last executing test programs: 24.418404062s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fsopen(0x0, 0x0) getcwd(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{}, {@gid}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) 23.316692691s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 22.862307761s ago: executing program 4: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="df24ead320b4dae0859dec60eb0dcc2dc884fd6c88cfeb62ae4c2f2c8581d69df21eb01bc69da23bd57868b2a256c16da38c11e08c3c29dda7a9a5a5d8a838d233b2b0456e3f234c4631071ea196a961cbd82f7162017b5c3e0f63d49402245fc809837fef7fcd4e0851cbfb4290a0be7c129e787de71ab075f86581f2ed4b795935cd7b8f55f97707b07a902f1739a9d197fbedd3aefd0fbcfce7a2a6a7c93cdeecc7e484b2ee736a9cb30ab98920bede4f7a77cc6e9f6e929f0ef50fcd36a8816d54413bbb063d3c884116ee47cb3686c47b5ad7ea283de66c39c7a91c8f1c0d034cc660063223f43f24456918bbf91c0747490400000000000000d5da23d0147468893499e314206201800000b9238850496ace4e9865bec8daad6df4fd59adf6449234a5113fe2b94c188df94eceb82285a33e7d7e14898f91607381bd7d161ce2b7af7afbbd2ceeacee8d36065e9af63f4c9989686b47aa1e3bb41f776bc7d8ac8c625752b8f0b164a08a7c33bc7de925d7ac0aee97d209920c57daac46c7a815b6615f0872b0cea4748b0f7847a3", 0x191, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="cc", 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000500)="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", 0x109, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'wp384\x00'}}) 22.182114105s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 19.93142373s ago: executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r6, r0}}, 0x18) 18.82523496s ago: executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x8921, &(0x7f0000000000)="65e8bdd8ae6f1af7799f6b3a") 18.663703345s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fsopen(0x0, 0x0) getcwd(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{}, {@gid}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) 17.572924383s ago: executing program 3: open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) 17.056924181s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x25, 0x1, 0x1, 0xfffffffc}, {}, {0x6}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_getaddrlabel={0x30, 0x4a, 0x4f02bb2d0ce89435, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 16.783483694s ago: executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x4) 13.621913349s ago: executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r6, r0}}, 0x18) 12.526357747s ago: executing program 0: syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d6370313235302c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c696f636861727365743d69736f383835392d352c756e64656c6574652c7569643d666f726765742c000be3e2b37362d62895ea6c91e443094e47a247d4c0467f5ee725bb29ee07da61dd1cdae2fe9953b155606806044455f75b144161806b571ec195276cc402e9c0a2e7c512d90dce43af4b0c7e2dde38667c04109495a1efc6da14c409280c7284bfae3be8235ea577269b576a327d7cb3ab74574e3f74"], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_devices(r0, 0x0, 0x0) 12.210778025s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fsopen(0x0, 0x0) getcwd(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{}, {@gid}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) 11.07128685s ago: executing program 0: r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xc4089434, &(0x7f0000001b80)={0x1, 0x3, @start={0x0, 0x0, "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", "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"}}) 10.599114693s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000b000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 10.380721076s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) 7.94774028s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xb33f2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 7.719946544s ago: executing program 1: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000000bc0)="$eJzs3U2MW0cdAPBn73rzWeKUhIa0tAmFtgK62+yG8BFBUzUXoqbiVqniEqVpiUgDIpWgVQ5JTtxoFYUb4kOceqkAIdELinriUolG4tJT4cCBKEiROEBLYhTvjNf+x+6zk9196/XvJ43H783YM8/7/PZ53puZAphY9fZjo/146e2Lh//5yD823Xr+ZCdHs/043bV0K3ctLU+H9/tgajG+cf3s8X5xrZhvP+bl4tlrndduKYriXLGnuFw0i92Xrrzx7vwzR88fubD3vTcPXl2JbQcAgEnz7csH9+/821/u3/7hWw8eKjZ01ufz82Za3prO+w+lE/98/l8vepdrXaHbTMg3nUI95Jvqk6+7nEbOt7H3dbH8mfC+jQH5NpSUP9W1rt92wzjL+3GzqNVne5br9dnZxd/kRft3/Uxt9vTJUy+eqaiiwLL790NFUewRhEkLrW2dL0HldakudH0KAJWK1wtvcy62LNydzrtND1f+tafq/V8Py2C193/lx/fvrcdql1+2/b8574jD8hl+b9q4ovVYbnm78vdoa1qO1xHi/UujHn/y+02F92sMWc9B1xHG5frCoHpOrXI97tSg+sf9Yr36Rorz5/DNkN79/Yl/03H5GwP9/WfNtf9vWqpc5XUZKWwc03oLExxa1Rx2gDEQ75trJTk93tcX0zeUpG8sSd9Ukr65JH1LSTpMst+/8tPi9drS7/z4m/7G9bPtL8uw7WG5ne2eFH9ixPrE9shR2+Pifb+jutvy4/3EsJb98dhzJ776wvNXFu//r3X2/5tpf9+Tlpvpu3U5ZcjthbFdvXPvf7O3nPqAfPeG+tzTJ3/7+Y7efLUdS+9TdB1nbqvHrt7XbRuU74HefM2Qb1MK8SpIPD/ZHF6Xzz/ycTV/XtNhexthO2ZCPfJxZXuKx+tqDGtV3h8H3f+f989dRaP24slTJ55Iy3k//fNUY8Ot9ftWud7A3Ru2/8+uorf/z9bO+ka9+7iwbWl9rfu40Azr5wesX0jL+f/cd6c2tdfPHv/+qReWe+Nhwp159bXvHTt16sQPPfHEE086T6o+MgErbe6Vl38wd+bV1x4/+fKxl068dOL0woEDC/PzB762sH+ufV4/1312D6wnS//0q64JAAAAAAAAAAAAMKwfHTl85a/vfOX9xf7/S/3/cv//fOdv7v//k9D/P/aTz/3gcz/A7X3S23nCAKszIV8jhU+G+u4I5ewMr/tUijvz+KX+/7m4OK5rrs99YX0cvzfnC8MJ3DZeykwYgyTOF/jZFF9I8a8LqFDt5/1Xp7hsfOu8r+fxKYxLMZ7y3y2PZ5LHMcn9vweN65SP/9tXoY4sv9XoTlj1NgL9/WvNjf+93kPXL4bK6yKstXCj1WqtZnmtllk8gLWh6vk/c7tnjk//6Vsbb4Wc7dpTvcfLOH4p3I2q57+srPzcsDip2z9k+cs9/2dn/ruhj39hxrzmnZX7319cfb+r2GL3sOXH7c/jQO8YrfwPU/l5ax4thiu/9atQfrwgNKSPQvmbhyw/bv/FUQtOBf4vlZ8/tsceHrb8xTeo1XvrEduN8/W/2G6c3Qjbn8f2HPnvf4cTNd5M5cMkG5d5Zkc1LvP/DhLvw/hyWs4HwnyfQ5zvZNT65/sr8v+BneH9ayX/38z/O96+nuKy70Oe/zfvj80+y/Wu5Uafz3a9HmtgXH3g+p8w5qF9RrMG6jGOodVqrWyDVolKC6fyz7/q3wlVl1/1518mzv8bz+Hj/L8xPc7/G9Pj/L8xvd2u+NHSpL0xPc7/Gz/POP9vTL8vlBvnB95Vkv7pkvTdJen3l6Q/UJL+mZL0vSXpD5akP1SSfm9J+sMl6Z8rSf98SfojJemPfXz6wo9LXr/e5f4ok7r9MMli/zzff5gc+frPoO//jpJ0YHz97K19Tz//u+80F/v/z3TaQ/J1vENpuZF+O8ffS7H9ZCqlvZOW/x7S13p7B0ySOH5G/P/+aEk6ML7yfV6+3zCBav1H7Bl23KpB5/mMly+k+Isp/lKKH0/xbIrnUrwvxfOrVD9WxtO//cPB12tLv/e3hfRh7yeP/YHiOFELQ9Yntg+Mej97HMdvVHdb/h12BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKhMvf24f/+uWlFcevvi4eeOnpy7tebJTo5m+3G6a6nReV1RPJHiqRT/Mj25cf3s8e74ZoprxXxRK2qd9cWz1zolbSmK4lyxp7hcNIvdl6688e78M0fPH7mw9703D15duU8AAAAA1r//BwAA///3txjh") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x107042, 0x0) ftruncate(r0, 0x4) 6.817825563s ago: executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000080)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000380)=""/87, &(0x7f0000000140)=""/65}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}}, &(0x7f0000000480)=0x98) r4 = socket(0x22, 0x2, 0x3) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) 6.403236147s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x34, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x0, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x9, 0xf989, "acd705369f"}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) 5.907417593s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fsopen(0x0, 0x0) getcwd(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{}, {@gid}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) 4.733085063s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$binfmt_script(r0, &(0x7f00000001c0), 0x6a) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/56, 0x6a}], 0x300) 4.366684019s ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000001c0)=0x6) 4.005782625s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0xcb, 0x0, &(0x7f0000000080)) 3.230614094s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x17, &(0x7f0000000200)=[@window, @mss, @mss, @window], 0x4) 3.05806981s ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000240)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) fstat(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r7, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) syz_emit_ethernet(0x326, &(0x7f0000000b00)=ANY=[], 0x0) 1.964948818s ago: executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="730e8c33dec7540358680e2c44b41b427a1847a1afff32917ca6838373429ab17959466a7b6ac56385323c2b3fb76fa9e273abffffff7ff17c422579d70059a23498ebf4156056c6136f817a5d76bc73354d9ee1000808719865dab622aafd977098e1188c7b02f96e8c8b064d338d08b0a2d74868f98ea953d4e3da46c9f9f63f0b178f8939f156f79c782b012683eed7a6404c479b54408b11a9320075a4a087ab7088f436ed52611b1b6ca9c854774ab45e5aed8f132a9543f1f49a", 0xbd, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) open(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001c40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 536.995397ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 306.453592ms ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000ec0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xf00}], 0x1) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) init_module(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5ef, &(0x7f0000000600)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60}, 0x90) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000240)={0x1, 0x0, {0x11, 0x29, 0xc, 0x19, 0xa, 0x8, 0x5, 0x131, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 4: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pwritev2(r1, &(0x7f00000008c0)=[{&(0x7f0000000040)="a8", 0x1}], 0x1, 0x0, 0x0, 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xfd14) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)="c5", 0x1}], 0x1, 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): vice loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.269597][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.317882][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.348187][ T5642] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.353500][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.375843][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.394396][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.408402][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.417463][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.428233][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.437906][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.447862][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.456888][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.467794][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.477482][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.494241][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.512227][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.523835][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.539667][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.556801][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.574025][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.583003][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.591835][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.600850][ T6118] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 301.617538][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.646493][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.655591][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.664324][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.733855][ T6129] loop0: detected capacity change from 0 to 128 [ 301.748124][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.757033][ T14] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 301.761443][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.780366][ T14] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 301.796331][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.809100][ T14] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 301.816144][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.836780][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.848967][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.849186][ T14] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 301.865815][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.882217][ T6131] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.986061][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.006917][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.059267][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.068503][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.077993][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.087384][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.100955][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.109858][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.119208][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.128140][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.166751][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.336329][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.177929][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.250053][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.299589][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.356407][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.407283][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.443438][ T14] usb 3-1: USB disconnect, device number 9 [ 303.475882][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.484665][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.506678][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.520914][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.541481][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.559383][ T3598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.587630][ T3598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.588340][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.602932][ T3598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.618952][ T3598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.627303][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 303.627318][ T26] audit: type=1326 audit(1718604293.027:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 303.656147][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.663208][ T3598] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 