last executing test programs: 23.071655718s ago: executing program 1 (id=230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x58}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 22.868212284s ago: executing program 1 (id=233): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000300)={[{@noblock_validity}, {@barrier}, {@resuid}, {@noload}, {@dioread_lock}, {@bh}, {}, {@bsdgroups}]}, 0x6, 0x641, &(0x7f0000000d80)="$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") r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r8, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffc}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206104724e000000000001090224000100000000090400000103000200092100000001220500090581"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.809374289s ago: executing program 1 (id=258): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x45, &(0x7f0000000140), 0x4) 16.686042789s ago: executing program 1 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 15.472949648s ago: executing program 1 (id=264): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000001c0), 0x1, 0x76a, &(0x7f0000000fc0)="$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") r0 = socket(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) 14.988767787s ago: executing program 1 (id=266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}, @call_mgmt={0x5}, @mdlm_detail={0x4}]}}}]}}]}}, 0x0) 13.083499613s ago: executing program 4 (id=275): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000240)=0x7) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1}) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x3) r5 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r7) ioctl$NBD_DO_IT(r5, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2144d4, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d63703835322c7569643d69676e6f72652c66696c657365743d30303030303030303030303030303030303132372c616e63686f723d30303030303030303030303030303030303030332c66696c657365743d30303030303030303030303030303030303030302c6e6f6164696e6963622c726f6f746469723d30303030303030303030303030303030303030352c004524cde9924a2eb7ed92c6d3f4"], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0x0, "d371396d001c11c3facc88a93b3ee7c6669204916b16778dce41e101756ce946"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) epoll_create1(0x0) 12.224813433s ago: executing program 4 (id=278): syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f0000000200)='./bus\x00', 0x3018001, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172640000008000200000ff5f78617474722c646973636172642c7768696e5a000000000000007365722d626173651a9603642c6e6f696e6c696e48c8b8bd9db81b403801c199ffba3691ebc17570972cb0aab560ecd4a62772a15b05a04f8812838b6d154a85515cf6a313e8043c58707a92ff4e0d69fdd8fd380734190ccaff409ba8953c23fa98f1c09d49447f1e1d0cedb97bb4daf266dcc2cec17b92cbbe1303abfc278ad789ffe0f34862de20f795a4b968385446d1964503b1815a337e284216bd6809000000000004000000d593d55b7516ceab7cd6f2aebee0e3b4e72511cc77b8aeb6cb60fe02009fbd67bd8d700393ec17bc2e14a4811bdefdda2f5f5ebead17e18e7fa077c6bf2fe6d11ac484b13898ad0c52acbc155d3426"], 0x1, 0x54f8, &(0x7f00000017c0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) 9.488461616s ago: executing program 4 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40408c2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3e0400000000000000000000000609000040"}) r7 = syz_open_pts(r6, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000080)) dup3(r7, r6, 0x0) open(0x0, 0x0, 0x0) 8.059774073s ago: executing program 4 (id=292): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES16=r0], 0x1, 0x388, &(0x7f0000000d80)="$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") fallocate(r0, 0x10, 0x0, 0x1a00) 7.48453487s ago: executing program 4 (id=295): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x3}]}}}}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000380)={[{@gid}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x101}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@discard}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x5}}, {@allow_utime={'allow_utime', 0x3d, 0x12}}, {@errors_remount}, {@namecase}]}, 0x1, 0x150a, &(0x7f0000002c80)="$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") mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0xa, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) 7.443343493s ago: executing program 0 (id=296): r0 = io_uring_setup(0x669, &(0x7f0000007940)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/rcu_normal', 0x0, 0x0) read$FUSE(r2, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2065) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES32=r5, @ANYRESDEC=r3], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x2004c814) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000001d0000003400000034000000040000000000000000000003000000000300000002000000000000000000000000000001050014000800000000d200000000000902100000005d61005053d3e643eef0f44c78f2aeee008e0d6530ef8cc89ec45f4f9139af916e1b259573cb9f184ba3d8e200"/137], 0x0, 0x50}, 0x20) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0) sendto$inet(r4, &(0x7f0000000200)="cb", 0xb600, 0x0, 0x0, 0x0) dup3(r4, r1, 0x0) 7.223651671s ago: executing program 0 (id=297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 6.74530366s ago: executing program 0 (id=299): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x22) 6.430378756s ago: executing program 0 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5.444552507s ago: executing program 4 (id=303): fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x84002, &(0x7f0000000540)=ANY=[], 0x2, 0x570, &(0x7f0000000b40)="$eJzs3VFv01YUwPHj0EKXTWjaJoSqApeySUUqwUkhKOLJc25SQ2JHtoPaJ1StKapI2USZtPZl5YUNafsQvO59r/tGaO97WCbbcZc2aVLa0nTs/6vAN/bJ9bkh8uGmdiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAMu2yaeUNqjttcUgezy75XH7I97e/mnsWQ/YoY0R+ZmpJMsuryF/9uvhT9NSszyaMZmYoWU7L98aVP738+kUmfPyShU7G5tf10pd1uPT9k/MTYMz5ZVe06gefUrapWTuCpUrFo3l6sBKri1HSwHIS6rmxfW6Hnqzn7psqXSgtK55a9plstWzWdrrx3q2CaRfUg19CWH3ju7Qe5wF50ajXHrcYx0eYo5l70RnzohCrUVl2ptfV2a2FUklFQvtve/w+w0xtUGNVTwSwU8hMiUrxbunvPNCfiFflCIZ+uMPeRvojxv2kxXid8BAeOLtOt/1ITR1xpypKogT+2lMUXT+oHbO9K6/9Xt/XQ/fbW/7TKX/Y+SjdPS1z/ryaPrh5U/w/I5fR+NmVLtuWprEhb2tKS58frL5OOf7yjMkR2eh9nDoysihZXHAnEE0fqYsVrVHeNkpIUpSimPJZFqUggSiriSE20BLIsgYSi43eULb5osSQUT3xRMie23BQleSlJSRZEiZacLIsnTXGlKmWx4l7WZD1+3ReGjGY3KH+YoMKQoL5iTv3HOzvhIzhwdJ20/gMAAAAAgA+WEX/6Hs3/J+VK3Ko4NW2OOy0AAAAAAHCC4t/8z0SLyah1RYyh839OFAAAAAAA4D/IiK+xi6b1WbmWtNIroXY/BMiMN0UAAAAAAHBM8S/0r0aLbNS6Jkb//P8AU6eSIAAAAAAAOLafR37HftC4YPzxp/j+pPGysfSlsWFFcdbGueR55/b3GFampXMhacd9FSe6Xdp6xuh+++Xul2C+7S7/7nSG52G8SwLGxe6z9yYgv8j1JOb6arJcTbcke8lWnJrO2V7tfl4s62Im1Evh98/Wf5B4+K/depTkeruV++bb9mqcy8uol5cb3esi+i6PGJLLi/TzkyuDRzwZX4jR3W/WkLX1dsvsHX/3tIy+szOG7POVzCYxs9lkmd07/qlon/ncoNFnZDeL/DFH/kpuJDE35m4kiwFZFAZm0fNaFHqzONJrcYgsFkZlsXDMLABgXNbib/0ZWIXSQ/r+unuEo9zaqP9lnEh1fyVzSczcdHxgnZgecEQ3Rx3RzcZSWpmT6nZ+aHWTHZE9WfzWdw+kg2pstN9f91XVNz+KyJu0qvYNP6gVjOglPPdi4zu5tLm1fWt9Y+VJ60nrWaGwUDTvmObdgkzGw+guqD0AgAFG32NnZIRxZ8Ss+rPuKQXppwJtWZX5+GqD+IyDKbnQ32u25zSE+f2z1gnp7b+TFsu/Op3O/IhZXdJv6jCxye1lAAD4kMz21uGh9b8bN6D+z4+Yd++t5cNnx9meu7UN9prLEQEAOCbtvzWy4U+G7zuNx/lSKW+Fi1r5nv1Q+U65qpXjhtq3Fy23qlXD90LP9mpR45FT1oEKmo2G54eq4vmq4QXOUnznd9W99Xug65YbOnbQqGkr0Mr23NCyQ1V2Als1ml/XnGBR+/GTg4a2nYpjW6HjuSrwmr6tc0oFWvcEOmXthk7FiZquavhO3fKX1SOv1qxrVdaB7TuN0Es6TPfluBXPr0fdnh/3aw0AwFmxubX9dKXdbj1/j41xjxEAAOz1LlWaM8YAAAAAAAAAAAAAAAAAAAAAABiP07j+b3Tj909EzkAaNP7fDWPnTKRxNhrjPjIBeN/+CQAA//8IzlUB") r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) semget$private(0x0, 0x4, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) semtimedop(0x0, &(0x7f0000000200)=[{}], 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f626172726965722c626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=00000000000006745,\x00'], 0x3, 0x6a4, &(0x7f0000000100)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') semop(0x0, &(0x7f0000000080)=[{}, {0x0, 0x4e36, 0x800}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="850000000000000007000000000000009500000000000000dacf26ad1f7bc616a25a08a001fe78ba7fdc4058684ee2a2d34440967ae1893a24ed7e66dbf1a2bea303b6bb61a037"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x14, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7ff}, 0x10}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x1e) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000002000190f06003fffffffda060200000000e80001dd0000040d000a00ea11c21d0005000000", 0x29}], 0x1) 5.40507046s ago: executing program 0 (id=304): socket$alg(0x26, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)=""/2, 0xfffffcc8}], 0x1}) write$tcp_congestion(r0, &(0x7f0000000000)='westwood\x00', 0x9) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 4.901093861s ago: executing program 0 (id=308): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpu.stat\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001a0000009500000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x5, 0x809}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071111f00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="80fd", @ANYRES32=r5], 0x9) 4.564603898s ago: executing program 3 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setreuid(0xee01, 0xffffffffffffffff) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000000), &(0x7f0000000080)) setreuid(0xee00, r1) r2 = msgget$private(0x0, 0x3c2) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000100)={{0x3}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="9dc441e86344b176b4a8ceef23b0d9470d54955d304693a6de4b97c6286a46916ee3c7fde0b97f8096495c19c7227087abd8b02128853c2a42ce574a75dff71efc30ef378fabe63f6445f5228f3893d69b4d8d3a57e6c00dd6ee40b867f5999e37617a204408612e7d8c28ba0356034bbc1188941b79cf69aeebee3f013a07c69d01b65def14f424756213f8f69d3e2bd4d5a5db3ee64d13603362a0ead1cee66bbf18a9bb479000105f1e62", 0xac}, {&(0x7f0000000140)="22ebdcb4c022f729c2967429fbdcc7b5ba99f96fcb7685f873aa525955c9d9b806f4d7e4305366e0e39d30da2ce88004c685ea060104327e94089768babf4405b554ba987e4414a5d7e487fef1db", 