880] sysv_count_free_blocks: cannot read free-list block [ 218.344463][ T5178] usb 6-1: Using ep0 maxpacket: 16 [ 218.357406][ T5178] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 218.412718][ T5178] usb 6-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 218.455934][ T5178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.462752][ T6880] sysv_count_free_inodes: unable to read inode table [ 218.470639][ T6885] loop2: detected capacity change from 0 to 512 [ 218.478977][ T5178] usb 6-1: Product: syz [ 218.511638][ T5178] usb 6-1: Manufacturer: syz [ 218.526525][ T5178] usb 6-1: SerialNumber: syz [ 218.576617][ T5178] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 218.595344][ T6885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.621337][ T6885] ext4 filesystem being mounted at /root/syzkaller-testdir1461596706/syzkaller.wuV6et/110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.639516][ T6890] loop4: detected capacity change from 0 to 512 [ 218.700150][ T5113] sysv_free_block: trying to free block not in datazone [ 218.723483][ T5113] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 218.771480][ T6890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.803740][ T6890] ext4 filesystem being mounted at /root/syzkaller-testdir187503823/syzkaller.i6PmS9/34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.846911][ T5075] usb 6-1: USB disconnect, device number 2 [ 218.911491][ T5114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.377536][ T6005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.749280][ T6922] loop5: detected capacity change from 0 to 128 [ 219.798365][ T6922] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 219.851686][ T6922] sysv_count_free_blocks: cannot read free-list block [ 219.948566][ T6932] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.059318][ T6922] sysv_count_free_inodes: unable to read inode table [ 220.093964][ T6933] sysv_count_free_blocks: cannot read free-list block [ 220.146585][ T6933] sysv_count_free_inodes: unable to read inode table [ 220.399143][ T5111] sysv_free_block: trying to free block not in datazone [ 220.454916][ T5111] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 220.523570][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 220.549798][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.569964][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.594998][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.613279][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.661696][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.677512][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.705114][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.721396][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.752838][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.784199][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 220.818250][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.842016][ T6960] loop1: detected capacity change from 0 to 512 [ 220.843303][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.889056][ T6962] loop2: detected capacity change from 0 to 128 [ 220.893340][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 220.908266][ T6963] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 220.943557][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.953995][ T6960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.955721][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 220.977744][ T6962] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 220.986673][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.020443][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.021631][ T6960] ext4 filesystem being mounted at /root/syzkaller-testdir905990592/syzkaller.oY8FiE/115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.029573][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.076675][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.087035][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.095804][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.096830][ T6968] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 221.108696][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.133238][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.140905][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.149552][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.149552][ T6962] loop2: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 221.157370][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.172022][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.197202][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.212276][ T6962] Buffer I/O error on dev loop2, logical block 8767744, async page read [ 221.232624][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.244343][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.244343][ T6962] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 221.266215][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.274591][ T6968] syz-executor.0 (6968) used greatest stack depth: 21312 bytes left [ 221.278836][ T6962] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 221.284714][ T6960] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 221.306716][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.313956][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.313956][ T6962] loop2: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 221.318780][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.339917][ T6962] Buffer I/O error on dev loop2, logical block 1157, async page read [ 221.347602][ T6960] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 221.353030][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.353030][ T6962] loop2: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 221.378133][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.390040][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.398460][ T6960] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 221.410356][ T6962] Buffer I/O error on dev loop2, logical block 3211264, async page read [ 221.420829][ T6960] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 221.424812][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 221.435866][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.451244][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.474647][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.474647][ T6962] loop2: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 221.489975][ T5075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.534861][ T6962] Buffer I/O error on dev loop2, logical block 8768635, async page read [ 221.550263][ T5075] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 221.569864][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.569864][ T6962] loop2: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 221.597512][ T6962] Buffer I/O error on dev loop2, logical block 13466417, async page read [ 221.613554][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.613554][ T6962] loop2: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 221.620548][ T5117] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 3: comm syz-executor.1: path /root/syzkaller-testdir905990592/syzkaller.oY8FiE/115/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 221.646148][ T6962] Buffer I/O error on dev loop2, logical block 209285, async page read [ 221.664739][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 221.674253][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 221.711407][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.711407][ T6962] loop2: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 221.746365][ T8] usb 6-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 221.761158][ T6962] Buffer I/O error on dev loop2, logical block 8767744, async page read [ 221.765612][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.789531][ T5117] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 12: comm syz-executor.1: path /root/syzkaller-testdir905990592/syzkaller.oY8FiE/115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 221.798207][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.798207][ T6962] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 221.824233][ T8] usb 6-1: Product: syz [ 221.842343][ T8] usb 6-1: Manufacturer: syz [ 221.857903][ T8] usb 6-1: SerialNumber: syz [ 221.871744][ T5117] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 13: comm syz-executor.1: path /root/syzkaller-testdir905990592/syzkaller.oY8FiE/115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 221.872320][ T6962] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 221.936625][ T8] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 221.952358][ T5117] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 14: comm syz-executor.1: path /root/syzkaller-testdir905990592/syzkaller.oY8FiE/115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 221.977826][ T6962] syz-executor.2: attempt to access beyond end of device [ 221.977826][ T6962] loop2: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 222.000068][ T6962] Buffer I/O error on dev loop2, logical block 1157, async page read [ 222.009261][ T5117] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 15: comm syz-executor.1: path /root/syzkaller-testdir905990592/syzkaller.oY8FiE/115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 222.063490][ T29] audit: type=1800 audit(1717293940.336:38): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="/" dev="loop2" ino=2 res=0 errno=0 [ 222.095444][ T6962] syz-executor.2 (6962) used greatest stack depth: 20960 bytes left [ 222.115760][ T5117] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 16: comm syz-executor.1: path /root/syzkaller-testdir905990592/syzkaller.oY8FiE/115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 222.172881][ T5114] sysv_free_block: trying to free block not in datazone [ 222.192540][ T779] usb 6-1: USB disconnect, device number 3 [ 222.204204][ T5114] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 222.673694][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 222.883300][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 222.904737][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 222.940114][ T8] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 222.973205][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.981465][ T8] usb 5-1: Product: syz [ 222.997260][ T8] usb 5-1: Manufacturer: syz [ 223.021774][ T8] usb 5-1: SerialNumber: syz [ 223.078547][ T8] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 223.089236][ T7004] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 223.221041][ T7005] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 223.330655][ T7009] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 223.355790][ T5180] usb 5-1: USB disconnect, device number 4 [ 223.476617][ T7003] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 223.927868][ T7024] Bluetooth: MGMT ver 1.22 [ 224.349492][ T7037] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 224.430607][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 224.747884][ T7045] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 224.833434][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 224.916983][ T7047] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 225.043307][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 225.052779][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 225.083998][ T7059] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 225.118489][ T8] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 225.151162][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.174763][ T8] usb 5-1: Product: syz [ 225.188744][ T8] usb 5-1: Manufacturer: syz [ 225.206101][ T7051] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 225.227601][ T8] usb 5-1: SerialNumber: syz [ 225.276334][ T8] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 225.625410][ T8] usb 5-1: USB disconnect, device number 5 [ 225.732630][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.316040][ T5075] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 226.543246][ T5075] usb 1-1: Using ep0 maxpacket: 16 [ 226.575467][ T5075] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 226.674423][ T5075] usb 1-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 226.688253][ T5075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.709554][ T5075] usb 1-1: Product: syz [ 226.720601][ T5075] usb 1-1: Manufacturer: syz [ 226.739676][ T5075] usb 1-1: SerialNumber: syz [ 226.795803][ T5075] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 227.075799][ T2753] usb 1-1: USB disconnect, device number 2 [ 227.533559][ T7091] validate_nla: 2 callbacks suppressed [ 227.533585][ T7091] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 227.675043][ T7091] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 228.016767][ T7098] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 228.155902][ T7100] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 228.321874][ T7101] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 228.414955][ T7107] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 228.531024][ T7108] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 228.616642][ T7111] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 229.054300][ T7118] loop5: detected capacity change from 0 to 256 [ 229.301363][ T7127] loop2: detected capacity change from 0 to 8 [ 229.372328][ T7127] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 229.479849][ T7127] process 'syz-executor.2' launched './file2' with NULL argv: empty string added [ 229.496312][ T7118] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 202) [ 229.529320][ T7118] FAT-fs (loop5): Filesystem has been set read-only [ 229.537032][ T7127] cramfs: Error -3 while decompressing! [ 229.548866][ T7127] cramfs: ffffffff94c32b62(26)->ffff88807feab000(4096) [ 229.571219][ T7127] cramfs: Error -3 while decompressing! [ 229.593852][ T7127] cramfs: ffffffff94c32b7c(16)->ffff88806ce30000(4096) [ 229.634515][ T7127] cramfs: Error -3 while decompressing! [ 229.671369][ T7127] cramfs: ffffffff94c32b62(26)->ffff88807feab000(4096) [ 229.719855][ T29] audit: type=1800 audit(1717293948.006:39): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 231.024569][ T7154] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 231.136858][ T7155] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 231.386944][ T7157] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.917892][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 231.918197][ T5124] Bluetooth: hci0: command 0x0406 tx timeout [ 231.920353][ T5124] Bluetooth: hci2: command 0x0406 tx timeout [ 231.920541][ T5124] Bluetooth: hci4: command 0x0406 tx timeout [ 231.921756][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 232.245812][ T7171] loop3: detected capacity change from 0 to 256 [ 232.497788][ T7171] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 202) [ 232.532449][ T7171] FAT-fs (loop3): Filesystem has been set read-only [ 232.841418][ T7176] loop0: detected capacity change from 0 to 2048 [ 232.936422][ T7176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.359259][ T5113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.429435][ T7207] bio_check_eod: 4 callbacks suppressed [ 234.429466][ T7207] syz-executor.3: attempt to access beyond end of device [ 234.429466][ T7207] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 234.533404][ T7207] (syz-executor.3,7207,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 234.547698][ T7210] loop4: detected capacity change from 0 to 256 [ 234.565265][ T7207] (syz-executor.3,7207,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 234.589978][ T7207] (syz-executor.3,7207,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 234.625913][ T7207] (syz-executor.3,7207,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 234.833137][ T7210] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 202) [ 234.841345][ T7210] FAT-fs (loop4): Filesystem has been set read-only [ 235.653164][ C1] hrtimer: interrupt took 129971 ns [ 235.699978][ T7224] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 236.090436][ T7227] netlink: 'syz-executor.5': attribute type 7 has an invalid length. [ 237.313543][ T7249] syz-executor.3: attempt to access beyond end of device [ 237.313543][ T7249] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 237.373508][ T7249] (syz-executor.3,7249,1):ocfs2_get_sector:1769 ERROR: status = -5 [ 237.402208][ T7249] (syz-executor.3,7249,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 237.440156][ T7249] (syz-executor.3,7249,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 237.465516][ T7249] (syz-executor.3,7249,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 237.563876][ T7252] loop5: detected capacity change from 0 to 512 [ 237.624660][ T7252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.677021][ T7253] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 237.718025][ T7252] ext4 filesystem being mounted at /root/syzkaller-testdir2839246234/syzkaller.kKABU6/158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.876874][ T7252] EXT4-fs: Cannot change journaled quota options when quota turned on [ 237.917376][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.035821][ T5111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.197598][ T29] audit: type=1800 audit(1717293957.486:40): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1945 res=0 errno=0 [ 239.371837][ T29] audit: type=1800 audit(1717293957.656:41): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 239.437058][ T5175] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 239.569858][ T7293] syz-executor.4: attempt to access beyond end of device [ 239.569858][ T7293] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 239.662547][ T7293] (syz-executor.4,7293,1):ocfs2_get_sector:1769 ERROR: status = -5 [ 239.666196][ T5175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.696797][ T7293] (syz-executor.4,7293,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 239.722074][ T5175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.744514][ T7293] (syz-executor.4,7293,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 239.761165][ T5175] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 239.784081][ T7293] (syz-executor.4,7293,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 239.821325][ T5175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.863395][ T5175] usb 4-1: config 0 descriptor?? [ 240.480314][ T5175] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 240.513514][ T5175] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 240.528894][ T5175] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 240.550471][ T5175] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 240.595819][ T5175] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 240.632251][ T5175] uclogic 0003:5543:0522.0002: No inputs registered, leaving [ 240.699303][ T5175] uclogic 0003:5543:0522.0002: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 240.788429][ T5175] usb 4-1: USB disconnect, device number 2 [ 241.125194][ T7315] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 241.749307][ T29] audit: type=1800 audit(1717293960.036:42): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 241.933497][ T5175] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 241.977566][ T29] audit: type=1800 audit(1717293960.266:43): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 242.128709][ T5175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.166448][ T5175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.205104][ T5175] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 242.226939][ T5175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.280728][ T5175] usb 5-1: config 0 descriptor?? [ 242.435419][ T7334] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 242.839571][ T5175] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 242.869517][ T5175] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 242.896595][ T5175] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 242.924488][ T5175] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 242.954277][ T5175] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 242.979659][ T5175] uclogic 0003:5543:0522.0003: No inputs registered, leaving [ 243.034897][ T5175] uclogic 0003:5543:0522.0003: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0 [ 243.094892][ T5175] usb 5-1: USB disconnect, device number 6 [ 243.101869][ T5117] EXT4-fs error: 10 callbacks suppressed [ 243.101892][ T5117] EXT4-fs error (device loop1): ext4_lookup:1850: inode #18: comm syz-executor.1: 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8' linked to parent dir [ 243.161606][ T5117] EXT4-fs error (device loop1): ext4_lookup:1850: inode #18: comm syz-executor.1: 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8' linked to parent dir [ 243.251346][ T29] audit: type=1400 audit(1717293961.536:44): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.856183][ T7361] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 243.887905][ T5178] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 243.998542][ T29] audit: type=1800 audit(1717293962.286:45): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1971 res=0 errno=0 [ 244.000275][ T3739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.106788][ T5178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.122947][ T5178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.172038][ T5178] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 244.182810][ T7371] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 244.223332][ T5178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.256542][ T5178] usb 4-1: config 0 descriptor?? [ 244.489565][ T3739] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.750059][ T5178] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 244.799134][ T5178] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 244.833660][ T5178] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 244.876442][ T5178] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 244.910827][ T5178] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 244.926901][ T3739] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.936688][ T5178] uclogic 0003:5543:0522.0004: No inputs registered, leaving [ 244.998213][ T5178] uclogic 0003:5543:0522.0004: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 245.034022][ T7379] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 245.069789][ T5178] usb 4-1: USB disconnect, device number 3 [ 245.250286][ T3739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.843276][ T3739] bridge_slave_1: left allmulticast mode [ 245.866488][ T3739] bridge_slave_1: left promiscuous mode [ 245.902274][ T3739] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.946266][ T3739] bridge_slave_0: left allmulticast mode [ 245.971541][ T3739] bridge_slave_0: left promiscuous mode [ 246.007628][ T3739] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.173619][ T5175] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 246.415383][ T5175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.443277][ T5175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.501666][ T5175] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 246.533216][ T5175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.577104][ T5175] usb 4-1: config 0 descriptor?? [ 246.959773][ T5134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.970180][ T5134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.979335][ T5134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.996221][ T5134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.020154][ T5134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 247.028275][ T5134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.092482][ T5175] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 247.109418][ T5175] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 247.128369][ T5175] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 247.137569][ T5175] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 247.151716][ T5175] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 247.173879][ T5175] uclogic 0003:5543:0522.0005: No inputs registered, leaving [ 247.194146][ T5175] uclogic 0003:5543:0522.0005: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 247.314690][ T3739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.368286][ T8] usb 4-1: USB disconnect, device number 4 [ 247.381110][ T3739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.411305][ T3739] bond0 (unregistering): Released all slaves [ 247.879145][ T29] audit: type=1800 audit(1717293966.166:46): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 248.325508][ T7426] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 248.377215][ T7431] 9pnet_fd: Insufficient options for proto=fd [ 249.077838][ T3739] hsr_slave_0: left promiscuous mode [ 249.110398][ T3739] hsr_slave_1: left promiscuous mode [ 249.116082][ T5115] Bluetooth: hci4: command tx timeout [ 249.145568][ T7451] loop2: detected capacity change from 0 to 64 [ 249.194030][ T3739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.233822][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.278705][ T3739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.305479][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.426457][ T3739] veth1_macvtap: left promiscuous mode [ 249.450632][ T3739] veth0_macvtap: left promiscuous mode [ 249.474512][ T3739] veth1_vlan: left promiscuous mode [ 249.489718][ T3739] veth0_vlan: left promiscuous mode [ 249.657314][ T7463] loop4: detected capacity change from 0 to 64 [ 251.030085][ T3739] team0 (unregistering): Port device team_slave_1 removed [ 251.088280][ T3739] team0 (unregistering): Port device team_slave_0 removed [ 251.208733][ T5115] Bluetooth: hci4: command tx timeout [ 252.304017][ T7496] loop4: detected capacity change from 0 to 64 [ 252.461717][ T7403] chnl_net:caif_netlink_parms(): no params data found [ 252.566830][ T5178] kernel read not supported for file /admmidi2 (pid: 5178 comm: kworker/1:4) [ 252.695627][ T7507] loop0: detected capacity change from 0 to 64 [ 253.273368][ T5115] Bluetooth: hci4: command tx timeout [ 253.318403][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.318626][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.318879][ T7403] bridge_slave_0: entered allmulticast mode [ 253.343207][ T7403] bridge_slave_0: entered promiscuous mode [ 253.348383][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.348605][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.348815][ T7403] bridge_slave_1: entered allmulticast mode [ 253.351558][ T7403] bridge_slave_1: entered promiscuous mode [ 253.801395][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 253.831499][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 253.849565][ T7403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.907495][ T7403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.939892][ T2753] kernel read not supported for file /admmidi2 (pid: 2753 comm: kworker/1:2) [ 254.343324][ T7403] team0: Port device team_slave_0 added [ 254.380626][ T7403] team0: Port device team_slave_1 added [ 254.603708][ T5181] kernel read not supported for file /admmidi2 (pid: 5181 comm: kworker/1:7) [ 254.716118][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.739992][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.836220][ T7403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.105170][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.133432][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.193002][ T7403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.231283][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.345981][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.358573][ T5115] Bluetooth: hci4: command tx timeout [ 255.790885][ T5178] kernel read not supported for file /admmidi2 (pid: 5178 comm: kworker/1:4) [ 256.291542][ T7403] hsr_slave_0: entered promiscuous mode [ 256.311249][ T7403] hsr_slave_1: entered promiscuous mode [ 256.336723][ T7403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.349352][ T7403] Cannot create hsr debugfs directory [ 256.629967][ T7610] loop0: detected capacity change from 0 to 64 [ 256.687142][ T5181] kernel read not supported for file /admmidi2 (pid: 5181 comm: kworker/1:7) [ 256.879804][ T7588] loop4: detected capacity change from 0 to 32768 [ 256.985492][ T7588] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7588) [ 257.136546][ T7588] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.174096][ T7588] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 257.210955][ T7588] BTRFS info (device loop4): using free-space-tree [ 258.295209][ T6005] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.511292][ T7403] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.548822][ T7403] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.577086][ T7661] loop2: detected capacity change from 0 to 4096 [ 258.638586][ T7403] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.715835][ T7403] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.735518][ T7663] loop3: detected capacity change from 0 to 4096 [ 259.236657][ T7673] overlayfs: upper fs does not support tmpfile. [ 259.345421][ T7673] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 259.468287][ T7678] loop0: detected capacity change from 0 to 512 [ 259.518129][ T7403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.538890][ T5114] ntfs3: loop2: failed to convert name for inode 1e. [ 259.567559][ T7678] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 259.657034][ T7403] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.681901][ T7678] EXT4-fs (loop0): 1 truncate cleaned up [ 259.722382][ T7678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.787049][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.795054][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.886749][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.894041][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.923491][ T7678] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz-executor.0: Siphash requires key [ 259.962508][ T7686] EXT4-fs warning (device loop0): dx_probe:843: inode #2: comm syz-executor.0: Hash code is SIPHASH, but hash not in dirent [ 260.074003][ T7686] EXT4-fs warning (device loop0): dx_probe:964: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 260.210070][ T5113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.688246][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.178281][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.608704][ T7710] loop5: detected capacity change from 0 to 4096 [ 261.620812][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.740191][ T7713] loop4: detected capacity change from 0 to 4096 [ 261.849430][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.242889][ T7713] overlayfs: upper fs does not support tmpfile. [ 262.290098][ T7713] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 262.352172][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.363604][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.391398][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.435300][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.457072][ T5134] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 262.481226][ T6005] ntfs3: loop4: failed to convert name for inode 1e. [ 262.491373][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.612683][ T12] bridge_slave_1: left allmulticast mode [ 262.622754][ T12] bridge_slave_1: left promiscuous mode [ 262.643454][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.706433][ T12] bridge_slave_0: left allmulticast mode [ 262.712154][ T12] bridge_slave_0: left promiscuous mode [ 262.729610][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.964060][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 263.173167][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 263.181788][ T8] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 263.212292][ T8] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 263.241884][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 263.267652][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.312298][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.336879][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 263.359243][ T8] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 263.369818][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.390168][ T8] usb 6-1: config 0 descriptor?? [ 263.453432][ T5173] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 263.643440][ T5173] usb 1-1: Using ep0 maxpacket: 32 [ 263.673365][ T5173] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 263.697490][ T5173] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 263.729133][ T5173] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 263.751343][ T8] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 263.763405][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.777845][ T5173] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.791868][ T8] usb 6-1: USB disconnect, device number 4 [ 263.801234][ T5173] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 263.821384][ T5173] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 263.848520][ T8] usblp0: removed [ 263.852919][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.886504][ T5173] usb 1-1: config 0 descriptor?? [ 263.922800][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.939348][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.955296][ T12] bond0 (unregistering): Released all slaves [ 264.177031][ T5173] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 264.207432][ T5173] usb 1-1: USB disconnect, device number 3 [ 264.225027][ T5173] usblp0: removed [ 264.279503][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 264.407935][ T7735] loop3: detected capacity change from 0 to 512 [ 264.425695][ T7735] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 264.469945][ T7735] EXT4-fs (loop3): 1 truncate cleaned up [ 264.483446][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 264.502339][ T7735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.543341][ T8] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 264.551731][ T8] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 264.569423][ T5134] Bluetooth: hci3: command tx timeout [ 264.575531][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 264.608031][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.676633][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 264.700324][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 264.703481][ T7735] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz-executor.3: Siphash requires key [ 264.740160][ T8] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 264.757055][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.778862][ T7738] EXT4-fs warning (device loop3): dx_probe:843: inode #2: comm syz-executor.3: Hash code is SIPHASH, but hash not in dirent [ 264.780645][ T8] usb 6-1: config 0 descriptor?? [ 264.813324][ T5173] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 264.849896][ T7738] EXT4-fs warning (device loop3): dx_probe:964: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 264.979384][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.003937][ T5173] usb 1-1: Using ep0 maxpacket: 32 [ 265.021210][ T5173] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 265.040646][ T5173] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 265.054370][ T5173] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 265.063608][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.073692][ T5173] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 265.083697][ T5173] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 265.096933][ T5173] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 265.108214][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.117492][ T8] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 265.142535][ T5173] usb 1-1: config 0 descriptor?? [ 265.160979][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.293119][ T12] hsr_slave_0: left promiscuous mode [ 265.303669][ T12] hsr_slave_1: left promiscuous mode [ 265.370955][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.379417][ T5173] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 265.392502][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.402579][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.414420][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.457837][ T12] veth1_macvtap: left promiscuous mode [ 265.463936][ T12] veth0_macvtap: left promiscuous mode [ 265.472167][ T12] veth1_vlan: left promiscuous mode [ 265.483289][ T12] veth0_vlan: left promiscuous mode [ 265.682699][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.689242][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.105091][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.129770][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.147547][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.175335][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.195387][ T5115] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 266.203053][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.531671][ T5181] usb 6-1: USB disconnect, device number 5 [ 266.566344][ T5181] usblp0: removed [ 266.634326][ T5115] Bluetooth: hci3: command tx timeout [ 266.827478][ T12] team0 (unregistering): Port device team_slave_1 removed [ 266.829746][ T779] usb 1-1: USB disconnect, device number 4 [ 266.854123][ T779] usblp1: removed [ 266.972972][ T7764] loop5: detected capacity change from 0 to 4096 [ 266.983006][ T12] team0 (unregistering): Port device team_slave_0 removed [ 268.313925][ T5115] Bluetooth: hci5: command tx timeout [ 268.323836][ T7774] loop3: detected capacity change from 0 to 4096 [ 268.651011][ T7774] overlayfs: upper fs does not support