303.672036][ T3598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.725995][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.737156][ T102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.755859][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.798052][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.845547][ T26] audit: type=1326 audit(1718604293.027:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 303.863114][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.897339][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.910008][ T102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.923702][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.952750][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.960978][ T26] audit: type=1326 audit(1718604293.057:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 303.988387][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.010434][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.027682][ T26] audit: type=1326 audit(1718604293.057:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 304.054388][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.066849][ T102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.086516][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.124766][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.143685][ T26] audit: type=1326 audit(1718604293.057:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 304.176949][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.191843][ T102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.211540][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.253350][ T26] audit: type=1326 audit(1718604293.057:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 304.269252][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.276298][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.303859][ T26] audit: type=1326 audit(1718604293.057:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 304.386077][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.403040][ T6143] loop0: detected capacity change from 0 to 32768 [ 304.410326][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.417751][ T26] audit: type=1326 audit(1718604293.057:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 304.441242][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.443327][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.489930][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.496375][ T6145] chnl_net:caif_netlink_parms(): no params data found [ 304.516743][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.539825][ T6143] XFS (loop0): Mounting V5 Filesystem [ 304.548754][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.558558][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.572731][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.585482][ T26] audit: type=1326 audit(1718604293.057:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 304.602621][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.645343][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.654253][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.667099][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.680605][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.689028][ T26] audit: type=1326 audit(1718604293.057:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95987cea9 code=0x7ffc0000 [ 304.708968][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.724933][ T6143] XFS (loop0): Ending clean mount [ 304.761961][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.776018][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.828386][ T6143] XFS (loop0): Unmounting Filesystem [ 304.841677][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.906252][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.934839][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.961759][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.970158][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.988454][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.997013][ T6145] device bridge_slave_0 entered promiscuous mode [ 305.018606][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.028152][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.042962][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.054040][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.072136][ T6145] device bridge_slave_1 entered promiscuous mode [ 305.090484][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.104825][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.118579][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.136088][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.165935][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.169372][ T6177] loop1: detected capacity change from 0 to 32768 [ 305.174800][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.194698][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.220790][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.228680][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.255891][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.275378][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.284325][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.293681][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.305351][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.314463][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.320362][ T6177] XFS (loop1): Mounting V5 Filesystem [ 305.323330][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.339750][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.348627][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.358346][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.367873][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.376856][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.385845][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.394687][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.403881][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.409338][ T6145] team0: Port device team_slave_0 added [ 305.412910][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.426804][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.436334][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.447728][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.457222][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.465232][ T6177] XFS (loop1): Ending clean mount [ 305.471134][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.489926][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.499168][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.508024][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.516974][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.525749][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.534220][ T6145] team0: Port device team_slave_1 added [ 305.540263][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.549435][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.561665][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.569076][ T6187] loop0: detected capacity change from 0 to 256 [ 305.575099][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.587516][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.595884][ T5642] XFS (loop1): Unmounting Filesystem [ 305.612279][ T6187] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 305.622181][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.635422][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.644475][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.653346][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.662779][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.671582][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.680654][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.691158][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.706053][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.725400][ T3598] Bluetooth: hci3: command tx timeout [ 305.733740][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.754150][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.764743][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.784166][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.800636][ T6170] loop2: detected capacity change from 0 to 40427 [ 305.808668][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.811663][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.817660][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.852224][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.867569][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.889001][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.907573][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.915659][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.927092][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.943034][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.965730][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.981074][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.992544][ T6170] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 306.001039][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.022438][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.055373][ T6170] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 306.055865][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.079205][ T6170] F2FS-fs (loop2): invalid crc value [ 306.081143][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.105179][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.127436][ T6170] F2FS-fs (loop2): Found nat_bits in checkpoint [ 306.142329][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.157740][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.167609][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.177890][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.196898][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.206961][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.232023][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.245497][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.254284][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.264974][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.310055][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.318073][ T6170] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 306.318380][ T6170] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 306.388758][ T102] device hsr_slave_0 left promiscuous mode [ 306.395281][ T102] device hsr_slave_1 left promiscuous mode [ 306.404804][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.420517][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.429347][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.437538][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.444961][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.455102][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.464092][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.477530][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.488373][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.497968][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.512750][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.526145][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.536252][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.546558][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.558692][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.577762][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.593903][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.613204][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.630833][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.641431][ T6202] syz-executor.2: attempt to access beyond end of device [ 306.641431][ T6202] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.656991][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.674068][ T3586] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.676577][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.710492][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.754350][ T102] device bridge_slave_1 left promiscuous mode [ 306.778331][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.825161][ T102] device bridge_slave_0 left promiscuous mode [ 306.831409][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.896627][ T102] device veth1_macvtap left promiscuous mode [ 306.902712][ T102] device veth0_macvtap left promiscuous mode [ 306.916770][ T102] device veth1_vlan left promiscuous mode [ 306.922626][ T102] device veth0_vlan left promiscuous mode [ 306.974939][ T5146] syz-executor.2: attempt to access beyond end of device [ 306.974939][ T5146] loop2: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 307.028019][ T5146] F2FS-fs (loop2): Issue discard(5637, 5637, 1) failed, ret: -5 [ 307.360819][ T6212] loop0: detected capacity change from 0 to 256 [ 307.526309][ T102] team0 (unregistering): Port device team_slave_1 removed [ 307.578825][ T102] team0 (unregistering): Port device team_slave_0 removed [ 307.658121][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.763378][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.805280][ T3598] Bluetooth: hci3: command tx timeout [ 308.131908][ T102] bond0 (unregistering): Released all slaves [ 308.203113][ T6145] device hsr_slave_0 entered promiscuous mode [ 308.346689][ T6145] device hsr_slave_1 entered promiscuous mode [ 308.385347][ T6145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.389954][ T6222] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 308.403209][ T6145] Cannot create hsr debugfs directory [ 308.433842][ T3586] bridge0: port 3(syz_tun) entered disabled state [ 308.462226][ T6220] loop1: detected capacity change from 0 to 32768 [ 308.473900][ T3586] device syz_tun left promiscuous mode [ 308.479914][ T3586] bridge0: port 3(syz_tun) entered disabled state [ 308.533826][ T6231] loop2: detected capacity change from 0 