0x4e}, {&(0x7f00000003c0)="6d848a5ac44e6788ba67e0eb1ce6568f6b8b68bb8c2e6533b889c4ed4b55e8f98e05b560d2171116373a251c97880687513b1bed13fe6db5b27f8a96094492e5a9c9ab35689031afc1568c2e8e96f1fc85ed58b417d09c3ce3f1287950ba855b5e4955bf40c78ce25d5740f24e29dadef122bfe87773f59c12bb60ec3135a42f943db4c03a58993cb13b95cebbbae7fb684034b6d3d1a5a1363436ad9224b1f5d283a5afd7834def49dfdfbe5aca3cc2adefba29635c3427ccd7ab9b92b5f68edfd232ac5df19860f1057fc69ecd1fb0d86fe708f7e99ce61d76fc2bec34c9563da68081a10e9fd082f25b0e9b87b8428fcc953fb331f8d71ba4d278bf9b9589dfab5a3986682de669aa81e4390bbc71065ddd2cc131fa04c558729ca1aa67bc1fdd117f7b2af4c7d09e8ec6329e5c021b89269d3406d0f850879f929c591de5f1fc42f3de64b56a39bef1853f5d78dd4e8b38dadfe70772b100bc061aa5428fc0c7d6bcf8c84650e5b2e04c2a2a0293b0f4a68506d46d6a2df41e685c94ba49c1b81f9fa1f7f48ce56ed5280fa1bd4f08445fdc457683dc0a08850aaeb2d8e42c5777c462ba110ae72b56c5e625fa4c435fbdfc96989124dd899847b3f3697324270ffe32c58bb1b3f591aff29501b29f67674e252d5a464bdf458000a593bcb18fccd61dec0d1248306ef3c82a609e2be282bf68ef22ff03e49346e0696e2402a7755086433209363907ffb80ebd8066936c7c30b02bc35b92a65dabeec6556a752854b1b9a5a4571eae3c7659b15c94040d65e55c0e91f8aacb77473764e1ed228a2acfb29ad88fb9415fd6a10e729f897a8608833b99f137b0cc7eb7e4e662d8e5fc29466fc1d991ebd8ed7034ad1a298362eb5efbffdaa99f2ca1122490996554799d17eaa4a45210b6f1631c0b84dda5339d0faca70b6f04de6ca2866719b47ac86d77264432963614a1a0af5ed1840c8f94fff6f5fb0fa5a77f6c815996981ffdc4227aee7c1e7be6708dd15a96e30f877227629d6d14e1c2e597c595f05327a1a6bf690b82e1ae003be8a1fbfde546a0a8c38d44467fde011779203221d1925942b5df6bdfe3a2ed101c2c1b13bcd0d9adba6bfee0e1d599b5ae9c9c539840c96ec8111cc8da58452bcb9e9fc4527e203d4ea0c21a534a9b703fb0ee021485af74842d908453b866feff7af4ad82613e5bc789b67d623100fb6c2bed1dfac201ef356aa444731ce9d83b28eb443f04a62e244b351a4c2d8c82542d548b2ca8ff8de026cb9d6870d2cafe153f1abf02887f6d103b2b44e5ac0f0f480d08c6d183985279e566fcf5443ce47fd4f2518e59af74e9d745ee9d51b9e42f7025a8410458db50dba7dc5cd0d281ff324d3c1e25d1318da7e29a87d77b2bd69312b583b17e66b3470c433cf164a2e6cdda4f306d182a9b741407ec5cb314cccd5375aaa85ab9cd74709d44c42712c66391dfcd29f2d3dabdf4772a56e17990504323ba039f386c1ef37290c82eb6603c04bae766f7c90f5cfc0d5b59ebbe87502e91289b0c4b61e9f3894713c5d1dedcd084d4ee9f96843075189999cf6d247c9b23d3e7828ed0c0f08461e90eb8ed92818a76f2b21af8c537ebd1c7d79f9193616d94b660d4c8a253c888a4e633b0c25898928e5b9b711e7669e0b7092fe00261a5e9d13b1a469ff46da4bb4e1d81e897824dd907d4ec6b1d16c974fc21cbe2add84db8a01f36c36830c68bc2ee924a99a80a2d6353da2a854708fee2f6129997a1b5bb3dbcd632f9f250783a97375b71b8e920c02a0dbfb71022a893ea0aff8255179de43e6fcd0b4b1c8efc62729e525f043ea850aec9841644c430a86b5cfcb1dc914c6cc156db705d9ae3b3d3263452ab2d2a01d6da32d535765ff34c50902b5c8d2561d5913eaa0e96418dba85367431d15e9990a868d18a5f8de60300ad62de16a47e0264131805a9b5fb8837386cfc80a2ed8cb1a1c51d1697aa55402bc154e5bbc337c1a09031fc92763e56e5e08dd2050096e3f69e63f9e49621b3d7de480613882cf6712fcfdfb783238e85c3e34599c5d0c401256d9f28790b9fe259843c0f727930de39ffa2b0250c0f22b27e7cdcec54511096bd49dfef421d7741a7970d891f7793f619d3fcf7362c589a2a35294df70277df9f5f8783a53f22433c8173391073bcad555e8d13bffc5010afc712cd16b4bca99cd6722cd2974694645c19f82c56a5e0e6174630dbb8991ad6aec3d913a3f06248d9c6ba47e6dcb8032993de49e21d6fc6991946c126a0c09974b8c0d5e9992b06c1aa0d5b0dfae01d8b8b2c0e0045ad96b171544a95df7a8bd1ea7e3bf7db3e6ee723464ccb5bf36f9bb90f0b7f23328e4ccdf8e759fb12284bafca2033cffce91cba1ac66ce80e7b991d66ea896d3db229cbc272f238abcde79d97b9a10e0bc89e4cdcffbfb159aa65d46a85c048630f7b57150b8d29594c36570837b01baf01d74141b96e7cb669df50a58ea81a993aa47c90b19bb609d003337fa796e073ae2203ddfa98d2426c654f70edec6f1b9bed7d096b3dc26f1d44565fa52e8a8621527f58f56dd49ec84fe649917ee482345ec405776b4051c1c7b0f322b29daedec80d59c973594fd6146b990c0d9641db8271fd16b89fc5d9c454a19d00f33f1759842345437cb75e7db2278ee034b5b903231dacad6dff1fc5dc39f592168a71c75adcb14647bc0cd83dabd4166739d8529af66c811e06209a9c90e93e5458a8ed4019497785579f4dac845b5ededd932aaa75a0fce019e0da33ad0f525bf79d3f10cfc2205517c171659ffbcdba14b57d9ad413382caeda4d52601b2786667aa726ad55364f7d3e07fa8ec9d8404dab944e7f989f4e09886fdfe68885477e931e3b9e43897afe0fe38c5f7619c5b05266a6266b805bb588052a2034ef12dcbac36789a84d9746ac2cb6cf9084678928d1778c671720531ba53b3b9ba115a2cc144d0723eeade8e9cf51d06bb5a8b682dbc04485220d83840062639c83ec35a16306163c38fbdb474cfd651559ae499ea46c431f96542b7e714bc8db4a8ad08c2c2ff6b5f241d15c39bd09909b72fca1b7f736944a611d6acfb1514fc479af129f0ce1dc48392230b378e57307ad1bf1c1330240e9381ecb580e816ef48ae59e3e3805829addfda56b0641ae54fff1a90e935a65a29be1e8acefa196d70b28fbd8c3e7a06f2b9b4a945c5de03f5914b247a00d06504877c8edd11ac298d52a6a66ae15ec80aecaa2a6d6c970f5c2f9a75ee1ae917c3447e6ac7b460184258d4f9e42a6e61dd9061a5c70b0e07c53225812d87316d1a6e37d0435ee80ac336961691330fae4cd89326b4acae3b53a504648a4ffa3d9f87eec1c4ef9664c2857d985b8badc57657ae9d3704f4f0b9f88231e6c7154ffa818209eaca2939fdfcf9b1dfd61b1f4351d7b65bbdc47c0cdbe2f5031a762f54303990c2de0bb2d4a51c4af10c1a9ee993732d669be5fe6065532839c229a7c0e12e6855416e66746c47475e57945bca1969b7e7f9c62a3aa43e8c25be5b3f09afcc382a5fcd3c4df71b904ea44a0ac5ea7b92557c3b7fe10e47a96ce3068bf764b36e624469c35970202f260e9858ba8e8c475722d79a076685514db4f12cc9a8ea5d654e51ccced5f38b82da4cee693f6b84c4c7613bb99da0bea7356de12cbb4546cbd8bd767e2cdc97ebf2ea9654fe5eb7892fec7c1f9dffdafe9acd049ed56f91252d24f2a33cd6f81e7e8881ed80861787cc4122bfd7bbd7fac243b380dee8014f3a43f62e8594b8aa714beeb465545d66d3c27fb2908a112aa6579d14850c2b6a0567e5d6299d37d58559510de2cd3eadd999564e3cd2d84f496e4b7711d37943906414c1ca7b8389ad95b9658565fe4ea6a7094b0e569e1b904109ae72008e6475be7ed74367018b810d7f5c1f635808c359846c08129b13a7f8f01cac9776b77a78831ae22838778ab79a2e2a6feafcc984d495089c435f4a0d3bdaa7340d2f7e022038515a68e195eeaefca40f9ab17023a1bbd976ecc12924669c77ca2a8ede34d1fe494b2cfd114c509ae1548b0ca9dca317b9515698cc67ff2dc17d2bd9255979ceb6346acc4d52d7e1490fccfdcc3c81224db2c502f7865bd65bfb4dcbf7e4938b94c19ff269241143e274bf0c4d4219284406c23fdbde665cfc3597ac5ede85b648a71b543a549475b7bbb0c81840bb9ada8e2787cfb2f8d8eca4921e344e5bebbbd52e63fd0ee4a315bf1a8e48811e0d43fc524aaeed903af78f40b877e094f644b0366426bf945b86286c4c38e1bb4aba387a2bf1b051af85b0362604862e29885303a72e36d2839fc9fe129d68e8e86e1a620aa122788b4c92b53c5b3ff940ec4ffa9af3a5d755445f2c06e5983cc476dd70173cc4e84ec8dc39ea8eac6198c779b5911b33ea51180a1fa6ca5e25e035e2a81ff3ad43b54e4fc6df767d262337e887653115227dba18d44ea0bf50e04407722fbd7a2c70cb96650b5f88fb6725d9359f4fd5ef8b31e0b0153d239e212c4368d5504a50dc99294087c9b3c03604ebf2c52a723354aba3cec798caee13b623a5b6113ef369d548d0edfd1af3e871d29ca6005190796ef42c5e6f670e33a793dff0a7a08fc38b26fe54c24ebf93a1fca6d3968d91f59f54e6247ae793257055dadcbbc3c41967a19271a41ec7d4d7f20e0f7552be347cb45e0fcf6ac46afc50a24d0579adf467191d8e76b22aa353f1a40fa05a97fde13ad15bd3547af7978a5b9aebfd544955d2c391b5546f703b78690114ac2107a210e4fd34031879ab528d6d8a0b4086e89eb19a1f4d6908087e6a22d78dcb6e25393c90544b023ecf8b37d1727cffc9b1c7384250c0f7a23abcf9180e5c66c0806657d53ef144d4ee029a6ec3b67267455c6f8e4a1f11e77c49308a11a0e532211435fa646ccb79976b74bf2d19a004d1d77ce4111289a45810eff308e9203c799246ad1a8e3d31ab36d5942c5c27fc74acc0143302e292f547863924b8f472383a233ba6db76f3aa643c82b1fcea8e3b26f14503009debdc9baa152140397bc52879bab26fb9a2630f79ddc26e3b9ae90ed2925e1b5680402ac4af5bfa1cc3b38197561f94cf6e9fb63c42ed30958f8d31e3594c785acfa7cdfe824a7058da71c21f0c8360af29a8b5945ab1765ba6b7e846f973623c90dcbef9bb946c9ee050e6a15ef2f835d7227a790b5540090800da7587c04d8bfe8eba262b7749c23428ddce2dda8d956e8fbac425ecf69b2facba50e681a08a1c4e9393b592be078a7164f329ec6fff57da2469242765662371f7e3ac679a9003621ec0b5d45f875a1da6162da361f2ddbbda409d6d3569fbd2eead963605f5630ad0d6257a1be769ed24c1fd47d1341ed66e1cd68375858d9b88b1fcff67118bdf9d2956f4e5418631f9fe9a0ff124440f7251bb4424ba0ec4a60666c5b6582b750fa57a3f62e79a9f055d41f95c5efe14102b6c4febcda7eaa1e659a4cf38616b4689c2d08f2624e473666e40efadcb1582aaaa560e99b08c1433b32b4b45872bb6b509ad6fbad86b15f8066447dd38f17f0c0f254260f5f96e7528012dab99c8c67a2955ed4dfa42e23658dc4b452378ea550228cb932806fc6f73824a0dd0e6e8cbe8d20e0e4d4091b794e99a1a357ecbf12db0e334f02932ff1277557807c6345730b1e2d38b6cbe8837f779c95f8e99e04332c419491155e876feab143d8aa4e24ef9c3f5fa522ac3dc878adad365a53f99dbec833cb65cb30c0c69b8a06816e83e8768a7b", 0x1000}, {&(0x7f0000000000)="32669bae0a8e7545c566094ea235dbede1fac89958c64e", 0x17}, {&(0x7f00000001c0)="4745133a10b4320f502e7f3525a93d1d6575f5c475f299044ebef5435aa494025445e05d21ded8d351bc2d2d597c94bcfbb1d615bd5b8697edecb7a66cf97dbfa8f8a6ed8f5cee622d4eda88695847777e90a93d74da84621bac81d53b61e58094206148780c494ccc08c4b4005196759fb7cdb3c363b72c1370aece1676c9f8271a614fa15f8e2e43173b6867b437d6f2db4b635978b2af7163ae6e47877959a4fc395d6ca81f21abd2", 0xaa}], 0x5) 4.272833782s ago: executing program 3 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="5300000007000046009da70028b1ba1a82151e006ed40e8598a2f989ad7d68f15f976f8699e68667dd7a6aa14420f8163ee7e3396a7a8b49f47d6d48da3899a8f14782a76c000000000100000048"], 0x53) creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0x0, 0x10, [0x9], &(0x7f0000000000)=[0x0, 0x0]}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 3.8067312s ago: executing program 2 (id=314): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0xc, @sliced}}) 3.012031795s ago: executing program 3 (id=315): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x10000, 0x0) open(&(0x7f0000000080)='./file0/../file0/../file0\x00', 0x53f802, 0x0) 2.941679301s ago: executing program 2 (id=316): r0 = syz_open_dev$video4linux(&(0x7f0000000f00), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x101c}) 2.837057349s ago: executing program 2 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) 2.785458853s ago: executing program 3 (id=318): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 1.84297915s ago: executing program 2 (id=319): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, 0x0) r8 = syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0xee01, @ANYBLOB], 0x1, 0x0, &(0x7f0000000640)="802707a889720fe4712f0887261cdab122129747f66c3272665983fd618a45c07b3d0f38a5d1eed79f1e5bf5056023354b09a9728885239b3cda160b9356847d285128cba76b0f052ac8af8202ce1fb18a551f56de50be7581c84a20cfc3ea7a495159ce1967ad7fe49b15261d8df357f4b499a092dabc54bb81454c1f5fa240f7cb9e80e3ec47274eced8b4f33397044ddd5e8af6c105c170d42638d77a99e47199fb163fce5086d14e4bfe1ff0b2e2031524bfc9fab6f5afd671a0b331047e812af49a1505bd82be4f755a49e7a35ddc33ee4aece3d111f70fc00b360f3e06f4e13c1d1c259a6053775438b874f1eadb2656cfade124f398cd46b5594be4a1455541c0c0a3d3481efeea1280f1de3c2942cf34e5e2bd36168067ca6621cb58e8ef540f5059ac4efa5c32e2ff6d72abfdd87f4b5f0fcfeeccd8ff071509e5d67ab3ad202e035076f366984ba39b72a9d719dbf8c99409f1ecd616fd11f2421a3f6aa8fb87bc363bbda33b3b47eb6b96abdde6d91140ffd4998f692c1191964662aef6aee3425be528a9c6500e5ca30fbd4508d305414230e9b0093cd24ebd3479c3ccaa3a28fc4d39a16ff2f16cd5e2add39ba06c591f5be5c5a48002cb1f07d5cdc82f53b3690cd6eb03e3c84ccb16f6171491afc9d0514fdde2276a6474b43551145adf2299ddad7491d449da6f43e1e4abd9c6dd7ad3077786a1ad782a5fd206aa21279919d98f670426a7a29bca81442111c227d295207a87df9c93da45e5945160638fd217c0fbf085934d8c0430283314440436f9add78d109f93fd02dfae1752da9365ebbe21aade7f7d56f3bbf01c8ef1acb809dc9c3e1c1d99bff3d1dec1646ad9787a21f45d3d19eca3642dd7b29e68b92f9c9440a19dc58cace7d3ba168caaff179ef3f5856f8d34c6e1500c207f3307dd97c03eb559a692d9cc60e610af3e15466cf998330c0bf1ff488a981aabfaf89e7e1584c13fb6dce71f3306a2b40719d904f6fbecc20ef62313bc6f6e5b0a0f08258d1c3823436a8cc3e19498f77ef7f11f1f2791d55a0268c29193db0b1ce4e409b1d4ad684fe2bee0dddcfbeaa816634b225276a591605a2e74f6c5741bdd8ec9af0007b857ac211cf576de361680aa91e496d5d0c740f0b679d4df3d4335a1c92681072794d15380e56c454f39de64897001104584907dd828367dc434ff87fdb905d70329631f9c49fdb1dd31c5f5d707c6afbe0dfbd6e935a013a74727108efb88bfc45ee5458b5481e703f8140829f9c723a10a3738aabf5306759b7aeee477f3fd9a78720b4195fd2c4f82837dd1fe598a59f5193cb1e63cdeda44480733430f9645fe4d0c3fb23293a16731345b2151bf092b227292fc1ae0b4f406ee73936027fd53a43d86c2b21d529d66f530cf536c467fe67a4a08e9679e39c027dad0296464231836e1855d3d163419321eab21c79fd424c46cb4787d6844c7724911c6d37971b16730fc3d26192785e965b4b3e4d00423c2173409078e00e6d1f96ec6be3f353cf425078d2fbf60dd124e3eb85551010414346591460b2db3b26c01f6a3bdbeaff050ded258a45d4dd91664bd2c7fa6c52ea1e06a0e7304045a15518fa64b51e741bc7d87007737193fd08aeb0e5211eaea75b387952b072e0db50186d7c234083a1758d7a6e1090066ad0622d17c18cf66c731b28c1efc3a8d5a6d3c75a7f2b50c0d90a7a148b4bcc22927a04caf32a2b2391765d1fc5b96cdc89bc2ee8596d709454d13a68bb40ca5e26918d0b5321a868d92e331505a7afeb66f84ad13d959b3db301999a6b47f2c217303356f562360c07a9f08370ed29747a26c607e7bbc43f872562d85821dcb6944fd89e16f95c5249f6a9831292fab7781ecd6273a91e6a4abcc018585f106f121009c18429dfe86b8e3994ca444e7c423eb20a433c0e4f211607cee2291ffd5bf789c351e19dd6547a4467482ec1789166c76842bc7e12418bfa124f4af953fac27606d8c429eba915dc544acd8e366519212a323646bd0e2f9d7cf0a6cb77eb711cc5b53b2e1624ed69bdae190fd1fb2de26fbe0376bafc5e28fbee3f11195201cfb83a2c99e42ada34fe870c44bbdb1e665ab95772e07bbfe68c91063c0c690be63f9bdce81c99953894205a2f11dd566b349283e5b1b8bbf32b4d4d74bfc0ff9dea32c160a99170ff4deeebbb26f30094934bd636313f30e407069422db89862768ca0ee4e4013520a228c70915ec96cfbdc86ac1b87d6bcbd36971f607acaed33560eb5dcef8e136b3a45adccd61a8564c031787f83e3f6f9cd65d66292e6ea8af5c9f82d986a8fc9c0b694da119c92f10ee68649daa36ebe6ef96c51cb3cfa3c7aa7eede152e1f4da10bc5a904066b6696a98167a548c11c2522bf27211ea6e314a73899d16128050483bdd8b8755acf8a0b4303c034a67af928baa662dddf5dccc00fd94c1ad35694c33e076325c6684c6ae3851cc9ae1a8601b094d6a9c038769580ece18e502a70f71e19c14d67819801f7e6daa03f3492426c4ff840a7e3cb188e058ccd18de2eee6132b93984a0d05839239a41b858a89ab1e5da107db97bd66f9d7a78c40a9b07360bc97b87e80c63a9349b54badebe2f3253fa779a212df60c3aad6b080d17b095d5d0ff77010db0c1900d0927ba1fba72ce40da4ff5bbe39139f923ec2e089ffc1d05ff466806b10df19fef97144bde81fd1e0e257460a3abaae9453c9fe79ea4e3d3b81322760b8e928ae22fa5d39311b6ca04a284a933a8072089e10dc06909844a0c3f4b17d58b2aab32dd17279683929730118feda3e9a94a657b1afde63f44bcce53638994a133f10bbcf74a43587db38a8534f48f089e17798ef3c75ee416e568bc635cdb0150cedb662035dcaf9cd0d219c3d44be25935b03c191522408b02d666a2c303843ecb6e5cd6c11f00f753d53407439af67bd13e91a0c86ce66f97c075294ef204765879e18e1affc7fd9b88df81a5dbe573cdeeddfce361204f28612ae34a6b5228c66d9ebce2effc92e4c9dd1a2d23bb5ba71cfd05a8db6ce1ff492384b21e46a42c07645d974bcdb5b66775d309f4004e04f2f9baa0bc6fe0c78a0a01fb0dbe3380a602723706fe1faec1ec6a302be87e209d4d6aeb8160e8d0506962b521b32beb1782ae7297cc9b6a35963415100224943afb9ecdbc70942f2a221f7574ecc34cb923e91469370b80b70ace0a7772b76111595e030fec5d831ff11bde76f6aee6d896b415878505348c4cd10b9475d2b1f7e16ba3f3b468112aa2a3ce184fa38edb2b3642d0c8a269e1333362d3dcd0589ec5f0990026631c193e817227201345805917a27900bc1957f9ecbecedee605a9a451863818884b030977839dc1c0140d23703f4fb1188fd044f6fbd871def5de4bccab4421b6cb686aae736647569c5f74a5a05ac047f27d029e5a22bbc11cf1110064ce5796303e4f8236b3289ba2bfd0b8e9d20f6a5761ac37f808486c9f89b31923cddbce1e26c2fa1af1bbf58748576d245d4fa0c220452446465bac4fd8458b4e6fb5d19bb19e9ce62201a2132c4e467c4fba8fa3549e83c2211ed60888580b87b94c0bc394d981da9909fc9a91b62cf115c6b76126a39a4f867e1738c7e6571e1e0bd01273d763a796be20048f0f090126864c9923b99047b8c19a0809f6281c81148571bc44bdc70406cddc14960f34f27ddaeea14e33107bc5378dd3732076878fe524d5bb55c7c01fadc26bc9da2d35d5e85b64c7dec366f6f6705026399280dbb4eef67208f97f163c4d52b40decab3b748b0070ad486ae219942dff3d1187ca570767a651905f99143bfd7f2cff2bcbf31e0fbff55d1c26f68a80bbb41a092138cb8144f6a34a300ed93d4596081f5fc098fc41f01ed54c6311844e0049913f4feae5a4f8438deb87b4b335dcd61b246b381084a791e67106950de7ef02ec2f811aad56999080559f7c0bfb8f1286d8fbccb0fe0aadc2172a99e7fba2ad52fd9707cb8858bc03b1692eba7559eeeaba7505a9a8ec74aabb535b002ddcc571bbb576bb432f04347b0e532bf20b92548c953d7b8a4f3439bc67de3573991f214f01f9e0bd2ca9072aab10238888a8fc8dc47171a7c6ea3c93d1a4a3d66dcde29ee713fd0896f6120985d29c8769095b224496222ad5dbd5506fdb12434e0d130f578ec982e3d4697d2799ee45a2b61243e3af015465206e459ebddf4f066518b416f6278742921edc3a03aef0fb04cb22b1080f7840cf152925ec240af0da2ad52b2902aab457652be9c28629ee5b09d832cdec83ff1bff4e0879c5b399aa2db254aa8893bb5ab98213c566c5d0c1125686e3c6e44ea1d9ecf42830241e5dee55f7218faa18fc69b79e72f1551f00fdf2bfb74df0ce9f17af01417346c4c8a4bb5527a3468e0f764cce80aa46aa2b80015e09153e0551220a8497ab367ac4df5f502917fc65e83e3656f9956264aee5d8b1279c7a0db2271f6272f77ba6a7b3cc9f3849d44e5da95d9860b4add793532e370bcd8d4f4eb8ad118ec8c4a3ea1de19401dbdff1d9e2a32c84712277418aeefdf9dcfc935e99a00afb0d0ebb2946f768b96a571b26401c070a86b97c3b3a000f7bbd054ba889154d8b2ae7837bdf7f11a87a1871c0e5527778a132f69c169e612c99aff31e397fc017c2c43b752561e099743e135eb4138a06f9f1b3c57621d064697df0d780af0d94811be0dae34a210828bd8899d2e7c6316ec62d3ebcaeedf3627fc8ee48ccc922c0f29eb13f4ddca45c46335c8a9f64b476501ddfed10f466ab4ad775807ce2dc679949965b011b0b5fafcf86a6c2868f923b49009dda2c002721a927ff68d03ef43710b6ab7ce07caff5371064904d1de8506a906229d148e03649f818fcb9988e9073494e09a5f24efc9183c9c7003c81d456f777b31f0f8c2a142b954a8262f70b4199918ce7ddb708a69a8845b12e8395b7b8b70a69d960304158b911c1abe1f3875eda22140c8354fc5eb10ee7e91293f1df9e241634d250f34710552d8abbef3f0aab6d2d2bae7d845c9c6118ae5c647a4eb90810e1eed95f82a353d06955ff56cc798d17f8ebab100fb4bbb3bb857c1fabfc95523180688c9dc3f8d3eb3b5fa15714e8d7f09e16d72e19328e4f4caf4da889711ac9285b6133ab9319296810fb4b9142ba7dfa66a491f7944248a1385b5bede1e5e1f0ae51a8739beab6b4b098375595fbbbaa401d13de9ddbc19314370ea96b342d6c7e944fc065d2c163ad190e4cb850758e6f45bf45e77d63de39bcf34aac12bb31544eb48d4e5eab73fc983557c7dc360cf1135361ec4317c45cb9267142b38458c4bbcdb9ebb8a9aa293d6a845642b2aeae8deab652727558b987db8d112de199d3a2b40bc29db0aeb57e0fc13225f114c42ad5eb3dda9eac3331caf8a867092841db1efda75c26bd188ec14621c17b3809009f9fab5e5723d13b91cd8808d5fd365499250146dda309f8fe2b0e3dcd49f22972ef3a70751d32fbb7f67514719f923510adda49511388257209690b8e083cba16463599121b1cd5726c62a623faea3e25410529c46382123ea50fea0d9f7848239039cd597de2ee55e543895d3b722e66dfa8c09bb332c5775b85109173a0db1fee241a4811808d071e401ffcbf66e5c63c27c3e5fc28d017f466b8726b00daf57614ddf0e7bcfc360f83c80358b61812bb322a374fd41365a351bf637a8fd51f5e0708a1f914b99f94569f23e8f7a7a6e76fea0106cb02d6e432047bde2b566c7b0bff1f") openat(r8, &(0x7f0000000300)='./file0\x00', 0x149c41, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$P9_RWALK(r12, 0x0, 0x1b) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000808000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r14, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) 1.84277628s ago: executing program 3 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, 0x0, &(0x7f00000000c0)=0x17) 1.085879002s ago: executing program 2 (id=321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d7", 0x1}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r6, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone(0x12081000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.085333192s ago: executing program 3 (id=322): move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 0s ago: executing program 2 (id=323): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x14ac, 0x4) kernel console output (not intermixed with test programs): mes ready [ 73.582027][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.600954][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.610028][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.619087][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.628253][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.636143][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.644045][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.652661][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.661274][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.668871][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.677096][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.686427][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.697469][ T3650] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.716008][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.724459][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.733028][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.741792][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.748960][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.757210][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.766525][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.775088][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.782186][ T3687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.790146][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.798556][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.807733][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.821775][ T3639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.840182][ T3638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.852442][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.862289][ T3649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.881021][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.889755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.898955][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.907666][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.916626][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.925208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.962324][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.971610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.985131][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.994415][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.027117][ T3644] device veth0_vlan entered promiscuous mode [ 74.037549][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.054351][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.063758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.072594][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.104052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.112604][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.122739][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.137827][ T3650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.154243][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.181447][ T3644] device veth1_vlan entered promiscuous mode [ 74.190417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.200285][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.209838][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.218426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.227409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.236247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.245528][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.310198][ T3639] device veth0_vlan entered promiscuous mode [ 74.331926][ T3644] device veth0_macvtap entered promiscuous mode [ 74.345251][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.364209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.372677][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.394564][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.405566][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.430748][ T3639] device veth1_vlan entered promiscuous mode [ 74.447529][ T3644] device veth1_macvtap entered promiscuous mode [ 74.464842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.472799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.481978][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.490902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.499566][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.556550][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.567984][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.576622][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.596971][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.613135][ T3649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.630445][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.638523][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.652074][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.661625][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.670840][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.679750][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.691026][ T3638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.703930][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.714494][ T3639] device veth0_macvtap entered promiscuous mode [ 74.741920][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.754260][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.764277][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.772975][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.782227][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.794716][ T3644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.805099][ T3644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.813970][ T3644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822684][ T3644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.838935][ T3639] device veth1_macvtap entered promiscuous mode [ 74.867102][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.877125][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.901829][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.910000][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.918528][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.926224][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.944939][ T3638] device veth0_vlan entered promiscuous mode [ 74.969593][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.981719][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.991096][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.010685][ T3638] device veth1_vlan entered promiscuous mode [ 75.043545][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.056079][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.068163][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.115583][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.135855][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.145123][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.159299][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.170530][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.181917][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.201881][ T3649] device veth0_vlan entered promiscuous mode [ 75.225529][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.235477][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.245910][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.255414][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.264160][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.276073][ T3639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.293269][ T3639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.302004][ T3639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.312517][ T3639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.342180][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.355312][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.368548][ T3695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.371286][ T3649] device veth1_vlan entered promiscuous mode [ 75.383873][ T3695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.412583][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.424010][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.432158][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.443497][ T48] Bluetooth: hci1: command tx timeout [ 75.502815][ T3638] device veth0_macvtap entered promiscuous mode [ 75.524158][ T48] Bluetooth: hci2: command tx timeout [ 75.528732][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.529575][ T48] Bluetooth: hci4: command tx timeout [ 75.543355][ T3655] Bluetooth: hci3: command tx timeout [ 75.544065][ T48] Bluetooth: hci0: command tx timeout [ 75.550379][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.563491][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.578171][ T3638] device veth1_macvtap entered promiscuous mode [ 75.601514][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.610558][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.620065][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.630689][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.636016][ T3649] device veth0_macvtap entered promiscuous mode [ 75.645456][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.657903][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.668925][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.679050][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.690505][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.705689][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.741604][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.757683][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.766682][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.775677][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.784663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.794705][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.806186][ T3649] device veth1_macvtap entered promiscuous mode [ 75.855609][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.864295][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.872668][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.884829][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.893305][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.896080][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.920507][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.958292][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.967181][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.976293][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.985458][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.995263][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.005228][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.013157][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.039806][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.048200][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.058709][ T3650] device veth0_vlan entered promiscuous mode [ 76.075598][ T3638] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091895][ T3638] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.101592][ T3638] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.118482][ T3638] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.139024][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.157576][ T3650] device veth1_vlan entered promiscuous mode [ 76.182407][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.201357][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.211923][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.222766][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.233086][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.245872][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.258169][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.281996][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.305504][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.323776][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.332621][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.376190][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.411511][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.426570][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.440124][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.454180][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.479551][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.505673][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.528574][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.561652][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.583979][ T3649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.593085][ T3649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.602005][ T3649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.610944][ T3649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.689384][ T3727] 9pnet: p9_errstr2errno: server reported unknown error [ 77.489119][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.500540][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.514835][ T3650] device veth0_macvtap entered promiscuous mode [ 77.523532][ T3656] Bluetooth: hci1: command tx timeout [ 77.561839][ T3731] loop2: detected capacity change from 0 to 64 [ 77.596550][ T3650] device veth1_macvtap entered promiscuous mode [ 77.603441][ T3656] Bluetooth: hci0: command tx timeout [ 77.608878][ T3656] Bluetooth: hci3: command tx timeout [ 77.615144][ T48] Bluetooth: hci4: command tx timeout [ 77.665940][ T3695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.713413][ T3695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.771399][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.781633][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.807075][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.814831][ T3736] sg_read: process 8 (syz.3.10) changed security contexts after opening file descriptor, this is not allowed. [ 77.830321][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.841937][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.852896][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.863467][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.876742][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.887070][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.898116][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.912928][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.974031][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.000841][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.040620][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.061460][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.081620][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.132127][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.153319][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.180012][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.210913][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.222174][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.235472][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.251743][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.251997][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.262669][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.276567][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.300990][ T3650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.303582][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.324889][ T3650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.333835][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.340934][ T3650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.369248][ T3650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.396934][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.422718][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.464124][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.478324][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.530084][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.672253][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.698694][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.787911][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.810209][ T3746] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.833097][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.862679][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.889729][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.964649][ T3749] loop0: detected