tmpfile. [ 268.672748][ T7774] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 268.713538][ T5115] Bluetooth: hci3: command tx timeout [ 268.792582][ T7720] chnl_net:caif_netlink_parms(): no params data found [ 268.849704][ T5112] ntfs3: loop3: failed to convert name for inode 1e. [ 268.961790][ T7779] loop5: detected capacity change from 0 to 512 [ 268.998501][ T7779] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 269.074191][ T7779] EXT4-fs (loop5): 1 truncate cleaned up [ 269.082502][ T7779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.141048][ T7779] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz-executor.5: Siphash requires key [ 269.157320][ T7779] EXT4-fs warning (device loop5): dx_probe:843: inode #2: comm syz-executor.5: Hash code is SIPHASH, but hash not in dirent [ 269.170605][ T7779] EXT4-fs warning (device loop5): dx_probe:964: inode #2: comm syz-executor.5: Corrupt directory, running e2fsck is recommended [ 269.256315][ T5111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.389404][ T7403] veth0_vlan: entered promiscuous mode [ 269.431374][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 269.455719][ T7787] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 269.622159][ T7403] veth1_vlan: entered promiscuous mode [ 269.751495][ T7790] Bluetooth: MGMT ver 1.22 [ 269.795209][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.842384][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.886278][ T7720] bridge_slave_0: entered allmulticast mode [ 269.910555][ T7720] bridge_slave_0: entered promiscuous mode [ 270.087300][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.112094][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.129884][ T7720] bridge_slave_1: entered allmulticast mode [ 270.151726][ T7720] bridge_slave_1: entered promiscuous mode [ 270.283257][ T5075] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 270.393444][ T5115] Bluetooth: hci5: command tx timeout [ 270.439371][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.493237][ T5075] usb 6-1: Using ep0 maxpacket: 32 [ 270.502137][ T5075] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 270.514292][ T5075] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 270.528801][ T7720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.559723][ T5075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 270.590278][ T7720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.599611][ T5075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.613753][ T29] audit: type=1800 audit(1717293988.906:47): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 270.618419][ T5075] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 270.663839][ T5075] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 270.694888][ T5075] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 270.715900][ T5075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.758328][ T5075] usb 6-1: config 0 descriptor?? [ 270.783664][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.801955][ T5115] Bluetooth: hci3: command tx timeout [ 270.892536][ T5134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.904314][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.913163][ T5134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.914234][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 270.930353][ T5134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.941054][ T5134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.949543][ T5134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.006680][ T5075] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 271.032012][ T5075] usb 6-1: USB disconnect, device number 6 [ 271.047905][ T5075] usblp0: removed [ 271.058108][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.151759][ T7720] team0: Port device team_slave_0 added [ 271.266804][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.339765][ T7808] loop0: detected capacity change from 0 to 4096 [ 271.341175][ T7720] team0: Port device team_slave_1 added [ 271.503681][ T7808] overlayfs: upper fs does not support tmpfile. [ 271.524116][ T7808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 271.548117][ T7403] veth0_macvtap: entered promiscuous mode [ 271.605410][ T5113] ntfs3: loop0: failed to convert name for inode 1e. [ 271.633698][ T5075] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 271.644601][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.651569][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.678729][ T7720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.771566][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.781172][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.809320][ T7720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.824282][ T7403] veth1_macvtap: entered promiscuous mode [ 271.853637][ T5075] usb 6-1: Using ep0 maxpacket: 32 [ 271.864152][ T5075] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 271.872543][ T5075] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 271.884019][ T5075] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 271.893486][ T5075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.919031][ T5075] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 271.929282][ T5075] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 271.943022][ T5075] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 271.967864][ T5075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.984203][ T5075] usb 6-1: config 0 descriptor?? [ 272.094398][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.109917][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.117409][ T7753] bridge_slave_0: entered allmulticast mode [ 272.127709][ T7753] bridge_slave_0: entered promiscuous mode [ 272.174920][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.182334][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.191915][ T7753] bridge_slave_1: entered allmulticast mode [ 272.214331][ T7753] bridge_slave_1: entered promiscuous mode [ 272.255388][ T5075] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 272.482421][ T5134] Bluetooth: hci5: command tx timeout [ 272.491614][ T7720] hsr_slave_0: entered promiscuous mode [ 272.506290][ T7720] hsr_slave_1: entered promiscuous mode [ 272.523386][ T7720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.547205][ T7720] Cannot create hsr debugfs directory [ 272.578931][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.633832][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.648558][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.667794][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.681866][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.703102][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.733104][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.763144][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.792752][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.858929][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.912446][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.929609][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.943460][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.954230][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.966363][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.983203][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.002467][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.013610][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.035199][ T5134] Bluetooth: hci2: command tx timeout [ 273.051746][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.099947][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.169023][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.330991][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.378604][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.395479][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.403848][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.415735][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.425776][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.436596][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.442356][ T7753] team0: Port device team_slave_0 added [ 273.477024][ T7753] team0: Port device team_slave_1 added [ 273.497994][ T7403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.506982][ T7403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.515980][ T7403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.526837][ T7403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.570419][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.669828][ T9] usb 6-1: USB disconnect, device number 7 [ 273.695459][ T9] usblp0: removed [ 273.782731][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 273.792665][ T7818] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 273.868253][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.905965][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.913016][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.941161][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.977938][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.001112][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.028158][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.559239][ T5134] Bluetooth: hci5: command tx timeout [ 274.593787][ T7753] hsr_slave_0: entered promiscuous mode [ 274.601371][ T7753] hsr_slave_1: entered promiscuous mode [ 274.615788][ T7753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.623563][ T7753] Cannot create hsr debugfs directory [ 275.114382][ T5134] Bluetooth: hci2: command tx timeout [ 275.151245][ T7801] chnl_net:caif_netlink_parms(): no params data found [ 275.186130][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.196202][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.298602][ T12] bridge_slave_1: left allmulticast mode [ 275.304761][ T12] bridge_slave_1: left promiscuous mode [ 275.313787][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.334684][ T12] bridge_slave_0: left allmulticast mode [ 275.340619][ T12] bridge_slave_0: left promiscuous mode [ 275.349227][ T5178] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 275.357218][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.374478][ T12] bridge_slave_1: left allmulticast mode [ 275.382795][ T12] bridge_slave_1: left promiscuous mode [ 275.388988][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.402805][ T12] bridge_slave_0: left allmulticast mode [ 275.411565][ T12] bridge_slave_0: left promiscuous mode [ 275.419107][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.514863][ T5134] Bluetooth: hci1: command tx timeout [ 275.543383][ T5178] usb 6-1: Using ep0 maxpacket: 32 [ 275.553767][ T5178] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 275.562351][ T5178] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 275.578503][ T5178] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 275.604002][ T5178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 275.614079][ T5178] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 275.624143][ T5178] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 275.637444][ T5178] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 275.646628][ T5178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.663935][ T5178] usb 6-1: config 0 descriptor?? [ 275.951301][ T5178] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 275.979178][ T5178] usb 6-1: USB disconnect, device number 8 [ 276.011366][ T5178] usblp0: removed [ 276.563267][ T5178] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 276.783214][ T5178] usb 6-1: Using ep0 maxpacket: 32 [ 276.796425][ T5178] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 276.813137][ T5178] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 276.821859][ T5178] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 276.843208][ T5178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 276.863225][ T5178] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 276.872962][ T5178] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.897603][ T5178] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 276.907087][ T5178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.921721][ T5178] usb 6-1: config 0 descriptor?? [ 277.141743][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.157814][ T5178] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 277.180915][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.201157][ T12] bond0 (unregistering): Released all slaves [ 277.209297][ T5134] Bluetooth: hci2: command tx timeout [ 277.451749][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.469489][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.483710][ T12] bond0 (unregistering): Released all slaves [ 277.594022][ T5134] Bluetooth: hci1: command tx timeout [ 277.999070][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.010659][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.227626][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.235405][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.245014][ T7801] bridge_slave_0: entered allmulticast mode [ 278.256234][ T7801] bridge_slave_0: entered promiscuous mode [ 278.419426][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.427766][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.435405][ T7801] bridge_slave_1: entered allmulticast mode [ 278.446700][ T7801] bridge_slave_1: entered promiscuous mode [ 278.589541][ T5075] usb 6-1: USB disconnect, device number 9 [ 278.612589][ T5075] usblp0: removed [ 278.708261][ T29] audit: type=1326 audit(1717293996.996:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ef907cee9 code=0x0 [ 278.894272][ T7801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.994669][ T7801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.275025][ T5134] Bluetooth: hci2: command tx timeout [ 279.303904][ T7801] team0: Port device team_slave_0 added [ 279.348435][ T7815] chnl_net:caif_netlink_parms(): no params data found [ 279.465644][ T7801] team0: Port device team_slave_1 added [ 279.683873][ T5134] Bluetooth: hci1: command tx timeout [ 279.825114][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.832138][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.874589][ T7801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.910855][ T12] hsr_slave_0: left promiscuous mode [ 279.930490][ T12] hsr_slave_1: left promiscuous mode [ 279.949949][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.958401][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.975456][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.002450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.041911][ T12] hsr_slave_0: left promiscuous mode [ 280.070006][ T12] hsr_slave_1: left promiscuous mode [ 280.091606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.106085][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.124246][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.140018][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.278436][ T12] veth1_macvtap: left promiscuous mode [ 280.290166][ T12] veth0_macvtap: left promiscuous mode [ 280.309764][ T12] veth1_vlan: left promiscuous mode [ 280.321739][ T12] veth0_vlan: left promiscuous mode [ 280.336397][ T12] veth1_macvtap: left promiscuous mode [ 280.347049][ T12] veth0_macvtap: left promiscuous mode [ 280.352967][ T12] veth1_vlan: left promiscuous mode [ 280.370831][ T12] veth0_vlan: left promiscuous mode [ 281.764240][ T5134] Bluetooth: hci1: command tx timeout [ 281.958741][ T7877] loop5: detected capacity change from 0 to 16 [ 281.981970][ T7877] erofs: (device loop5): mounted with root inode @ nid 36. [ 282.792466][ T12] team0 (unregistering): Port device team_slave_1 removed [ 282.935803][ T12] team0 (unregistering): Port device team_slave_0 removed [ 282.987744][ T7879] loop1: detected capacity change from 0 to 32768 [ 283.149033][ T7879] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 283.463373][ T7879] XFS (loop1): Ending clean mount [ 283.617727][ T7879] XFS (loop1): Quotacheck needed: Please wait. [ 283.807498][ T7879] XFS (loop1): Quotacheck: Done. [ 284.039005][ T7403] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 284.070839][ T7901] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [SRP.] [ 285.291393][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.424257][ T12] team0 (unregistering): Port device team_slave_0 removed [ 286.684344][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.691432][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.733229][ T7801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.251159][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.269966][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.289363][ T7815] bridge_slave_0: entered allmulticast mode [ 287.305623][ T7815] bridge_slave_0: entered promiscuous mode [ 287.479965][ T7801] hsr_slave_0: entered promiscuous mode [ 287.503945][ T7801] hsr_slave_1: entered promiscuous mode [ 287.515247][ T7801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.522859][ T7801] Cannot create hsr debugfs directory [ 287.544306][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.551634][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.591268][ T7815] bridge_slave_1: entered allmulticast mode [ 287.600904][ T7815] bridge_slave_1: entered promiscuous mode [ 287.634956][ T7930] xt_TCPMSS: Only works on TCP SYN packets [ 287.862239][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.900618][ T7720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.130733][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.336994][ T7720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 288.390714][ T7720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.481420][ T7815] team0: Port device team_slave_0 added [ 288.509628][ T7815] team0: Port device team_slave_1 added [ 288.579597][ T7720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 288.645185][ T7950] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 288.903026][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.924862][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.974272][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.007909][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.024044][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.055154][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.090611][ T7953] loop5: detected capacity change from 0 to 2048 [ 289.179160][ T7953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.289373][ T7960] loop1: detected capacity change from 0 to 16 [ 289.319369][ T7960] erofs: (device loop1): mounted with root inode @ nid 36. [ 289.337642][ T7753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.362087][ T7753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.500930][ T7753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.617206][ T7815] hsr_slave_0: entered promiscuous mode [ 289.625505][ T7815] hsr_slave_1: entered promiscuous mode [ 289.632777][ T7815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.641609][ T7815] Cannot create hsr debugfs directory [ 289.687325][ T7753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.731685][ T7965] xt_TCPMSS: Only works on TCP SYN packets [ 289.845527][ T35] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 289.867959][ T35] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 289.885328][ T35] EXT4-fs (loop5): This should not happen!! Data will be lost [ 289.885328][ T35] [ 289.896964][ T35] EXT4-fs (loop5): Total free blocks count 0 [ 289.907089][ T35] EXT4-fs (loop5): Free/Dirty block details [ 289.915453][ T35] EXT4-fs (loop5): free_blocks=2415919104 [ 289.936407][ T35] EXT4-fs (loop5): dirty_blocks=16 [ 289.941607][ T35] EXT4-fs (loop5): Block reservation details [ 289.961638][ T35] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 289.969914][ T7967] loop1: detected capacity change from 0 to 256 [ 289.992400][ T5111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.288813][ T7972] loop5: detected capacity change from 0 to 256 [ 290.586811][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.770372][ T7981] loop1: detected capacity change from 0 to 256 [ 290.809070][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.970032][ T7984] loop5: detected capacity change from 0 to 256 [ 291.011123][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.161910][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.250229][ T7989] loop1: detected capacity change from 0 to 256 [ 291.600354][ T7801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.702230][ T7994] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 291.768871][ T7801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.870599][ T7801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.885635][ T7801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.975820][ T7720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.098695][ T12] bridge_slave_1: left allmulticast mode [ 292.115371][ T12] bridge_slave_1: left promiscuous mode [ 292.121353][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.165927][ T12] bridge_slave_0: left allmulticast mode [ 292.173012][ T12] bridge_slave_0: left promiscuous mode [ 292.193410][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.855750][ T8006] xt_TCPMSS: Only works on TCP SYN packets [ 292.896840][ T7996] loop1: detected capacity change from 0 to 32768 [ 292.998504][ T7996] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.144486][ T7996] XFS (loop1): Ending clean mount [ 293.166836][ T7996] XFS (loop1): Quotacheck needed: Please wait. [ 293.265700][ T7996] XFS (loop1): Quotacheck: Done. [ 293.328083][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.383691][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.406210][ T7403] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.424157][ T12] bond0 (unregistering): Released all slaves [ 293.499446][ T8024] loop5: detected capacity change from 0 to 256 [ 293.564352][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.737347][ T7720] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.121015][ T8029] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 294.226740][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.234145][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.370711][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.378103][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.441356][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.516768][ T12] hsr_slave_0: left promiscuous mode [ 294.526054][ T12] hsr_slave_1: left promiscuous mode [ 294.542944][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.551899][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.564188][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.571604][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.625039][ T12] veth1_macvtap: left promiscuous mode [ 294.631412][ T12] veth0_macvtap: left promiscuous mode [ 294.638256][ T12] veth1_vlan: left promiscuous mode [ 294.643792][ T12] veth0_vlan: left promiscuous mode [ 296.182030][ T8046] loop5: detected capacity change from 0 to 32768 [ 296.202629][ T8046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (8046) [ 296.262194][ T8046] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.283856][ T8046] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 296.292867][ T8046] BTRFS info (device loop5): using free-space-tree [ 296.344420][ T12] team0 (unregistering): Port device team_slave_1 removed [ 296.448763][ T12] team0 (unregistering): Port device team_slave_0 removed [ 296.611926][ T8054] loop1: detected capacity change from 0 to 32768 [ 296.677303][ T8054] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.925320][ T8054] XFS (loop1): Ending clean mount [ 296.951490][ T8054] XFS (loop1): Quotacheck needed: Please wait. [ 297.115768][ T8054] XFS (loop1): Quotacheck: Done. [ 297.250482][ T7403] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.278008][ T5111] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.038544][ T8081] loop5: detected capacity change from 0 to 256 [ 298.310362][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.317694][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.357185][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.364627][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.740580][ T7720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.950940][ T7815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.074371][ T7815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.121102][ T7815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.199716][ T8079] loop1: detected capacity change from 0 to 32768 [ 299.259608][ T7815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.271472][ T8079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8079) [ 299.345589][ T8079] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.389463][ T8079] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 299.399566][ T8079] BTRFS info (device loop1): using free-space-tree [ 299.491449][ T7801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.710631][ T7801] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.885441][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.892731][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.991324][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.998669][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.136609][ T7720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.221775][ T7403] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 300.449535][ T7753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.888370][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.991101][ T7720] veth0_vlan: entered promiscuous mode [ 301.070694][ T7720] veth1_vlan: entered promiscuous mode [ 301.261961][ T7815] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.391164][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.398536][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.441450][ T8117] loop5: detected capacity change from 0 to 32768 [ 301.510520][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.517877][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.522128][ T8117] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 301.651362][ T7720] veth0_macvtap: entered promiscuous mode [ 301.722701][ T7720] veth1_macvtap: entered promiscuous mode [ 301.802131][ T8117] XFS (loop5): Ending clean mount [ 301.872473][ T8117] XFS (loop5): Quotacheck needed: Please wait. [ 301.955287][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.971597][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.995421][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.009510][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.018842][ T8117] XFS (loop5): Quotacheck: Done. [ 302.023786][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.092056][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.108719][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.120319][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.130879][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.161507][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.197013][ T5111] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 302.300838][ T7720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.335586][ T7720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.364934][ T7720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.391651][ T7720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.761375][ T8148] loop1: detected capacity change from 0 to 256 [ 302.822011][ T7801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.079088][ T5178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.098423][ T5178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.133856][ T7753] veth0_vlan: entered promiscuous mode [ 303.249872][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.268816][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.286941][ T7753] veth1_vlan: entered promiscuous mode [ 303.341037][ T7815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.659387][ T7801] veth0_vlan: entered promiscuous mode [ 303.792047][ T7753] veth0_macvtap: entered promiscuous mode [ 303.823622][ T7801] veth1_vlan: entered promiscuous mode [ 303.892315][ T7753] veth1_macvtap: entered promiscuous mode [ 304.140504][ T7815] veth0_vlan: entered promiscuous mode [ 304.291095][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.333822][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.353110][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.373110][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.392973][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.424650][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.446614][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.506019][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.543738][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.557817][ T8172] mmap: syz-executor.2 (8172) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 304.570705][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.570742][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.570770][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.570799][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.584471][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.687839][ T7815] veth1_vlan: entered promiscuous mode [ 304.793677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 304.822621][ T7753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.543522][ T8179] loop1: detected capacity change from 0 to 2048 [ 308.444340][ T8179] hpfs: Bad version 183,140. Mount readonly to go around [ 308.453828][ T8179] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 308.566545][ T7753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.632459][ T7753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.673128][ T7753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.724953][ T7801] veth0_macvtap: entered promiscuous mode [ 308.869586][ T7801] veth1_macvtap: entered promiscuous mode [ 309.308086][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.334921][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.356239][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.403239][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.427110][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.445594][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.467929][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.505290][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.542762][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.571409][ T7815] veth0_macvtap: entered promiscuous mode [ 309.669411][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.701041][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.725525][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.761126][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.795575][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.819272][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.862540][ T7801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.897415][ T7801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.945309][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.004672][ T7801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.026341][ T7801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.058104][ T7801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.087128][ T7801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.106937][ T8195] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 310.173416][ T7815] veth1_macvtap: entered promiscuous mode [ 310.400429][ T3737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.425926][ T3737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.683838][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.713324][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.733123][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.755145][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.771387][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.782469][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.794768][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.805389][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.824876][ T5115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.843203][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.854308][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.861405][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.872533][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.879777][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.911047][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.922188][ T5115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 310.932244][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.163436][ T1092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.194712][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.322312][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.352887][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.188721][ T8219] loop1: detected capacity change from 0 to 2048 [ 314.680176][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.690042][ T5134] Bluetooth: hci3: command tx timeout [ 314.744498][ T8219] hpfs: Bad version 183,140. Mount readonly to go around [ 314.751697][ T8219] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 314.794478][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.879125][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.938338][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.977837][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.988519][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.999185][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.017556][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.187531][ T7815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.204114][ T7815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.217762][ T7815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.241140][ T7815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.357154][ T1092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.459092][ T8180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.536487][ T8180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.707508][ T1092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.980333][ T1092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.053446][ T5180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.067123][ T5180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.413325][ T5180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.421227][ T5180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.713960][ T5134] Bluetooth: hci3: command tx timeout [ 317.063007][ T8255] loop5: detected capacity change from 0 to 128 [ 317.190700][ T5241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.203582][ T5241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.214111][ T1092] bridge_slave_1: left allmulticast mode [ 317.219802][ T1092] bridge_slave_1: left promiscuous mode [ 317.231473][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.306468][ T1092] bridge_slave_0: left allmulticast mode [ 317.312208][ T1092] bridge_slave_0: left promiscuous mode [ 317.329562][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.566126][ T8281] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 318.664235][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.686243][ T8285] loop1: detected capacity change from 0 to 128 [ 318.727486][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.757769][ T1092] bond0 (unregistering): Released all slaves [ 318.796424][ T5134] Bluetooth: hci3: command tx timeout [ 319.079593][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.079760][ T29] audit: type=1804 audit(1717294037.366:49): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2839246234/syzkaller.kKABU6/281/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 319.156793][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.255742][ T29] audit: type=1804 audit(1717294037.406:50): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2839246234/syzkaller.kKABU6/281/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 319.458785][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 320.496790][ T8324] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 320.586782][ T1092] hsr_slave_0: left promiscuous mode [ 320.626280][ T1092] hsr_slave_1: left promiscuous mode [ 320.686841][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.725225][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.754655][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.762158][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.873551][ T5134] Bluetooth: hci3: command tx timeout [ 320.902989][ T1092] veth1_macvtap: left promiscuous mode [ 320.921845][ T1092] veth0_macvtap: left promiscuous mode [ 320.951042][ T1092] veth1_vlan: left promiscuous mode [ 320.988085][ T1092] veth0_vlan: left promiscuous mode [ 321.827977][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.841982][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.852002][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.070436][ T8352] loop5: detected capacity change from 0 to 2048 [ 325.851523][ T5115] Bluetooth: hci2: command 0x1009 tx timeout [ 325.912494][ T5134] Bluetooth: hci2: Opcode 0x1009 failed: -110 [ 325.983018][ T5134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.104411][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.112168][ T5134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.121361][ T5134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.130096][ T8352] hpfs: Bad version 183,140. Mount readonly to go around [ 326.130215][ T5134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 326.137280][ T8352] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 326.145031][ T5134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.238690][ T29] audit: type=1804 audit(1717294044.526:51): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2485935233/syzkaller.Ivuq4l/11/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 326.360344][ T29] audit: type=1804 audit(1717294044.616:52): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2485935233/syzkaller.Ivuq4l/11/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 326.855818][ T29] audit: type=1804 audit(1717294045.146:53): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1896342065/syzkaller.1tvm5m/4/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 326.909745][ T29] audit: type=1804 audit(1717294045.146:54): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1896342065/syzkaller.1tvm5m/4/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 327.091563][ T29] audit: type=1804 audit(1717294045.376:55): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2839246234/syzkaller.kKABU6/285/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 327.125469][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.125675][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.193958][ T29] audit: type=1804 audit(1717294045.426:56): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2839246234/syzkaller.kKABU6/285/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 327.539521][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 327.629324][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 328.234256][ T5134] Bluetooth: hci2: command tx timeout [ 328.849230][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.896382][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.925788][ T8206] bridge_slave_0: entered allmulticast mode [ 328.948006][ T8206] bridge_slave_0: entered promiscuous mode [ 329.154002][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.175707][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.197023][ T8206] bridge_slave_1: entered allmulticast mode [ 329.231640][ T8206] bridge_slave_1: entered promiscuous mode [ 329.474559][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.619602][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.950165][ T8206] team0: Port device team_slave_0 added [ 329.987899][ T8206] team0: Port device team_slave_1 added [ 330.170631][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.184944][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.268488][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.317808][ T5134] Bluetooth: hci2: command tx timeout [ 330.335464][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.363289][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.418759][ T8390] loop1: detected capacity change from 0 to 256 [ 330.441155][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.492966][ T8390] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 330.578407][ T29] audit: type=1804 audit(1717294048.866:57): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2485935233/syzkaller.Ivuq4l/14/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 330.713282][ T29] audit: type=1804 audit(1717294048.906:58): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2485935233/syzkaller.Ivuq4l/14/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 331.232179][ T8376] loop5: detected capacity change from 0 to 32768 [ 331.295994][ T29] audit: type=1804 audit(1717294049.586:59): pid=8396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1896342065/syzkaller.1tvm5m/8/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 331.384985][ T8206] hsr_slave_0: entered promiscuous mode [ 331.397854][ T29] audit: type=1804 audit(1717294049.626:60): pid=8396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1896342065/syzkaller.1tvm5m/8/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 331.439087][ T8206] hsr_slave_1: entered promiscuous mode [ 331.474446][ T29] audit: type=1804 audit(1717294049.746:61): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1967706248/syzkaller.UQCSd8/74/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 331.505075][ T8206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.531725][ T8206] Cannot create hsr debugfs directory [ 331.563261][ T29] audit: type=1804 audit(1717294049.756:62): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1967706248/syzkaller.UQCSd8/74/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 331.839908][ T1092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.083624][ T8346] chnl_net:caif_netlink_parms(): no params data found [ 332.114888][ T29] audit: type=1804 audit(1717294050.406:63): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2485935233/syzkaller.Ivuq4l/16/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 332.182541][ T29] audit: type=1804 audit(1717294050.446:64): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2485935233/syzkaller.Ivuq4l/16/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 332.320260][ T1092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.404551][ T5134] Bluetooth: hci2: command tx timeout [ 332.631089][ T1092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.997457][ T1092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.258040][ T8346] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.265944][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.274046][ T8346] bridge_slave_0: entered allmulticast mode [ 333.283469][ T8346] bridge_slave_0: entered promiscuous mode [ 333.295353][ T8432] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.307256][ T8432] (unnamed net_device) (uninitialized): option ad_select: invalid value (78) [ 333.387292][ T8346] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.407113][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.429507][ T8346] bridge_slave_1: entered allmulticast mode [ 333.459619][ T8346] bridge_slave_1: entered promiscuous mode [ 333.922902][ T8346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.987270][ T29] audit: type=1804 audit(1717294052.276:65): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2485935233/syzkaller.Ivuq4l/18/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 334.068704][ T8346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.103670][ T29] audit: type=1804 audit(1717294052.276:66): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2485935233/syzkaller.Ivuq4l/18/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 334.208923][ T29] audit: type=1804 audit(1717294052.426:67): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1967706248/syzkaller.UQCSd8/79/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 334.252802][ T29] audit: type=1804 audit(1717294052.466:68): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1967706248/syzkaller.UQCSd8/79/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 334.427838][ T1092] bridge_slave_1: left allmulticast mode [ 334.448498][ T1092] bridge_slave_1: left promiscuous mode [ 334.474866][ T5134] Bluetooth: hci2: command tx timeout [ 334.482652][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.531591][ T1092] bridge_slave_0: left allmulticast mode [ 334.554058][ T1092] bridge_slave_0: left promiscuous mode [ 334.560225][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.410279][ T8448] loop5: detected capacity change from 0 to 32768 [ 335.724539][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.755654][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.798719][ T1092] bond0 (unregistering): Released all slaves [ 336.268740][ T8346] team0: Port device team_slave_0 added [ 336.312652][ T8346] team0: Port device team_slave_1 added [ 336.466253][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 336.466284][ T29] audit: type=1800 audit(1717294054.756:71): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=1959 res=0 errno=0 [ 336.812340][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.826413][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.891791][ T8346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.059824][ T8473] loop1: detected capacity change from 0 to 256 [ 337.162824][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.182666][ T8476] loop0: detected capacity change from 0 to 24 [ 337.188875][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.220208][ T8476] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 337.239292][ T8477] input: syz0 as /devices/virtual/input/input17 [ 337.241756][ T8346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.246089][ T8473] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 337.320804][ T8476] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 337.444547][ T8476] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 337.577742][ T1092] hsr_slave_0: left promiscuous mode [ 337.619017][ T1092] hsr_slave_1: left promiscuous mode [ 337.694658][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.723468][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.764964][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.783785][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.908261][ T8485] loop5: detected capacity change from 0 to 1024 [ 338.014718][ T1092] veth1_macvtap: left promiscuous mode [ 338.026297][ T1092] veth0_macvtap: left promiscuous mode [ 338.030850][ T8487] loop1: detected capacity change from 0 to 2048 [ 338.052030][ T1092] veth1_vlan: left promiscuous mode [ 338.083681][ T1092] veth0_vlan: left promiscuous mode [ 338.109788][ T8487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.154635][ T8487] ext4 filesystem being mounted at /root/syzkaller-testdir1967706248/syzkaller.UQCSd8/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.212443][ T3737] hfsplus: b-tree write err: -5, ino 4 [ 338.464864][ T7403] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.914228][ T29] audit: type=1804 audit(1717294057.196:72): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2839246234/syzkaller.kKABU6/294/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 338.985309][ T29] audit: type=1804 audit(1717294057.236:73): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2839246234/syzkaller.kKABU6/294/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 340.180088][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 340.289214][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 341.637888][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.647993][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.705852][ T8501] bridge_slave_1: left allmulticast mode [ 341.724140][ T8501] bridge_slave_1: left promiscuous mode [ 341.731609][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.776388][ T8501] bridge_slave_0: left allmulticast mode [ 341.782199][ T8501] bridge_slave_0: left promiscuous mode [ 341.793926][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.086379][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.099985][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.280267][ T8510] loop5: detected capacity change from 0 to 1024 [ 342.425124][ T8504] bridge_slave_1: left allmulticast mode [ 342.430859][ T8504] bridge_slave_1: left promiscuous mode [ 342.470895][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.540371][ T8504] bridge_slave_0: left allmulticast mode [ 342.568065][ T8504] bridge_slave_0: left promiscuous mode [ 342.593733][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.627612][ T12] hfsplus: b-tree write err: -5, ino 4 [ 342.955410][ T8346] hsr_slave_0: entered promiscuous mode [ 342.992954][ T8346] hsr_slave_1: entered promiscuous mode [ 343.022451][ T8521] loop0: detected capacity change from 0 to 24 [ 343.033350][ T8346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.041200][ T8346] Cannot create hsr debugfs directory [ 343.058370][ T8522] loop5: detected capacity change from 0 to 24 [ 343.066534][ T8521] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 343.076033][ T8522] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 343.103509][ T8522] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 343.104572][ T8521] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 343.186989][ T8521] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 343.194983][ T8522] VFS: Lookup of 'file0' in romfs loop5 would have caused loop [ 343.372179][ T8206] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.527331][ T8206] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.613851][ T8206] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 343.662628][ T8206] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 344.468830][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.476969][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.537299][ T8554] bridge_slave_1: left allmulticast mode [ 344.553558][ T8556] loop5: detected capacity change from 0 to 24 [ 344.553602][ T8554] bridge_slave_1: left promiscuous mode [ 