to 256 [ 308.552263][ T6220] XFS (loop1): Mounting V5 Filesystem [ 308.642338][ T6231] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 308.713511][ T6220] XFS (loop1): Ending clean mount [ 308.816414][ T6220] XFS (loop1): Unmounting Filesystem [ 309.175077][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.370894][ T6249] loop2: detected capacity change from 0 to 128 [ 309.533691][ T6248] loop0: detected capacity change from 0 to 32768 [ 309.595409][ T6248] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6248) [ 309.670430][ T3604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.681644][ T6248] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 309.691898][ T6248] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 309.700686][ T6248] BTRFS info (device loop0): using free space tree [ 309.775723][ T3603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.786279][ T3603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.794132][ T3603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.803432][ T3603] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 309.810941][ T3603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.885384][ T3603] Bluetooth: hci3: command tx timeout [ 310.029918][ T6260] loop1: detected capacity change from 0 to 2048 [ 310.102629][ T6248] BTRFS info (device loop0): enabling ssd optimizations [ 310.114234][ T6260] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 310.135390][ T6260] ext4 filesystem being mounted at /root/syzkaller-testdir2694888562/syzkaller.qW4K3H/22/file0 supports timestamps until 2038 (0x7fffffff) [ 310.251080][ T6145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 310.277673][ T6260] fs-verity: sha256 using implementation "sha256-avx2" [ 310.291506][ T6260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 345: padding at end of block bitmap is not set [ 310.307402][ T6145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 310.339066][ T6145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 310.868675][ T6260] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0 [ 310.896440][ T6282] bridge0: port 3(syz_tun) entered blocking state [ 310.903000][ T6282] bridge0: port 3(syz_tun) entered disabled state [ 310.912515][ T6282] device syz_tun entered promiscuous mode [ 310.918733][ T6282] bridge0: port 3(syz_tun) entered blocking state [ 310.925258][ T6282] bridge0: port 3(syz_tun) entered forwarding state [ 310.930186][ T6260] fs-verity (loop1, inode 13): Error -117 building Merkle tree [ 311.013220][ T6145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.080410][ T5540] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 311.088192][ T6289] loop2: detected capacity change from 0 to 4096 [ 311.129043][ T5642] EXT4-fs (loop1): unmounting filesystem. [ 311.216970][ T6289] ntfs: volume version 3.1. [ 311.244655][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.262282][ T6252] chnl_net:caif_netlink_parms(): no params data found [ 311.275701][ T6289] __ntfs_error: 18 callbacks suppressed [ 311.275720][ T6289] ntfs: (device loop2): ntfs_mark_quotas_out_of_date(): Quota defaults entry is not present. [ 311.285942][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.306744][ T6289] ntfs: (device loop2): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 311.329612][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.351625][ T6145] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.544735][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.573092][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.592948][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.600113][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.625491][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.634347][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.655645][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.662789][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.701997][ T6305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.768302][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.788061][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.838873][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 311.886905][ T3603] Bluetooth: hci1: command tx timeout [ 311.967614][ T3603] Bluetooth: hci3: command tx timeout [ 312.008186][ T26] audit: type=1326 audit(1718604301.397:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff95987cea9 code=0x0 [ 312.608497][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.633272][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.728878][ T6145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.764916][ T6145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.823919][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.832940][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.873427][ T6252] device bridge_slave_0 entered promiscuous mode [ 312.883162][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.893741][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.904461][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.913230][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.922145][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.931746][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.940340][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.949570][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.963419][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.973515][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.994819][ T6252] device bridge_slave_1 entered promiscuous mode [ 313.063359][ T6252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.099632][ T6252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.115215][ T3666] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 313.202075][ T6252] team0: Port device team_slave_0 added [ 313.217506][ T6252] team0: Port device team_slave_1 added [ 313.297037][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.304019][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.375270][ T3666] usb 3-1: Using ep0 maxpacket: 16 [ 313.395124][ T6252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.419194][ T6348] loop1: detected capacity change from 0 to 4096 [ 313.426990][ T6352] loop0: detected capacity change from 0 to 256 [ 313.427664][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.456353][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.482506][ T6348] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 313.575691][ T6252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.663349][ T3666] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=69.e6 [ 313.687684][ T6348] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 313.697749][ T3666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.706083][ T3666] usb 3-1: Product: syz [ 313.710341][ T3666] usb 3-1: Manufacturer: syz [ 313.716224][ T3666] usb 3-1: SerialNumber: syz [ 313.724319][ T3666] usb 3-1: config 0 descriptor?? [ 313.731553][ T5642] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 313.738786][ T5642] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 313.770267][ T5642] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 313.985171][ T3603] Bluetooth: hci1: command tx timeout [ 314.549007][ T3666] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 314.564050][ T6252] device hsr_slave_0 entered promiscuous mode [ 314.585499][ T6252] device hsr_slave_1 entered promiscuous mode [ 314.593965][ T6252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.611821][ T6252] Cannot create hsr debugfs directory [ 314.637096][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.644802][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.808878][ T26] audit: type=1326 audit(1718604304.207:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09c6a7cea9 code=0x0 [ 314.874143][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.908874][ T3666] gspca_stk1135: reg_w 0x0 err -71 [ 314.918328][ T3666] gspca_stk1135: serial bus timeout: status=0x00 [ 314.925202][ T3666] gspca_stk1135: Sensor write failed [ 314.933142][ T3666] gspca_stk1135: serial bus timeout: status=0x00 [ 315.358120][ T6145] device veth0_vlan entered promiscuous mode [ 315.451152][ T3666] gspca_stk1135: Sensor write failed [ 315.456637][ T3666] gspca_stk1135: serial bus timeout: status=0x00 [ 315.462992][ T3666] gspca_stk1135: Sensor read failed [ 315.468288][ T3666] gspca_stk1135: serial bus timeout: status=0x00 [ 315.474641][ T3666] gspca_stk1135: Sensor read failed [ 315.480019][ T3666] gspca_stk1135: Detected sensor type unknown (0x0) [ 315.486658][ T3666] gspca_stk1135: serial bus timeout: status=0x00 [ 315.494652][ T3666] gspca_stk1135: Sensor read failed [ 315.499955][ T3666] gspca_stk1135: serial bus timeout: status=0x00 [ 315.515147][ T3666] gspca_stk1135: Sensor read failed [ 315.520418][ T3666] gspca_stk1135: serial bus timeout: status=0x00 [ 315.575445][ T3666] gspca_stk1135: Sensor write failed [ 315.580800][ T3666] gspca_stk1135: serial bus timeout: status=0x00 [ 315.605101][ T3666] gspca_stk1135: Sensor write failed [ 315.610487][ T3666] stk1135: probe of 3-1:0.0 failed with error -71 [ 315.618660][ T3666] usb 3-1: USB disconnect, device number 10 [ 315.639310][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.655546][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.683223][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.701171][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.741546][ T6145] device veth1_vlan entered promiscuous mode [ 315.814562][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.940306][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.045161][ T3603] Bluetooth: hci1: command tx timeout [ 316.372973][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 316.432887][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.586911][ T6145] device veth0_macvtap entered promiscuous mode [ 316.717831][ T6145] device veth1_macvtap entered promiscuous mode [ 316.780606][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.788883][ T6126] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.806546][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.835231][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.849885][ T6393] loop1: detected capacity change from 0 to 256 [ 316.856868][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.867566][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.877677][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.888308][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.898472][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.912329][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.933271][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.944352][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.956248][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.006021][ T6300] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 317.037211][ T6252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.087976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.091058][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.102307][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.120718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.141485][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.315571][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.414586][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.517658][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.613903][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.847691][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.857891][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.871396][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.885159][ T6300] usb 3-1: Using ep0 maxpacket: 16 [ 317.901757][ T6145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.925006][ T6145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.968682][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.015421][ T6300] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 318.029884][ T6300] usb 3-1: config 0 has no interface number 0 [ 318.049109][ T6300] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.085574][ T6300] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.128203][ T6252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.135212][ T3603] Bluetooth: hci1: command tx timeout [ 318.162246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.176282][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.195960][ T6145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.216904][ T6300] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 318.235190][ T6300] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 318.252455][ T6145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.254435][ T6300] usb 3-1: Product: syz [ 318.269277][ T6300] usb 3-1: SerialNumber: syz [ 318.275297][ T6145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.282335][ T6300] usb 3-1: config 0 descriptor?? [ 318.283994][ T6145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.327609][ T6300] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 318.337061][ T6300] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input8 [ 318.365664][ T3631] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 318.398367][ T6252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.600366][ T26] audit: type=1326 audit(1718604307.997:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff95987cea9 code=0x0 [ 318.644962][ T6252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.236853][ T3631] usb 1-1: Using ep0 maxpacket: 16 [ 319.313187][ T4165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.338439][ T3666] usb 3-1: USB disconnect, device number 11 [ 319.343549][ T4165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.355124][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.362110][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 319.377603][ T3666] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 