capacity change from 0 to 1024 [ 78.972099][ T3752] syz.3.14 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.026135][ T3749] hfsplus: unable to parse mount options [ 79.042616][ T27] audit: type=1326 audit(1722971057.260:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3750 comm="syz.3.14" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd42f5779f9 code=0x0 [ 79.163495][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.193252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.203260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.212127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.783850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.808104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 79.822854][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 79.828078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 79.836356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 79.857130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 79.865471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 79.873781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.914623][ T3656] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 80.923773][ T3656] Bluetooth: hci2: Injecting HCI hardware error event [ 80.931752][ T3655] Bluetooth: hci2: hardware error 0x00 [ 81.227055][ T3764] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 81.353483][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.409442][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.433902][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 81.471309][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 81.520913][ T14] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 81.538555][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.613128][ T1190] cfg80211: failed to load regulatory.db [ 81.638506][ T14] hub 2-1:1.0: bad descriptor, ignoring hub [ 81.648595][ T14] hub: probe of 2-1:1.0 failed with error -5 [ 81.659745][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 81.682506][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 81.698789][ T14] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 81.708098][ T14] cdc_wdm 2-1:1.0: Unknown control protocol [ 82.128206][ T3786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 82.329321][ T3794] netlink: 'syz.2.29': attribute type 6 has an invalid length. [ 82.391692][ T3748] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 82.660204][ T3804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.33'. [ 82.871048][ T3807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.881773][ T3809] netlink: 'syz.4.36': attribute type 4 has an invalid length. [ 83.208770][ T3700] usb 2-1: USB disconnect, device number 2 [ 83.483655][ T3818] loop3: detected capacity change from 0 to 256 [ 83.507321][ T3655] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 84.145505][ T3810] netlink: 'syz.4.36': attribute type 4 has an invalid length. [ 84.298017][ T3810] syz.4.36 (3810) used greatest stack depth: 19544 bytes left [ 84.388590][ T3827] loop3: detected capacity change from 0 to 512 [ 84.406617][ T3829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.459335][ T3832] capability: warning: `syz.4.41' uses deprecated v2 capabilities in a way that may be insecure [ 84.523563][ T3630] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.554401][ T3832] capability: warning: `syz.4.41' uses 32-bit capabilities (legacy support in use) [ 84.577453][ T3836] netlink: 'syz.0.43': attribute type 10 has an invalid length. [ 84.607005][ T3836] bond0: (slave bond_slave_0): Releasing backup interface [ 84.975076][ T3847] loop4: detected capacity change from 0 to 256 [ 85.044443][ T3847] exfat: Deprecated parameter 'namecase' [ 85.050181][ T3847] exfat: Deprecated parameter 'utf8' [ 85.088910][ T3852] loop1: detected capacity change from 0 to 764 [ 85.132355][ T3852] ======================================================= [ 85.132355][ T3852] WARNING: The mand mount option has been deprecated and [ 85.132355][ T3852] and is ignored by this kernel. Remove the mand [ 85.132355][ T3852] option from the mount to silence this warning. [ 85.132355][ T3852] ======================================================= [ 85.226935][ T3847] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 85.553377][ T27] audit: type=1800 audit(1722971063.750:3): pid=3861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.45" name="bus" dev="loop4" ino=1048597 res=0 errno=0 [ 88.584590][ T3655] Bluetooth: hci3: command tx timeout [ 88.590670][ T3656] Bluetooth: hci4: command tx timeout [ 90.053315][ T3700] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.396569][ T3878] input: syz1 as /devices/virtual/input/input5 [ 90.493547][ T3700] usb 1-1: Using ep0 maxpacket: 8 [ 90.633798][ T3700] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.777665][ T3700] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.153125][ T3700] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.185693][ T3700] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.204200][ T3700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.346035][ T3700] hub 1-1:1.0: bad descriptor, ignoring hub [ 91.351964][ T3700] hub: probe of 1-1:1.0 failed with error -5 [ 91.359201][ T3882] loop1: detected capacity change from 0 to 512 [ 91.364404][ T3700] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 91.715125][ T22] usb 1-1: USB disconnect, device number 2 [ 91.721507][ T3882] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.744598][ T3882] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.805285][ T3882] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 91.837253][ T3882] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.55: attempt to clear invalid blocks 2 len 1 [ 91.864926][ T3882] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 91.933587][ T3882] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.55: invalid indirect mapped block 1819239214 (level 0) [ 91.974917][ T3882] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.55: invalid indirect mapped block 1819239214 (level 1) [ 92.051893][ T3882] EXT4-fs (loop1): 1 truncate cleaned up [ 92.058124][ T3882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.040595][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 93.088233][ T27] audit: type=1326 audit(1722971071.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3881 comm="syz.1.55" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f799fb779f9 code=0x0 [ 93.112135][ T3877] loop2: detected capacity change from 0 to 32768 [ 93.234901][ T3896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.58'. [ 93.266893][ T3896] device geneve2 entered promiscuous mode [ 93.287194][ T3877] XFS (loop2): Mounting V5 Filesystem [ 93.339161][ T3877] XFS (loop2): log mount failed [ 93.785987][ T3913] loop3: detected capacity change from 0 to 512 [ 93.824081][ T3913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.889553][ T3913] EXT4-fs (loop3): Test dummy encryption mode enabled [ 93.939472][ T3913] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.62: iget: bogus i_mode (0) [ 93.940693][ T3913] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.62: couldn't read orphan inode 17 (err -117) [ 93.941116][ T3913] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.398659][ T3928] loop2: detected capacity change from 0 to 256 [ 94.441525][ T3928] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.507768][ T3928] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 94.582316][ T3928] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 94.654793][ T3913] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 94.664318][ T3913] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.62: bg 0: block 7: invalid block bitmap [ 95.064614][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 95.071826][ T3938] netlink: 'syz.0.70': attribute type 11 has an invalid length. [ 95.242447][ T3943] loop2: detected capacity change from 0 to 512 [ 95.295619][ T3943] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.358904][ T3947] loop0: detected capacity change from 0 to 1024 [ 95.371464][ T3943] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 95.396016][ T3943] EXT4-fs (loop2): 1 truncate cleaned up [ 95.402862][ T3943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.464624][ T3953] loop1: detected capacity change from 0 to 1024 [ 95.477887][ T3943] EXT4-fs (loop2): shut down requested (0) [ 95.491637][ T3639] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 95.525114][ T3639] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 95.567315][ T3953] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.76: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 95.604565][ T3953] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.76: couldn't read orphan inode 11 (err -117) [ 95.635375][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 95.655095][ T3639] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 95.761458][ T3953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.767784][ T3639] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 95.820232][ T3960] tmpfs: Bad value for 'mpol' [ 95.839010][ T3639] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 96.064432][ T3639] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 96.090554][ T3880] hfsplus: b-tree write err: -5, ino 4 [ 96.717741][ T3639] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 96.722651][ T3639] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 96.723859][ T3639] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 96.725337][ T3639] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /11/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 96.814124][ T3962] tty tty4: ldisc open failed (-12), clearing slot 3 [ 96.895454][ C0] eth0: bad gso: type: 1, size: 1408 [ 96.914175][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 97.219560][ T3975] loop2: detected capacity change from 0 to 2048 [ 97.346637][ T3975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.548068][ T3973] loop4: detected capacity change from 0 to 32768 [ 97.590305][ T3973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.82 (3973) [ 97.729839][ T3973] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.777360][ T3973] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 97.811368][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 97.833042][ T3973] BTRFS info (device loop4): using free space tree [ 98.015143][ T3993] loop2: detected capacity change from 0 to 128 [ 99.008566][ T3973] BTRFS info (device loop4): enabling ssd optimizations [ 99.203928][ T3656] Bluetooth: hci4: command tx timeout [ 99.262935][ T3976] loop1: detected capacity change from 0 to 40427 [ 99.362196][ T4011] loop2: detected capacity change from 0 to 512 [ 99.390871][ T4011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.399140][ T3976] F2FS-fs (loop1): invalid crc value [ 99.420949][ T4011] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.513984][ T4014] loop0: detected capacity change from 0 to 8 [ 99.793157][ T4014] process 'syz.0.87' launched '/dev/fd/11/./file0' with NULL argv: empty string added [ 100.176111][ T3976] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 100.245492][ T4011] EXT4-fs (loop2): orphan cleanup on readonly fs [ 100.284878][ T4011] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3845: comm syz.2.88: Allocating blocks 41-42 which overlap fs metadata [ 100.355396][ T4011] EXT4-fs (loop2): Remounting filesystem read-only [ 100.370571][ T4011] Quota error (device loop2): write_blk: dquota write failed [ 100.424489][ T4011] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 100.453558][ T4011] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.88: Failed to acquire dquot type 0 [ 100.460345][ T3650] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.494109][ T4011] EXT4-fs (loop2): 1 truncate cleaned up [ 100.524603][ T4011] EXT4-fs (loop2): pa ffff88807533c700: logic 1, phys. 41, len 23 [ 100.532701][ T4011] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 100.552622][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 100.569396][ T4011] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.630747][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.018997][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.133922][ T3644] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 101.239687][ T3644] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 101.245444][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.449139][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.778153][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 101.851485][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.861473][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.878621][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.888952][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.905434][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 101.913027][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.020897][ T4030] loop1: detected capacity change from 0 to 32768 [ 102.066194][ T4034] loop4: detected capacity change from 0 to 32768 [ 102.087100][ T4030] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.91 (4030) [ 102.165088][ T4030] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.193495][ T4030] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 102.202360][ T4030] BTRFS info (device loop1): doing ref verification [ 102.262149][ T4030] BTRFS info (device loop1): using default commit interval 30s [ 102.283142][ T4030] BTRFS info (device loop1): enabling ssd optimizations [ 102.290589][ T4034] XFS (loop4): Mounting V5 Filesystem [ 102.327767][ T4030] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 102.406171][ T4030] BTRFS info (device loop1): use zstd compression, level 3 [ 102.413730][ T4030] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 102.430455][ T4030] BTRFS info (device loop1): trying to use backup root at mount time [ 102.445579][ T4030] BTRFS info (device loop1): using free space tree [ 102.476340][ T4034] XFS (loop4): Ending clean mount [ 102.535326][ T4034] XFS (loop4): Quotacheck needed: Please wait. [ 102.779536][ T4034] XFS (loop4): Quotacheck: Done. [ 103.125460][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 103.162368][ T3638] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.197758][ T3656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.207865][ T3656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.216950][ T3656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.224911][ T3656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.263556][ T3656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.271054][ T3656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.430730][ C0] eth0: bad gso: type: 1, size: 1408 [ 103.764645][ T3650] XFS (loop4): Unmounting Filesystem [ 103.835448][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.842603][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.915520][ T4043] device bridge_slave_0 entered promiscuous mode [ 103.944837][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.981633][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.009208][ T48] Bluetooth: hci1: command tx timeout [ 104.011899][ T4043] device bridge_slave_1 entered promiscuous mode [ 104.352760][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.422386][ T4106] loop0: detected capacity change from 0 to 40427 [ 104.472680][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.599844][ T4106] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.726922][ T4043] team0: Port device team_slave_0 added [ 104.764859][ T4043] team0: Port device team_slave_1 added [ 104.836116][ T11] device hsr_slave_0 left promiscuous mode [ 104.845283][ T4106] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.952221][ T11] device hsr_slave_1 left promiscuous mode [ 104.977010][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.003898][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.016678][ T4141] loop4: detected capacity change from 0 to 160 [ 105.026390][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.041406][ T4140] loop1: detected capacity change from 0 to 2048 [ 105.057489][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.066786][ T11] device bridge_slave_1 left promiscuous mode [ 105.090454][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.106804][ T3630] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.122739][ T4140] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 105.158006][ T11] device bridge_slave_0 left promiscuous mode [ 105.166821][ T4106] syz.0.105: attempt to access beyond end of device [ 105.166821][ T4106] loop0: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 105.189368][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.352433][ T11] device veth1_macvtap left promiscuous mode [ 105.361555][ T27] audit: type=1804 audit(1722971083.580:5): pid=4140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.109" name="/newroot/12/file0/bus" dev="loop1" ino=1367 res=1 errno=0 [ 105.383315][ T3655] Bluetooth: hci2: command tx timeout [ 105.386497][ T11] device veth0_macvtap left promiscuous mode [ 105.416866][ T11] device veth1_vlan left promiscuous mode [ 105.434819][ T11] device veth0_vlan left promiscuous mode [ 105.642380][ T4147] loop1: detected capacity change from 0 to 256 [ 105.889687][ T4149] Bluetooth: MGMT ver 1.22 [ 106.153763][ T48] Bluetooth: hci1: command tx timeout [ 106.714926][ T4153] loop4: detected capacity change from 0 to 8 [ 106.774810][ T4153] squashfs: Unknown parameter '0x000000000000000001777777777777777777777017777777777777777777770177777777777777777777700000000000000000000' [ 106.974392][ T4153] loop4: detected capacity change from 0 to 1024 [ 108.697900][ T4161] sched: RT throttling activated [ 109.157740][ T48] Bluetooth: hci2: command tx timeout [ 109.163572][ T48] Bluetooth: hci1: command tx timeout [ 109.299220][ T4153] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 110.228820][ T4173] syz.0.117 uses obsolete (PF_INET,SOCK_PACKET) [ 110.497144][ T4166] loop1: detected capacity change from 0 to 32768 [ 110.505040][ T4166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.115 (4166) [ 110.563629][ T4166] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.586386][ T11] team0 (unregistering): Port device team_slave_1 removed [ 110.603569][ T4166] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 110.612309][ T4166] BTRFS info (device loop1): using free space tree [ 110.719950][ T11] team0 (unregistering): Port device team_slave_0 removed [ 110.805883][ T4166] BTRFS info (device loop1): enabling ssd optimizations [ 110.813915][ T4200] loop4: detected capacity change from 0 to 16 [ 110.840956][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.861526][ T4200] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 110.956744][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.071354][ T3638] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.206870][ T3655] Bluetooth: hci1: command tx timeout [ 111.212361][ T3655] Bluetooth: hci2: command tx timeout [ 111.609937][ T11] bond0 (unregistering): Released all slaves [ 111.653625][ T4102] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.802430][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.820329][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.854613][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.903437][ T4102] usb 2-1: Using ep0 maxpacket: 8 [ 111.932346][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.950222][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.985988][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.033493][ T4102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.073188][ T4102] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.123525][ T4102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.156715][ T4102] usb 2-1: config 0 descriptor?? [ 112.211485][ T4043] device hsr_slave_0 entered promiscuous mode [ 112.234408][ T4043] device hsr_slave_1 entered promiscuous mode [ 112.290643][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.308738][ T4043] Cannot create hsr debugfs directory [ 112.340988][ T4098] chnl_net:caif_netlink_parms(): no params data found [ 112.430778][ T4102] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.566527][ T4227] loop4: detected capacity change from 0 to 4096 [ 112.929173][ T4098] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.944392][ T27] audit: type=1800 audit(1722971091.170:6): pid=4227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.127" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 112.973568][ T27] audit: type=1800 audit(1722971091.170:7): pid=4239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.127" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 112.981266][ T4098] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.037839][ T4098] device bridge_slave_0 entered promiscuous mode [ 113.037856][ T27] audit: type=1804 audit(1722971091.250:8): pid=4227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.127" name="/newroot/34/file0/bus" dev="loop4" ino=33 res=1 errno=0 [ 113.148335][ T4098] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.166068][ T4098] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.194508][ T4098] device bridge_slave_1 entered promiscuous mode [ 113.283456][ T3655] Bluetooth: hci2: command tx timeout [ 113.318202][ T4098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.400807][ T4098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.642034][ T4098] team0: Port device team_slave_0 added [ 113.816914][ T4098] team0: Port device team_slave_1 added [ 113.981286][ T4098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.998434][ T4098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.033062][ T4238] loop0: detected capacity change from 0 to 32768 [ 114.060313][ T4238] XFS: ikeep mount option is deprecated. [ 114.092610][ T4098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.116933][ T4098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.124707][ T4098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.155926][ T4098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.170787][ T4238] XFS (loop0): Mounting V5 Filesystem [ 114.208755][ T4238] XFS (loop0): Ending clean mount [ 114.225081][ T4238] XFS (loop0): Quotacheck needed: Please wait. [ 114.284046][ T4238] XFS (loop0): Quotacheck: Done. [ 114.432099][ T4098] device hsr_slave_0 entered promiscuous mode [ 114.448308][ T4098] device hsr_slave_1 entered promiscuous mode [ 114.472688][ T4098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.501730][ T4098] Cannot create hsr debugfs directory [ 114.534202][ T3649] XFS (loop0): Unmounting Filesystem [ 114.726324][ T4260] loop4: detected capacity change from 0 to 2048 [ 114.733896][ T4260] EXT4-fs: Ignoring removed orlov option [ 114.831483][ T4260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.083536][ T4043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.121644][ T4043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.162103][ T4043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.258401][ T3650] EXT4-fs (loop4): unmounting filesystem. [ 115.291278][ T4043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.422278][ T4272] loop0: detected capacity change from 0 to 136 [ 115.539103][ T4272] ISOFS: unable to read i-node block [ 115.578395][ T4098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.667417][ T4281] EXT4-fs warning (device sda1): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 115.814857][ T4287] syz.1.134[4287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.815326][ T4287] syz.1.134[4287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.758950][ T4098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.886857][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 116.927819][ T4298] netlink: 'syz.4.137': attribute type 7 has an invalid length. [ 117.005753][ T4298] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.015791][ T4298] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.024646][ T4298] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.033425][ T4298] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.095991][ T4298] device vxlan0 entered promiscuous mode [ 117.195323][ T4304] loop1: detected capacity change from 0 to 1024 [ 117.238790][ T4098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.263400][ T4304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.342160][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.383466][ T4308] loop0: detected capacity change from 0 to 64 [ 117.457043][ T4098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.513068][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.544414][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.562630][ T4308] syz.0.141: attempt to access beyond end of device [ 117.562630][ T4308] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 117.588707][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.594122][ T4308] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 117.656700][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.704084][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.712554][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.719758][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.806474][ T4316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.820970][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.833112][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.842308][ T4316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.859630][ T4314] ptrace attach of "./syz-executor exec"[3650] was attempted by "./syz-executor exec"[4314] [ 117.888798][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.914442][ T4108] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.922779][ T4108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.940999][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.114575][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.141701][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.164538][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.183498][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.204213][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.226275][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.254167][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.411481][ T4043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.442959][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.462943][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.472391][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.496243][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.573566][ T4108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.682528][ T4098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.704728][ T4098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.772261][ T4098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.813421][ T4108] usb 5-1: Using ep0 maxpacket: 16 [ 118.882694][ T4098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.933502][ T4108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.960705][ T4108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.972860][ T4108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.016365][ T4339] binder: 4338:4339 ioctl c018620c 200005c0 returned -1 [ 119.083539][ T4108] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.093369][ T4108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.141958][ T4108] usb 5-1: config 0 descriptor?? [ 119.443777][ T27] audit: type=1326 audit(1722971097.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799fb779f9 code=0x7fc00000 [ 119.958491][ T4108] microsoft 0003:045E:07DA.0001: report is too long [ 120.107012][ T3655] Bluetooth: hci2: command tx timeout [ 120.170107][ T27] audit: type=1326 audit(1722971098.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f799fb779f9 code=0x7fc00000 [ 120.213586][ T4108] microsoft 0003:045E:07DA.0001: item 0 4 0 8 parsing failed [ 120.222474][ T4108] microsoft 0003:045E:07DA.0001: parse failed [ 120.229158][ T4108] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 120.239756][ T4108] usb 5-1: USB disconnect, device number 2 [ 120.394478][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.402875][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.445227][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.704080][ T4108] usb 2-1: USB disconnect, device number 3 [ 120.711945][ T4359] netlink: 248 bytes leftover after parsing attributes in process `syz.1.152'. [ 120.806204][ T4359] netlink: 'syz.1.152': attribute type 2 has an invalid length. [ 121.382976][ T4108] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 121.506829][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.526931][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.558796][ T4368] loop0: detected capacity change from 0 to 256 [ 121.571405][ T4098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.647177][ T4368] exfat: Deprecated parameter 'utf8' [ 121.652577][ T4368] exfat: Deprecated parameter 'namecase' [ 121.703078][ T4368] exfat: Deprecated parameter 'namecase' [ 121.723286][ T4368] exfat: Deprecated parameter 'utf8' [ 121.782246][ T4368] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 121.857922][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.877598][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.932961][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.956829][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.060774][ T9] device hsr_slave_0 left promiscuous mode [ 122.100550][ T9] device hsr_slave_1 left promiscuous mode [ 122.114700][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.122181][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.162983][ T4382] loop4: detected capacity change from 0 to 128 [ 122.223923][ T4382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.233746][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.241214][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.248479][ T27] audit: type=1326 audit(1722971100.460:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.0.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32775779f9 code=0x0 [ 122.258425][ T4382] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 122.373958][ T9] device bridge_slave_1 left promiscuous mode [ 122.380256][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.512535][ T9] device bridge_slave_0 left promiscuous mode [ 122.529887][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.610554][ T9] device veth1_macvtap left promiscuous mode [ 122.619239][ T9] device veth0_macvtap left promiscuous mode [ 122.641825][ T9] device veth1_vlan left promiscuous mode [ 122.659104][ T9] device veth0_vlan left promiscuous mode [ 122.713322][ T3650] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 122.782224][ T3650] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 122.827296][ T3650] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 122.870826][ T3650] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 122.900928][ T3650] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 122.929994][ T3650] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 122.984089][ T3650] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 123.017043][ T3650] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 123.044250][ T3650] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 123.061716][ T4383] loop1: detected capacity change from 0 to 32768 [ 123.101396][ T3650] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 123.930263][ T9] team0 (unregistering): Port device team_slave_1 removed [ 123.975088][ T9] team0 (unregistering): Port device team_slave_0 removed [ 124.037481][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.121380][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.178987][ T4410] loop1: detected capacity change from 0 to 32768 [ 124.227538][ T4410] XFS (loop1): Mounting V5 Filesystem [ 124.340418][ T4410] XFS (loop1): Ending clean mount [ 124.350342][ T4410] XFS (loop1): Quotacheck needed: Please wait. [ 124.435019][ T4410] XFS (loop1): Quotacheck: Done. [ 124.701207][ T9] bond0 (unregistering): Released all slaves [ 124.703523][ T4410] loop1: detected capacity change from 32768 to 27085 [ 124.745820][ T4419] syz.1.163: attempt to access beyond end of device [ 124.745820][ T4419] loop1: rw=2051, sector=18728, nr_sectors = 14040 limit=27085 [ 124.781160][ T4043] device veth0_vlan entered promiscuous mode [ 124.795591][ T4384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 124.831992][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.842469][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.960780][ T3638] XFS (loop1): Unmounting Filesystem [ 124.978623][ T4043] device veth1_vlan entered promiscuous mode [ 125.002130][ T4098] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.072628][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.082422][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.097148][ T3686] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.104349][ T3686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.145614][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.156010][ T3650] EXT4-fs (loop4): unmounting filesystem. [ 125.162486][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.172807][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.181732][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.188909][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.191788][ T3650] syz-executor (3650) used greatest stack depth: 18160 bytes left [ 125.233743][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.242596][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.264478][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.284592][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.312194][ T4043] device veth0_macvtap entered promiscuous mode [ 125.352636][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.374706][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.395161][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.455713][ T4043] device veth1_macvtap entered promiscuous mode [ 