344.593656][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.615722][ T8556] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 344.646857][ T8556] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 344.647688][ T8554] bridge_slave_0: left allmulticast mode [ 344.691291][ T8554] bridge_slave_0: left promiscuous mode [ 344.693944][ T8561] input: syz0 as /devices/virtual/input/input18 [ 344.709787][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.727373][ T8556] VFS: Lookup of 'file0' in romfs loop5 would have caused loop [ 345.612235][ T8206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.681259][ T8580] loop1: detected capacity change from 0 to 512 [ 345.698549][ T8580] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 346.018628][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 346.031541][ C1] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 346.040020][ C1] CPU: 1 PID: 8585 Comm: syz-executor.5 Not tainted 6.10.0-rc1-syzkaller-00296-g89be4025b0db #0 [ 346.050497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 346.060609][ C1] RIP: 0010:skb_segment+0x19da/0x42b0 [ 346.066037][ C1] Code: 00 00 fe e9 bc ea ff ff e8 83 e9 ce f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 05 67 2b f9 48 8b 84 24 d0 [ 346.085689][ C1] RSP: 0018:ffffc90000a17878 EFLAGS: 00010212 [ 346.091786][ C1] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88c023e2 [ 346.099785][ C1] RDX: 000000000000000e RSI: ffffffff88c034bd RDI: 0000000000000070 [ 346.107792][ C1] RBP: ffffc90000a17a28 R08: 0000000000000005 R09: 000000000000ffff [ 346.115786][ C1] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff888025546240 [ 346.123780][ C1] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 346.131784][ C1] FS: 00007f3ef9e3d6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 346.140842][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.147483][ C1] CR2: 0000000020002c80 CR3: 000000004085c000 CR4: 0000000000350ef0 [ 346.155485][ C1] Call Trace: [ 346.158782][ C1] [ 346.161636][ C1] ? show_regs+0x8c/0xa0 [ 346.165943][ C1] ? die_addr+0x4f/0xd0 [ 346.170152][ C1] ? exc_general_protection+0x155/0x230 [ 346.175773][ C1] ? asm_exc_general_protection+0x26/0x30 [ 346.181540][ C1] ? skb_segment+0x8e2/0x42b0 [ 346.186440][ C1] ? skb_segment+0x19bd/0x42b0 [ 346.191247][ C1] ? skb_segment+0x19da/0x42b0 [ 346.196053][ C1] ? skb_segment+0x19bd/0x42b0 [ 346.200847][ C1] ? hlock_class+0x4e/0x130 [ 346.205396][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.211073][ C1] ? mark_lock+0xb5/0xc60 [ 346.215436][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.221115][ C1] ? hlock_class+0x4e/0x130 [ 346.225674][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.231355][ C1] ? mark_lock+0xb5/0xc60 [ 346.235740][ C1] ? __pfx_skb_segment+0x10/0x10 [ 346.240718][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 346.246042][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.251807][ C1] ? rcu_is_watching+0x12/0xc0 [ 346.256610][ C1] tcp_gso_segment+0x35b/0x1850 [ 346.261496][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 346.266297][ C1] ? irqentry_exit+0x3b/0x90 [ 346.270908][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.276584][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.281832][ C1] tcp6_gso_segment+0x1f9/0x12e0 [ 346.286813][ C1] ipv6_gso_segment+0x7b5/0x1c70 [ 346.291793][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 346.297193][ C1] ? mark_lock+0xb5/0xc60 [ 346.301641][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.307320][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 346.313261][ C1] skb_mac_gso_segment+0x2a9/0x650 [ 346.318433][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 346.323927][ C1] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 346.329608][ C1] __skb_gso_segment+0x333/0x710 [ 346.334587][ C1] ? netif_skb_features+0x3ac/0xcc0 [ 346.339828][ C1] validate_xmit_skb+0x33a/0xee0 [ 346.344808][ C1] validate_xmit_skb_list+0xc1/0x130 [ 346.350131][ C1] sch_direct_xmit+0x38f/0xc20 [ 346.354935][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 346.359986][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 346.365038][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 346.370359][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 346.375425][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.380857][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.386551][ C1] __dev_queue_xmit+0x2afe/0x4130 [ 346.391630][ C1] ? __pfx_mark_lock+0x10/0x10 [ 346.396433][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 346.401840][ C1] ? lock_acquire+0x1b1/0x560 [ 346.406546][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.412220][ C1] ? find_held_lock+0x2d/0x110 [ 346.417030][ C1] ? ip6_finish_output+0x3f9/0x1300 [ 346.422270][ C1] ? __pfx_lock_release+0x10/0x10 [ 346.427340][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.433011][ C1] ? mark_held_locks+0x9f/0xe0 [ 346.437812][ C1] ip6_finish_output2+0x1100/0x18b0 [ 346.443067][ C1] ip6_finish_output+0x3f9/0x1300 [ 346.448150][ C1] ip6_output+0x1f8/0x540 [ 346.452525][ C1] ? __pfx_ip6_output+0x10/0x10 [ 346.457429][ C1] ip6_xmit+0x125f/0x2030 [ 346.461796][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 346.467033][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 346.471750][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.477427][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 346.482481][ C1] ? __pfx_inet6_csk_route_socket+0x10/0x10 [ 346.488497][ C1] ? ip6_protocol_deliver_rcu+0x188/0x1530 [ 346.494351][ C1] ? ipv6_rcv+0x265/0x680 [ 346.498716][ C1] ? __netif_receive_skb_one_core+0x12e/0x1e0 [ 346.504844][ C1] ? __netif_receive_skb+0x1d/0x160 [ 346.510089][ C1] ? process_backlog+0x133/0x760 [ 346.515080][ C1] inet6_csk_xmit+0x3ce/0x740 [ 346.519792][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 346.525029][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.530705][ C1] ? csum_ipv6_magic+0x296/0x310 [ 346.535697][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 346.540925][ C1] __tcp_transmit_skb+0x1adb/0x3dc0 [ 346.546180][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 346.551768][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.557450][ C1] ? __build_skb_around+0x278/0x3b0 [ 346.562689][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.568453][ C1] ? skb_zerocopy_clone+0x2c9/0x670 [ 346.573722][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.579401][ C1] tcp_write_xmit+0x12a6/0x8480 [ 346.584323][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 346.589926][ C1] tcp_rcv_established+0x972/0x21b0 [ 346.595163][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.600839][ C1] ? ip6_dst_check+0x352/0x940 [ 346.605641][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 346.611314][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.616997][ C1] tcp_v6_do_rcv+0x836/0x16e0 [ 346.621718][ C1] tcp_v6_rcv+0x2e24/0x3ad0 [ 346.626285][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 346.631178][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.636866][ C1] ? __pfx_raw6_local_deliver+0x10/0x10 [ 346.642456][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.648132][ C1] ? lock_acquire+0x1b1/0x560 [ 346.652847][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.658636][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 346.663540][ C1] ip6_protocol_deliver_rcu+0x188/0x1530 [ 346.669250][ C1] ip6_input_finish+0x14f/0x2f0 [ 346.674154][ C1] ip6_input+0xa1/0xd0 [ 346.678274][ C1] ? __pfx_ip6_input+0x10/0x10 [ 346.683081][ C1] ipv6_rcv+0x265/0x680 [ 346.687292][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 346.692016][ C1] __netif_receive_skb_one_core+0x12e/0x1e0 [ 346.697954][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 346.704472][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.710151][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 346.715221][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.720639][ C1] __netif_receive_skb+0x1d/0x160 [ 346.725706][ C1] process_backlog+0x133/0x760 [ 346.730598][ C1] __napi_poll.constprop.0+0xba/0x550 [ 346.736016][ C1] net_rx_action+0x9b6/0xf10 [ 346.740655][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 346.745805][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 346.751127][ C1] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 346.757338][ C1] ? ktime_get+0xfb/0x1a0 [ 346.761726][ C1] handle_softirqs+0x219/0x8f0 [ 346.766570][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 346.771909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.777591][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 346.782928][ C1] ? sk_wait_data+0x1ab/0x510 [ 346.787658][ C1] do_softirq+0xb2/0xf0 [ 346.791861][ C1] [ 346.794803][ C1] [ 346.797746][ C1] __local_bh_enable_ip+0x100/0x120 [ 346.802992][ C1] sk_wait_data+0x1ab/0x510 [ 346.807576][ C1] ? __pfx_sk_wait_data+0x10/0x10 [ 346.812653][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 346.818345][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.824021][ C1] ? tcp_send_ack+0x82/0xa0 [ 346.828577][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.834260][ C1] tcp_recvmsg_locked+0x80e/0x2700 [ 346.839432][ C1] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 346.845019][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.850706][ C1] ? tcp_recvmsg+0x113/0x680 [ 346.855347][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 346.860688][ C1] tcp_recvmsg+0x12e/0x680 [ 346.865152][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 346.870131][ C1] ? mark_lock+0xb5/0xc60 [ 346.874497][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.880178][ C1] ? aa_sk_perm+0x2f5/0xb40 [ 346.884732][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 346.889720][ C1] inet6_recvmsg+0x12b/0x6a0 [ 346.894357][ C1] ? find_held_lock+0x2d/0x110 [ 346.899176][ C1] ? __pfx_inet6_recvmsg+0x10/0x10 [ 346.904329][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.910010][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.915683][ C1] ? security_socket_recvmsg+0x98/0xd0 [ 346.921179][ C1] ? __pfx_inet6_recvmsg+0x10/0x10 [ 346.926334][ C1] sock_recvmsg+0xfe/0x250 [ 346.930793][ C1] ____sys_recvmsg+0x21f/0x6b0 [ 346.935607][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 346.940944][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.946630][ C1] ? find_held_lock+0x2d/0x110 [ 346.951453][ C1] ___sys_recvmsg+0x115/0x1a0 [ 346.956195][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 346.961471][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.967185][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.972872][ C1] ? __fget_light+0x173/0x210 [ 346.977613][ C1] __sys_recvmsg+0x114/0x1e0 [ 346.982261][ C1] ? __pfx___sys_recvmsg+0x10/0x10 [ 346.987470][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.993167][ C1] do_syscall_64+0xcd/0x250 [ 346.997708][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.003639][ C1] RIP: 0033:0x7f3ef907cee9 [ 347.008077][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 347.027731][ C1] RSP: 002b:00007f3ef9e3d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 347.036183][ C1] RAX: ffffffffffffffda RBX: 00007f3ef91b4140 RCX: 00007f3ef907cee9 [ 347.044177][ C1] RDX: 0000000040000110 RSI: 00000000200008c0 RDI: 0000000000000009 [ 347.052166][ C1] RBP: 00007f3ef90c947f R08: 0000000000000000 R09: 0000000000000000 [ 347.060155][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.068147][ C1] R13: 000000000000006e R14: 00007f3ef91b4140 R15: 00007ffd28321458 [ 347.076152][ C1] [ 347.079177][ C1] Modules linked in: [ 347.083206][ C1] ---[ end trace 0000000000000000 ]--- [ 347.088705][ C1] RIP: 0010:skb_segment+0x19da/0x42b0 [ 347.095520][ C1] Code: 00 00 fe e9 bc ea ff ff e8 83 e9 ce f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 05 67 2b f9 48 8b 84 24 d0 [ 347.115203][ C1] RSP: 0018:ffffc90000a17878 EFLAGS: 00010212 [ 347.121392][ C1] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88c023e2 [ 347.129457][ C1] RDX: 000000000000000e RSI: ffffffff88c034bd RDI: 0000000000000070 [ 347.137574][ C1] RBP: ffffc90000a17a28 R08: 0000000000000005 R09: 000000000000ffff [ 347.145606][ C1] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff888025546240 [ 347.153633][ C1] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 347.161659][ C1] FS: 00007f3ef9e3d6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 347.170651][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.177292][ C1] CR2: 0000000020002c80 CR3: 000000004085c000 CR4: 0000000000350ef0 [ 347.185336][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 347.192789][ C1] Kernel Offset: disabled [ 347.197117][ C1] Rebooting in 86400 seconds..