319.400907][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.401442][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.426594][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.441194][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 319.514610][ T6421] loop3: detected capacity change from 0 to 128 [ 319.542452][ T6421] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 319.559708][ T6252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.561506][ T6421] ext4 filesystem being mounted at /root/syzkaller-testdir2783877931/syzkaller.cIGqgc/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 319.607012][ T6252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.613998][ T3631] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=69.e6 [ 319.623745][ T3631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.632071][ T3631] usb 1-1: Product: syz [ 319.639880][ T3631] usb 1-1: Manufacturer: syz [ 319.644572][ T3631] usb 1-1: SerialNumber: syz [ 319.655561][ T6252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.671243][ T3631] usb 1-1: config 0 descriptor?? [ 319.685434][ T6252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.744781][ T3631] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 319.776592][ T6427] device syzkaller0 entered promiscuous mode [ 320.036881][ T6252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.096321][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.108862][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.132126][ T6252] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.297090][ T3631] gspca_stk1135: reg_w 0x2 err -110 [ 320.303410][ T3631] gspca_stk1135: serial bus timeout: status=0x00 [ 320.314116][ T3631] gspca_stk1135: Sensor write failed [ 320.319540][ T3631] gspca_stk1135: serial bus timeout: status=0x00 [ 320.327161][ T3631] gspca_stk1135: Sensor write failed [ 320.332570][ T3631] gspca_stk1135: serial bus timeout: status=0x00 [ 320.350796][ T3631] gspca_stk1135: Sensor read failed [ 320.366703][ T3631] gspca_stk1135: serial bus timeout: status=0x00 [ 320.396830][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.407728][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.417310][ T3631] gspca_stk1135: Sensor read failed [ 320.435317][ T3631] gspca_stk1135: Detected sensor type unknown (0x0) [ 320.435865][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.449165][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.465226][ T3631] gspca_stk1135: serial bus timeout: status=0x00 [ 320.481144][ T6145] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor.3: path (unknown): directory fails checksum at offset 1024 [ 320.507376][ T3631] gspca_stk1135: Sensor read failed [ 320.514995][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.523438][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.527185][ T3631] gspca_stk1135: serial bus timeout: status=0x00 [ 320.545010][ T6145] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor.3: path (unknown): directory fails checksum at offset 8192 [ 320.555712][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.559808][ T3631] gspca_stk1135: Sensor read failed [ 320.581054][ T6145] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor.3: Directory block failed checksum [ 320.588370][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.596750][ T3631] gspca_stk1135: serial bus timeout: status=0x00 [ 320.601843][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.616338][ T3631] gspca_stk1135: Sensor write failed [ 320.630614][ T6145] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor.3: path (unknown): directory fails checksum at offset 1024 [ 320.644977][ T3631] gspca_stk1135: serial bus timeout: status=0x00 [ 320.659175][ T3631] gspca_stk1135: Sensor write failed [ 320.664540][ T3631] stk1135: probe of 1-1:0.0 failed with error -110 [ 320.667331][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.674473][ T6145] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor.3: path (unknown): directory fails checksum at offset 8192 [ 320.700672][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.723673][ T6145] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor.3: Directory block failed checksum [ 320.737987][ T6145] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor.3: path (unknown): directory fails checksum at offset 1024 [ 320.756841][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.775319][ T6145] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor.3: path (unknown): directory fails checksum at offset 8192 [ 320.792291][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.801042][ T6145] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor.3: Directory block failed checksum [ 320.829502][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.833330][ T6145] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor.3: path (unknown): directory fails checksum at offset 1024 [ 320.846705][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.881047][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.892692][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.909215][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.924387][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.933878][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.950963][ T6252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.348189][ T5625] usb 1-1: USB disconnect, device number 7 [ 321.391873][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.411140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.434616][ T6252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.518597][ T6145] EXT4-fs (loop3): unmounting filesystem. [ 321.629915][ T4165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.759798][ T4165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.901470][ T4165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.101210][ T6472] device syzkaller0 entered promiscuous mode [ 322.151553][ T4165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.252439][ T6479] loop1: detected capacity change from 0 to 1024 [ 322.260085][ T6479] EXT4-fs: Ignoring removed orlov option [ 322.265968][ T6479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.320280][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.337155][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.383268][ T6479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 322.394234][ T3604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.405397][ T3604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.413951][ T3604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.423264][ T3604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.431066][ T3604] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 322.439341][ T3604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.466289][ T6486] loop0: detected capacity change from 0 to 256 [ 322.508351][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.517878][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.526499][ T6487] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 322.527311][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.549950][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.568818][ T6252] device veth0_vlan entered promiscuous mode [ 322.644782][ T6487] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 322.645424][ T6252] device veth1_vlan entered promiscuous mode [ 322.793006][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.804786][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 322.813196][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.822064][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.832529][ T6252] device veth0_macvtap entered promiscuous mode [ 322.923978][ T6252] device veth1_macvtap entered promiscuous mode [ 323.000419][ T6483] chnl_net:caif_netlink_parms(): no params data found [ 323.028775][ T6491] loop2: detected capacity change from 0 to 4096 [ 323.038361][ T5642] EXT4-fs (loop1): unmounting filesystem. [ 323.069951][ T6491] ntfs: volume version 3.1. [ 323.115940][ T6491] ntfs: (device loop2): ntfs_mark_quotas_out_of_date(): Quota defaults entry is not present. [ 323.232705][ T6491] ntfs: (device loop2): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 323.329415][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.342728][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.354338][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.368939][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.381410][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.397277][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.409350][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.419998][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.430338][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.441626][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.451582][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.462226][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.477550][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.551002][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.569621][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.594359][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.630841][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.669335][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.741525][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.748421][ T6516] tmpfs: Bad value for 'mpol' [ 323.773884][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.785656][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.832696][ T6519] loop1: detected capacity change from 0 to 256 [ 323.843288][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.858064][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.868357][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.888824][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.900575][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.914732][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.935098][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.952227][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.980618][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.056369][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.087986][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.103974][ T6252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.121000][ T6252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.144055][ T6252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.169741][ T6252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.201257][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.212155][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.235995][ T6483] device bridge_slave_0 entered promiscuous mode [ 324.269694][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.282517][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.295957][ T3604] Bluetooth: hci4: command 0x0406 tx timeout [ 324.314092][ T6483] device bridge_slave_1 entered promiscuous mode [ 324.414441][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.457642][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.525479][ T3604] Bluetooth: hci3: command tx timeout [ 324.562768][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.597638][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.647342][ T6483] team0: Port device team_slave_0 added [ 324.674492][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 324.693938][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.701754][ T6483] team0: Port device team_slave_1 added [ 324.708389][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.786271][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.868010][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.892849][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.939152][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.017464][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.028116][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.195450][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.240581][ T6537] loop4: detected capacity change from 0 to 4096 [ 325.283190][ T4165] device hsr_slave_0 left promiscuous mode [ 325.307865][ T4165] device hsr_slave_1 left promiscuous mode [ 325.333473][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.371581][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.381459][ T6537] ntfs: volume version 3.1. [ 325.392609][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.415597][ T6537] ntfs: (device loop4): ntfs_mark_quotas_out_of_date(): Quota defaults entry is not present. [ 325.429842][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.444387][ T6537] ntfs: (device loop4): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 325.461251][ T4165] device bridge_slave_1 left promiscuous mode [ 325.503164][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.529818][ T4165] device bridge_slave_0 left promiscuous mode [ 325.544834][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.570163][ T4165] device veth1_macvtap left promiscuous mode [ 325.582718][ T4165] device veth0_macvtap left promiscuous mode [ 325.603032][ T4165] device veth1_vlan left promiscuous mode [ 325.622911][ T4165] device veth0_vlan left promiscuous mode [ 325.912103][ T6550] loop2: detected capacity change from 0 to 128 [ 326.206451][ T4165] team0 (unregistering): Port device team_slave_1 removed [ 326.224917][ T4165] team0 (unregistering): Port device team_slave_0 removed [ 326.239365][ T4165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.263441][ T4165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.368388][ T4165] bond0 (unregistering): Released all slaves [ 326.553182][ T6483] device hsr_slave_0 entered promiscuous mode [ 326.560211][ T6483] device hsr_slave_1 entered promiscuous mode [ 326.568761][ T6483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.576639][ T6483] Cannot create hsr debugfs directory [ 326.605412][ T3604] Bluetooth: hci3: command tx timeout [ 327.377738][ T5146] bridge0: port 3(syz_tun) entered disabled state [ 327.417441][ T5146] device syz_tun left promiscuous mode [ 327.424901][ T5146] bridge0: port 3(syz_tun) entered disabled state [ 327.493259][ T5642] bridge0: port 3(syz_tun) entered disabled state [ 327.586250][ T5642] device syz_tun left promiscuous mode [ 327.597274][ T5642] bridge0: port 3(syz_tun) entered disabled state [ 328.685500][ T3604] Bluetooth: hci3: command tx timeout [ 329.266938][ T3603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.278980][ T3603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.291202][ T3603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.301001][ T3603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.308886][ T3603] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 329.318820][ T3603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.502538][ T6575] loop4: detected capacity change from 0 to 1024 [ 329.578295][ T6575] EXT4-fs: Ignoring removed orlov option [ 329.584003][ T6575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 329.631809][ T6483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.685528][ T6575] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 329.694281][ T6483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.745665][ T3604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.747558][ T6483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.760336][ T3598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.770603][ T3598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.782853][ T3598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.790585][ T3598] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 329.797971][ T3598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 329.823051][ T6483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.835157][ T6575] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.4: corrupt xattr in inline inode [ 329.933299][ T6572] chnl_net:caif_netlink_parms(): no params data found [ 329.953217][ T6575] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.4: corrupted in-inode xattr [ 330.004072][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.117209][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.144603][ T6252] EXT4-fs (loop4): unmounting filesystem. [ 330.150949][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.187714][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.194865][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.236499][ T6572] device bridge_slave_0 entered promiscuous mode [ 330.261943][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.291370][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.305326][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.313830][ T6572] device bridge_slave_1 entered promiscuous mode [ 330.485652][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.515408][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.524395][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.531543][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.671312][ T6572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.750329][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.767275][ T3598] Bluetooth: hci3: command tx timeout [ 330.786310][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.820715][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.868810][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.875993][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.923825][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.944416][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.973956][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.996677][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.024854][ T6572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.058979][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.077437][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.107341][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.126008][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.134624][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.173818][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.195918][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.281370][ T6572] team0: Port device team_slave_0 added [ 331.312444][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.354590][ T6572] team0: Port device team_slave_1 added [ 331.375799][ T6580] chnl_net:caif_netlink_parms(): no params data found [ 331.487257][ T3603] Bluetooth: hci2: command tx timeout [ 331.535881][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.544005][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.572039][ T6572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.667305][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.715084][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.796911][ T6572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.843490][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.874026][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.895339][ T3603] Bluetooth: hci5: command tx timeout [ 331.903405][ T6580] device bridge_slave_0 entered promiscuous mode [ 331.971429][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.010619][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.037516][ T6580] device bridge_slave_1 entered promiscuous mode [ 332.138788][ T6572] device hsr_slave_0 entered promiscuous mode [ 332.146687][ T6572] device hsr_slave_1 entered promiscuous mode [ 332.153480][ T6572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.171448][ T6572] Cannot create hsr debugfs directory [ 332.195932][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.203475][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.227702][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.327521][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.461621][ T6483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.344083][ T6580] team0: Port device team_slave_0 added [ 333.363691][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.374607][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.426440][ T4165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.571304][ T3603] Bluetooth: hci2: command tx timeout [ 333.584288][ T26] audit: type=1326 audit(1718604322.977:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09c6a7cea9 code=0x0 [ 333.719726][ T6580] team0: Port device team_slave_1 added [ 333.799176][ T6483] device veth0_vlan entered promiscuous mode [ 333.981490][ T6483] device veth1_vlan entered promiscuous mode [ 333.988076][ T3603] Bluetooth: hci5: command tx timeout [ 334.188485][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.206300][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.225901][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.272143][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 334.309794][ T4165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.421708][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.437152][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.480756][ T4165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.500281][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.511242][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.576969][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.601779][ T6633] trusted_key: encrypted_key: insufficient parameters specified [ 334.642457][ T6572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.683678][ T4165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.717742][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.724811][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.774866][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.790912][ T6483] device veth0_macvtap entered promiscuous mode [ 334.815519][ T3598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.823951][ T6572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.838164][ T3598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.847760][ T3598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.856476][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.866830][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.887527][ T3598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.892948][ T6483] device veth1_macvtap entered promiscuous mode [ 334.907121][ T3598] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.914596][ T3598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.974799][ T6572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.000626][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.016176][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.133785][ T6572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.169918][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.191267][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.201318][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.213587][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.225562][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.236995][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.247142][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.259446][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.269522][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.280066][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.290662][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.301180][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.314153][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.347061][ T6580] device hsr_slave_0 entered promiscuous mode [ 335.356049][ T6580] device hsr_slave_1 entered promiscuous mode [ 335.362895][ T6580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.370660][ T6580] Cannot create hsr debugfs directory [ 335.377112][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.399279][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.410755][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.421455][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.433003][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.443632][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.453587][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.475116][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.484961][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.505160][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.525081][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.545767][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.556048][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.569512][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.581162][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.645790][ T3603] Bluetooth: hci2: command tx timeout [ 335.673319][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.685989][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.707034][ T6483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.727539][ T6483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.744404][ T6483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.755344][ T6483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.045124][ T3603] Bluetooth: hci5: command tx timeout [ 336.088468][ T6572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.206960][ T5622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.227954][ T6572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.247252][ T5622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.311388][ T6572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.343005][ T6572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 336.394597][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.490826][ T3641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.504899][ T3641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.572007][ T6635] chnl_net:caif_netlink_parms(): no params data found [ 336.618985][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.842313][ T6572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.006907][ T3603] Bluetooth: hci1: command tx timeout [ 337.746444][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.753762][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.763422][ T3598] Bluetooth: hci2: command tx timeout [ 337.790868][ T6635] device bridge_slave_0 entered promiscuous mode [ 337.837106][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.846110][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.866515][ T6572] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.916833][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.923984][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.932997][ T6635] device bridge_slave_1 entered promiscuous mode [ 337.958155][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.974963][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.984952][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.992143][ T6299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.000151][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.115776][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.143341][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.147034][ T3598] Bluetooth: hci5: command tx timeout [ 338.176756][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.183867][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.564511][ T6580] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 339.064528][ T6635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.085787][ T3598] Bluetooth: hci1: command tx timeout [ 339.116338][ T6662] loop0: detected capacity change from 0 to 32768 [ 339.121710][ T6572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.124909][ T6662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6662) [ 339.148837][ T6572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.168633][ T6662] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.180410][ T6580] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 339.185222][ T6662] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 339.196381][ T6662] BTRFS info (device loop0): using free space tree [ 339.206476][ T6580] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.217524][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.227765][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.237972][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.249682][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.260096][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.269255][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.279109][ T6662] BTRFS info (device loop0): enabling ssd optimizations [ 339.279553][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.294778][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.312571][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.321206][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.358850][ T5540] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.384266][ T6635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.553822][ T6580] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.587751][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.616219][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.762959][ T6635] team0: Port device team_slave_0 added [ 339.807601][ T6635] team0: Port device team_slave_1 added [ 339.906789][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.913765][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.975401][ T6635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.068928][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.095275][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.141959][ T6635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.153660][ T3603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.164680][ T3603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.178832][ T3603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.189596][ T3603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.211336][ T3603] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.218857][ T3603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.219667][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.237384][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.328631][ T6572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.368898][ T6635] device hsr_slave_0 entered promiscuous mode [ 340.390757][ T6635] device hsr_slave_1 entered promiscuous mode [ 340.404849][ T6700] trusted_key: encrypted_key: insufficient parameters specified [ 340.424791][ T6635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.434064][ T6635] Cannot create hsr debugfs directory [ 340.638520][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.668991][ T4165] device hsr_slave_0 left promiscuous mode [ 340.681816][ T4165] device hsr_slave_1 left promiscuous mode [ 340.697344][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.712565][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.734990][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.751503][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.772151][ T4165] device bridge_slave_1 left promiscuous mode [ 340.782906][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.793416][ T4165] device bridge_slave_0 left promiscuous mode [ 340.803060][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.849450][ T4165] device hsr_slave_0 left promiscuous mode [ 340.858659][ T4165] device hsr_slave_1 left promiscuous mode [ 340.873876][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.883637][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.908710][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.924680][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.946885][ T4165] device bridge_slave_1 left promiscuous mode [ 340.953168][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.973279][ T4165] device bridge_slave_0 left promiscuous mode [ 340.983863][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.003793][ T4165] device veth1_macvtap left promiscuous mode [ 341.010382][ T4165] device veth0_macvtap left promiscuous mode [ 341.016694][ T4165] device veth1_vlan left promiscuous mode [ 341.022597][ T4165] device veth0_vlan left promiscuous mode [ 341.030360][ T4165] device veth1_macvtap left promiscuous mode [ 341.036756][ T4165] device veth0_macvtap left promiscuous mode [ 341.042864][ T4165] device veth1_vlan left promiscuous mode [ 341.050975][ T4165] device veth0_vlan left promiscuous mode [ 341.175333][ T3598] Bluetooth: hci1: command tx timeout [ 341.451113][ T4165] team0 (unregistering): Port device team_slave_1 removed [ 341.480981][ T4165] team0 (unregistering): Port device team_slave_0 removed [ 341.502440][ T4165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.523723][ T4165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.611671][ T4165] bond0 (unregistering): Released all slaves [ 341.809262][ T4165] team0 (unregistering): Port device team_slave_1 removed [ 341.828450][ T4165] team0 (unregistering): Port device team_slave_0 removed [ 341.845505][ T4165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.870642][ T4165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.960326][ T4165] bond0 (unregistering): Released all slaves [ 342.131545][ T6580] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.165280][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 342.184083][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.195889][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.203828][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.272424][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.289028][ T3598] Bluetooth: hci3: command tx timeout [ 342.294523][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.312939][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.320121][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.409458][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.421345][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.451048][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.465606][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.472736][ T5624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.494923][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.506018][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.514606][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 342.536186][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.567512][ T6572] device veth0_vlan entered promiscuous mode [ 342.656940][ T6635] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.682274][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.701853][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.714439][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.735781][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.754021][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.772665][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.781511][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.790860][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.804354][ T6572] device veth1_vlan entered promiscuous mode [ 342.841739][ T6580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.866004][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.906137][ T6635] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.927927][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 342.947755][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.968343][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.985684][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.014076][ T6695] chnl_net:caif_netlink_parms(): no params data found [ 343.085408][ T6635] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.115636][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 343.124145][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.144329][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.161680][ T6572] device veth0_macvtap entered promiscuous mode [ 343.245387][ T3603] Bluetooth: hci1: command tx timeout [ 343.250505][ T6572] device veth1_macvtap entered promiscuous mode [ 344.098934][ T6635] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.138754][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.152033][ T6722] loop0: detected capacity change from 0 to 2048 [ 344.160296][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.195256][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.196076][ T6722] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 344.215765][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.215788][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.215803][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.215814][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.215830][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.215840][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.215853][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.215863][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.251477][ T6722] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 344.321741][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.345949][ T6722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.359759][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.367465][ T3603] Bluetooth: hci3: command tx timeout [ 344.373330][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.381663][ T6695] device bridge_slave_0 entered promiscuous mode [ 344.393866][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.410457][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.421685][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.433592][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.443987][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.472545][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.485648][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.570490][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.581999][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.602599][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.627839][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.640006][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.654568][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.678915][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.688455][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.697450][ T6695] device bridge_slave_1 entered promiscuous mode [ 345.200004][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.239280][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.512531][ T6572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.534007][ T6572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.543298][ T6572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.552111][ T6572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.591236][ T6695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.624836][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.676273][ T6695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.716618][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.724165][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.769048][ T5540] bridge0: port 3(syz_tun) entered disabled state [ 345.804345][ T5540] device syz_tun left promiscuous mode [ 345.811767][ T5540] bridge0: port 3(syz_tun) entered disabled state [ 345.834714][ T6695] team0: Port device team_slave_0 added [ 345.891654][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.901039][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.912946][ T6695] team0: Port device team_slave_1 added [ 345.984974][ T6580] device veth0_vlan entered promiscuous mode [ 346.046873][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.065463][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.115679][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.123724][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.147693][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.154668][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.155968][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.222476][ T6695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.233824][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.277759][ T6580] device veth1_vlan entered promiscuous mode [ 346.290055][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.299099][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.336891][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.343870][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.383043][ T6695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.409022][ T6635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.446065][ T3603] Bluetooth: hci3: command tx timeout [ 346.465934][ T6580] device veth0_macvtap entered promiscuous mode [ 346.487082][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.487258][ T5876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.506586][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.526072][ T5876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.550058][ T3598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.561297][ T3598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.569919][ T3598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.581528][ T3598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.591554][ T6635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.599435][ T3598] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 346.609335][ T6635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.616747][ T3598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.632022][ T6580] device veth1_macvtap entered promiscuous mode [ 346.647717][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.656449][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.665746][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.687606][ T6635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.752897][ T6695] device hsr_slave_0 entered promiscuous mode [ 346.789166][ T6695] device hsr_slave_1 entered promiscuous mode [ 346.800171][ T6695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.817648][ T6695] Cannot create hsr debugfs directory [ 346.846517][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.869209][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.890411][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.910470][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.935239][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.958073][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.978708][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.997534][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.016647][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.039365][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.059297][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.080171][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.092923][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.127830][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.144370][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.173520][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.209974][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.224900][ T6742] loop2: detected capacity change from 0 to 256 [ 347.229236][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.251396][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.266332][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.277133][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.287146][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.297703][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.307929][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.319127][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.330426][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.341433][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.353105][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.389622][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.414768][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.428207][ T6580] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.443895][ T6580] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.453304][ T6580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.462146][ T6580] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.691308][ T6635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.763290][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.772225][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.791992][ T6635] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.825516][ T26] audit: type=1326 audit(1718604337.227:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 347.857635][ T5876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.876310][ T5876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.895902][ T26] audit: type=1326 audit(1718604337.247:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 347.938107][ T6749] loop2: detected capacity change from 0 to 1024 [ 347.973155][ T26] audit: type=1326 audit(1718604337.247:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 347.996321][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.004291][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.028756][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.044030][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.051195][ T5626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.055187][ T26] audit: type=1326 audit(1718604337.247:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 348.092047][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.100986][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.109720][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.116844][ T5626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.124679][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.133728][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.138220][ T26] audit: type=1326 audit(1718604337.247:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 348.159564][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.173792][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.181921][ T4119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.199497][ T4119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.202642][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.228149][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.237446][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.244646][ T26] audit: type=1326 audit(1718604337.247:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 348.246456][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.279035][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.313317][ T26] audit: type=1326 audit(1718604337.247:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 348.337135][ T26] audit: type=1326 audit(1718604337.247:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 348.362095][ T26] audit: type=1326 audit(1718604337.337:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 348.372117][ T6695] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.394863][ T26] audit: type=1326 audit(1718604337.337:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 348.471788][ T4165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.525952][ T3598] Bluetooth: hci3: command tx timeout [ 348.546473][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.565155][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.594227][ T6695] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.624776][ T6635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.656740][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.665541][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.679489][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.687673][ T3598] Bluetooth: hci0: command tx timeout [ 348.699088][ T6732] chnl_net:caif_netlink_parms(): no params data found [ 348.714874][ T6757] loop2: detected capacity change from 0 to 512 [ 348.727542][ T4165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.753769][ T6695] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.765573][ T6755] x_tables: duplicate underflow at hook 3 [ 348.777796][ T6757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 348.786922][ T6757] ext4 filesystem being mounted at /root/syzkaller-testdir551121328/syzkaller.ZqC1rz/5/bus supports timestamps until 2038 (0x7fffffff) [ 348.919317][ T4165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.012909][ T6765] loop1: detected capacity change from 0 to 2048 [ 349.024261][ T6695] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.174861][ T52] block nbd2: Attempted send on invalid socket [ 349.182594][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 349.193684][ T6770] efs: cannot read volume header [ 349.218281][ T6765] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 349.709693][ T6775] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.816844][ T6572] EXT4-fs (loop2): unmounting filesystem. [ 349.879368][ T4165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.917724][ T6765] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 349.945297][ T6765] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 349.994199][ T6765] Remounting filesystem read-only [ 350.023169][ T6765] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 350.086343][ T6765] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 350.103052][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.119414][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.125434][ T6765] NILFS (loop1): error -5 truncating bmap (ino=16) [ 350.139807][ T6732] device bridge_slave_0 entered promiscuous mode [ 350.172054][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.182010][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.204800][ T6635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.232037][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.232246][ T6580] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 350.252344][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.270846][ T6580] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 350.294581][ T6732] device bridge_slave_1 entered promiscuous mode [ 350.305747][ T6580] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 350.332991][ T6580] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 350.366289][ T6580] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 350.399338][ T6695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 350.399658][ T6580] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 350.444079][ T6695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 350.482820][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.503428][ T6695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 350.541530][ T6695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 350.578578][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.590970][ T6790] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 350.765585][ T3603] Bluetooth: hci0: command tx timeout [ 350.874880][ T6732] team0: Port device team_slave_0 added [ 351.034796][ T6732] team0: Port device team_slave_1 added [ 352.067016][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.129678][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.144314][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.172485][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.194038][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.229308][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.254231][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.320573][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.328083][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.356500][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.397202][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.410400][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.421214][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.430368][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.439067][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.446250][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.534148][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.553913][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.603731][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.647303][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.654500][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.713304][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.749093][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.802059][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.845949][ T3603] Bluetooth: hci0: command tx timeout [ 352.847973][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.866228][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.926877][ T6635] device veth0_vlan entered promiscuous mode [ 352.934309][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.948064][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.979660][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.003572][ T6732] device hsr_slave_0 entered promiscuous mode [ 353.023703][ T3598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.034173][ T6732] device hsr_slave_1 entered promiscuous mode [ 353.040526][ T3598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.047803][ T6732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.055659][ T3604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.065757][ T3604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.074866][ T3604] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 353.083349][ T3604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.115161][ T6732] Cannot create hsr debugfs directory [ 353.142227][ T6635] device veth1_vlan entered promiscuous mode [ 353.183989][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.197616][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.205955][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.214640][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.239946][ T6695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.255412][ T6695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.316388][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.327617][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.336362][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.345462][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.366156][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.517875][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.543301][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.554779][ T6635] device veth0_macvtap entered promiscuous mode [ 353.572277][ T6807] loop2: detected capacity change from 0 to 128 [ 353.790790][ T6635] device veth1_macvtap entered promiscuous mode [ 354.498214][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 354.507607][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 354.613113][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.629609][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.640783][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.651319][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.661175][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.671639][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.681555][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.692001][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.701969][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.712910][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.722806][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.733341][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.743186][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.754374][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.767740][ T6635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.795710][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.805346][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.839074][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.853883][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.867148][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.877968][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.887886][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.898443][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.914207][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.925155][ T3604] Bluetooth: hci0: command tx timeout [ 354.932689][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.955094][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.975058][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.986096][ T6817] trusted_key: encrypted_key: insufficient parameters specified [ 354.993861][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.011272][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.035064][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.050657][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.076706][ T6635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.114835][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.124368][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.144325][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.165258][ T3604] Bluetooth: hci5: command tx timeout [ 355.165978][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.191023][ T6695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.200147][ T6635] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.221593][ T6635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.240290][ T6635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.255425][ T6635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.515872][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.524718][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.638065][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.662434][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.685177][ T6695] device veth0_vlan entered promiscuous mode [ 355.702844][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.705612][ T6615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.715300][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.757024][ T6615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.818792][ T6695] device veth1_vlan entered promiscuous mode [ 355.830634][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.844096][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.888675][ T4166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.905352][ T4166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.928413][ T6799] chnl_net:caif_netlink_parms(): no params data found [ 355.980503][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.991552][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.092317][ T6695] device veth0_macvtap entered promiscuous mode [ 356.122736][ T6823] loop4: detected capacity change from 0 to 1024 [ 356.139397][ T6823] EXT4-fs: Ignoring removed orlov option [ 356.141639][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 356.146181][ T6823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.155464][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 356.183817][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.217159][ T4165] device hsr_slave_0 left promiscuous mode [ 356.234964][ T4165] device hsr_slave_1 left promiscuous mode [ 356.245889][ T6823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 356.276233][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.293313][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.305413][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.320682][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.330500][ T4165] device bridge_slave_1 left promiscuous mode [ 356.337824][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.343125][ T6823] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.4: corrupt xattr in inline inode [ 356.363379][ T4165] device bridge_slave_0 left promiscuous mode [ 356.372890][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.389073][ T4165] device hsr_slave_0 left promiscuous mode [ 356.395951][ T4165] device hsr_slave_1 left promiscuous mode [ 356.406113][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.414028][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.423275][ T6823] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.4: corrupted in-inode xattr [ 356.425346][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.443816][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.463903][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 356.463918][ T26] audit: type=1326 audit(1718604345.857:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 356.464483][ T4165] device bridge_slave_1 left promiscuous mode [ 356.475173][ T26] audit: type=1326 audit(1718604345.857:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 356.493602][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.555140][ T26] audit: type=1326 audit(1718604345.857:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 356.557436][ T6830] loop2: detected capacity change from 0 to 1024 [ 356.595770][ T6635] ================================================================== [ 356.603952][ T6635] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 356.611953][ T6635] Read of size 4 at addr ffff888054198000 by task syz-executor.4/6635 [ 356.620381][ T6635] [ 356.622714][ T6635] CPU: 1 PID: 6635 Comm: syz-executor.4 Not tainted 6.1.94-syzkaller #0 [ 356.631048][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 356.641462][ T6635] Call Trace: [ 356.644917][ T6635] [ 356.647851][ T6635] dump_stack_lvl+0x1e3/0x2cb [ 356.652558][ T6635] ? nf_tcp_handle_invalid+0x642/0x642 [ 356.658020][ T6635] ? panic+0x764/0x764 [ 356.662443][ T6635] ? _printk+0xd1/0x111 [ 356.666673][ T6635] ? __virt_addr_valid+0x17f/0x520 [ 356.671823][ T6635] ? __virt_addr_valid+0x17f/0x520 [ 356.676933][ T6635] print_report+0x15f/0x4f0 [ 356.681446][ T6635] ? __virt_addr_valid+0x17f/0x520 [ 356.686570][ T6635] ? __virt_addr_valid+0x17f/0x520 [ 356.691681][ T6635] ? __virt_addr_valid+0x44a/0x520 [ 356.696875][ T6635] ? __phys_addr+0xb6/0x170 [ 356.701375][ T6635] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 356.707004][ T6635] kasan_report+0x136/0x160 [ 356.711559][ T6635] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 356.717226][ T6635] ext4_xattr_delete_inode+0xcd0/0xce0 [ 356.722691][ T6635] ? ext4_blocks_for_truncate+0x270/0x270 [ 356.728491][ T6635] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 356.734549][ T6635] ? rcu_read_lock_any_held+0xb3/0x160 [ 356.740000][ T6635] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 356.745880][ T6635] ext4_evict_inode+0xc77/0x1150 [ 356.750818][ T6635] ? _raw_spin_unlock+0x24/0x40 [ 356.755673][ T6635] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 356.761564][ T6635] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 356.767462][ T6635] evict+0x2a4/0x620 [ 356.771539][ T6635] vfs_rmdir+0x381/0x4b0 [ 356.775782][ T6635] do_rmdir+0x3a2/0x590 [ 356.779943][ T6635] ? d_delete_notify+0x150/0x150 [ 356.784893][ T6635] ? syscall_enter_from_user_mode+0x2e/0x230 [ 356.790974][ T6635] __x64_sys_unlinkat+0xdc/0xf0 [ 356.795830][ T6635] do_syscall_64+0x3b/0xb0 [ 356.800329][ T6635] ? clear_bhb_loop+0x45/0xa0 [ 356.805007][ T6635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.810909][ T6635] RIP: 0033:0x7fa47f47c687 [ 356.815322][ T6635] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 356.834932][ T6635] RSP: 002b:00007ffc025cd0a8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 356.843358][ T6635] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fa47f47c687 [ 356.851339][ T6635] RDX: 0000000000000200 RSI: 00007ffc025ce250 RDI: 00000000ffffff9c [ 356.859306][ T6635] RBP: 00007fa47f4d9636 R08: 0000000000000000 R09: 0000000000000000 [ 356.867284][ T6635] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffc025ce250 [ 356.875688][ T6635] R13: 00007fa47f4d9636 R14: 0000000000056ece R15: 0000000000000008 [ 356.883659][ T6635] [ 356.886665][ T6635] [ 356.888971][ T6635] The buggy address belongs to the physical page: [ 356.895473][ T6635] page:ffffea0001506600 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x54198 [ 356.905621][ T6635] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 356.912730][ T6635] raw: 00fff00000000000 ffffea0001506648 ffffea00015a94c8 0000000000000000 [ 356.921297][ T6635] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 356.929859][ T6635] page dumped because: kasan: bad access detected [ 356.936297][ T6635] page_owner tracks the page as freed [ 356.941665][ T6635] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 6816, tgid 6814 (syz-executor.2), ts 356008673476, free_ts 356270234250 [ 356.960677][ T6635] post_alloc_hook+0x18d/0x1b0 [ 356.965441][ T6635] get_page_from_freelist+0x31a1/0x3320 [ 356.970982][ T6635] __alloc_pages+0x28d/0x770 [ 356.975579][ T6635] __folio_alloc+0xf/0x30 [ 356.979912][ T6635] vma_alloc_folio+0x486/0x990 [ 356.984683][ T6635] wp_page_copy+0x25d/0x18c0 [ 356.989271][ T6635] handle_mm_fault+0x2525/0x5340 [ 356.994204][ T6635] exc_page_fault+0x26f/0x620 [ 356.998882][ T6635] asm_exc_page_fault+0x22/0x30 [ 357.003911][ T6635] page last free stack trace: [ 357.008577][ T6635] free_unref_page_prepare+0xf63/0x1120 [ 357.014115][ T6635] free_unref_page_list+0x663/0x900 [ 357.019311][ T6635] release_pages+0x2836/0x2b40 [ 357.024063][ T6635] tlb_flush_mmu+0xfc/0x210 [ 357.028555][ T6635] unmap_page_range+0x217c/0x2740 [ 357.033560][ T6635] unmap_vmas+0x48b/0x640 [ 357.037884][ T6635] exit_mmap+0x252/0x9f0 [ 357.042108][ T6635] __mmput+0x115/0x3c0 [ 357.046156][ T6635] exit_mm+0x226/0x300 [ 357.050207][ T6635] do_exit+0x9f6/0x26a0 [ 357.054350][ T6635] do_group_exit+0x202/0x2b0 [ 357.058925][ T6635] get_signal+0x16f7/0x17d0 [ 357.063413][ T6635] arch_do_signal_or_restart+0xb0/0x1a10 [ 357.069029][ T6635] exit_to_user_mode_loop+0x6a/0x100 [ 357.074323][ T6635] exit_to_user_mode_prepare+0xb1/0x140 [ 357.079860][ T6635] syscall_exit_to_user_mode+0x60/0x270 [ 357.085394][ T6635] [ 357.087698][ T6635] Memory state around the buggy address: [ 357.093322][ T6635] ffff888054197f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2024/06/17 06:05:46 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 357.101469][ T6635] ffff888054197f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.109702][ T6635] >ffff888054198000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 357.117754][ T6635] ^ [ 357.121903][ T6635] ffff888054198080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 357.130055][ T6635] ffff888054198100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 357.138107][ T6635] ================================================================== [ 357.181890][ T26] audit: type=1326 audit(1718604345.857:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 357.207653][ T4165] device bridge_slave_0 left promiscuous mode [ 357.213913][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.221878][ T6830] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.245114][ T3604] Bluetooth: hci5: command tx timeout [ 357.260144][ T6830] EXT4-fs: failed to create workqueue [ 357.276730][ T6830] EXT4-fs (loop2): mount failed [ 357.309346][ T26] audit: type=1326 audit(1718604345.857:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffac7cea9 code=0x7ffc0000 [ 357.325131][ T6635] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 357.325145][ T6635] CPU: 0 PID: 6635 Comm: syz-executor.4 Not tainted 6.1.94-syzkaller #0 [ 357.325170][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 357.325180][ T6635] Call Trace: [ 357.325185][ T6635] [ 357.325191][ T6635] dump_stack_lvl+0x1e3/0x2cb [ 357.325221][ T6635] ? nf_tcp_handle_invalid+0x642/0x642 [ 357.325243][ T6635] ? panic+0x764/0x764 [ 357.325258][ T6635] ? preempt_schedule_common+0xa6/0xd0 [ 357.325276][ T6635] ? vscnprintf+0x59/0x80 [ 357.325293][ T6635] panic+0x318/0x764 [ 357.325309][ T6635] ? check_panic_on_warn+0x1d/0xa0 [ 357.325326][ T6635] ? memcpy_page_flushcache+0xfc/0xfc [ 357.325344][ T6635] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 357.325364][ T6635] ? _raw_spin_unlock+0x40/0x40 [ 357.325380][ T6635] ? print_report+0x4a3/0x4f0 [ 357.325397][ T6635] check_panic_on_warn+0x7e/0xa0 [ 357.325414][ T6635] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 357.325436][ T6635] end_report+0x66/0x110 [ 357.325449][ T6635] kasan_report+0x143/0x160 [ 357.325464][ T6635] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 357.325488][ T6635] ext4_xattr_delete_inode+0xcd0/0xce0 [ 357.325513][ T6635] ? ext4_blocks_for_truncate+0x270/0x270 [ 357.325532][ T6635] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 357.325553][ T6635] ? rcu_read_lock_any_held+0xb3/0x160 [ 357.325577][ T6635] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 357.325595][ T6635] ext4_evict_inode+0xc77/0x1150 [ 357.325611][ T6635] ? _raw_spin_unlock+0x24/0x40 [ 357.325632][ T6635] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 357.325651][ T6635] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 357.325669][ T6635] evict+0x2a4/0x620 [ 357.325692][ T6635] vfs_rmdir+0x381/0x4b0 [ 357.325712][ T6635] do_rmdir+0x3a2/0x590 [ 357.325731][ T6635] ? d_delete_notify+0x150/0x150 [ 357.325753][ T6635] ? syscall_enter_from_user_mode+0x2e/0x230 [ 357.325772][ T6635] __x64_sys_unlinkat+0xdc/0xf0 [ 357.325791][ T6635] do_syscall_64+0x3b/0xb0 [ 357.325811][ T6635] ? clear_bhb_loop+0x45/0xa0 [ 357.325831][ T6635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.325851][ T6635] RIP: 0033:0x7fa47f47c687 [ 357.325865][ T6635] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 357.325877][ T6635] RSP: 002b:00007ffc025cd0a8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 357.325903][ T6635] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fa47f47c687 [ 357.325915][ T6635] RDX: 0000000000000200 RSI: 00007ffc025ce250 RDI: 00000000ffffff9c [ 357.325925][ T6635] RBP: 00007fa47f4d9636 R08: 0000000000000000 R09: 0000000000000000 [ 357.325935][ T6635] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffc025ce250 [ 357.325946][ T6635] R13: 00007fa47f4d9636 R14: 0000000000056ece R15: 0000000000000008 [ 357.325962][ T6635] [ 357.332517][ T6635] Kernel Offset: disabled [ 357.616139][ T6635] Rebooting in 86400 seconds..