125.517298][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.527356][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.544375][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.568250][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.579100][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.600861][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.637429][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.674271][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.703408][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.726124][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.747163][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.770590][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.807268][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.845486][ T3655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.849033][ T4098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.865699][ T3655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.876669][ T3655] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.888912][ T3655] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.896746][ T3655] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.897742][ T4098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.916665][ T3655] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.950887][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.989491][ T4433] loop1: detected capacity change from 0 to 512 [ 126.004264][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.026733][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.180922][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.192109][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.214217][ T3630] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.215172][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.233853][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.244818][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.258710][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.269359][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.300145][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.018923][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.068792][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.126004][ T4043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.209901][ T4448] rdma_op ffff88807675c1f0 conn xmit_rdma 0000000000000000 [ 127.249435][ T4043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.413661][ T4043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.579611][ T4043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.004220][ T48] Bluetooth: hci4: command tx timeout [ 128.219209][ T3759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.243182][ T3759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.284863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.292413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.327947][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.382243][ T3759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.418420][ T3759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.452317][ T4098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.536295][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.575902][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.604085][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.673809][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.682361][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.722762][ T4098] device veth0_vlan entered promiscuous mode [ 128.744088][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.752293][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.761754][ T4461] usb usb8: usbfs: process 4461 (syz.3.93) did not claim interface 0 before use [ 128.769198][ T4430] chnl_net:caif_netlink_parms(): no params data found [ 128.814716][ T4098] device veth1_vlan entered promiscuous mode [ 128.993706][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.002036][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.052777][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.104242][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.149914][ T4098] device veth0_macvtap entered promiscuous mode [ 130.034000][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.048649][ T4098] device veth1_macvtap entered promiscuous mode [ 130.093640][ T48] Bluetooth: hci4: command tx timeout [ 130.164996][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.172582][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.181936][ T4478] loop3: detected capacity change from 0 to 256 [ 130.245135][ T4430] device bridge_slave_0 entered promiscuous mode [ 130.275437][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.291850][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.307798][ T4430] device bridge_slave_1 entered promiscuous mode [ 130.353377][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.387793][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.417803][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.447751][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.461967][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.480006][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.491333][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.509749][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.562649][ T4098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.687035][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.704254][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.737888][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.759835][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.791828][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.812632][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.843379][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.871175][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.881919][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.904684][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.913313][ T1190] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.923975][ T4098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.940289][ T4430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.960793][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.972112][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.990465][ T4098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.032729][ T4098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.050247][ T4098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.083331][ T4098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.112443][ T4430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.442820][ T4430] team0: Port device team_slave_0 added [ 131.463535][ T1190] usb 4-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=24.74 [ 131.483024][ T1190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.488961][ T4430] team0: Port device team_slave_1 added [ 131.510060][ T1190] usb 4-1: Product: syz [ 131.528272][ T1190] usb 4-1: Manufacturer: syz [ 131.532910][ T1190] usb 4-1: SerialNumber: syz [ 131.571451][ T1190] usb 4-1: config 0 descriptor?? [ 131.666373][ T1190] gspca_main: kinect-2.14.0 probing 045e:02ae [ 131.766052][ T4493] loop0: detected capacity change from 0 to 8 [ 131.966983][ T4493] SQUASHFS error: lzo decompression failed, data probably corrupt [ 131.987039][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.007426][ T4493] SQUASHFS error: Failed to read block 0x91: -5 [ 132.028453][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.033416][ T4493] SQUASHFS error: Unable to read metadata cache entry [8f] [ 132.044322][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.074634][ T4493] SQUASHFS error: Unable to read inode 0x11f [ 132.091240][ T14] usb 4-1: USB disconnect, device number 2 [ 132.096337][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.129208][ T4430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.145053][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.152142][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.184280][ T48] Bluetooth: hci4: command tx timeout [ 132.209599][ T4430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.273732][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.374182][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.403492][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.424562][ T4500] loop1: detected capacity change from 0 to 128 [ 132.441532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.466137][ T4500] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 132.538545][ T4430] device hsr_slave_0 entered promiscuous mode [ 132.565485][ T4430] device hsr_slave_1 entered promiscuous mode [ 132.581086][ T4500] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 132.634085][ T4505] nbd: must specify an index to disconnect [ 132.779321][ T4509] loop3: detected capacity change from 0 to 128 [ 132.807323][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.813836][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.614412][ T4430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.626353][ T4430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.642972][ T4526] netlink: 'syz.3.201': attribute type 2 has an invalid length. [ 133.743449][ T4526] device geneve2 entered promiscuous mode [ 133.884428][ T4535] loop0: detected capacity change from 0 to 1024 [ 133.906538][ T4535] EXT4-fs: Ignoring removed oldalloc option [ 133.926010][ T4430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.950182][ T4430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.977924][ T4535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.026823][ T4535] bpf: Bad value for 'mode' [ 134.066980][ T4543] netlink: 72 bytes leftover after parsing attributes in process `syz.2.205'. [ 134.088085][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 134.125867][ T4430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.160806][ T4430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.169721][ T4545] hub 6-0:1.0: USB hub found [ 134.213678][ T4545] hub 6-0:1.0: 1 port detected [ 134.254457][ T48] Bluetooth: hci4: command tx timeout [ 134.307629][ C0] eth0: bad gso: type: 1, size: 1408 [ 134.501697][ T3686] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.526525][ T4430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.555539][ T4430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.084031][ T3686] usb 2-1: Using ep0 maxpacket: 16 [ 136.223905][ T3686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 136.254290][ T3686] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 136.295230][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.311310][ T3686] usb 2-1: config 0 descriptor?? [ 136.438961][ T4430] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.551253][ T4430] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.590504][ T4430] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.663793][ T4430] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.777945][ T4537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.790630][ T4537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.880607][ T3686] hid (null): report_id 2838798905 is invalid [ 136.917626][ T3686] hid (null): unknown global tag 0xc [ 136.940903][ T3686] hid (null): unknown global tag 0xd [ 136.964189][ T3686] hid (null): unknown global tag 0xa5 [ 136.991397][ T3686] hid (null): unknown global tag 0xd [ 137.021602][ T3686] hid (null): unknown global tag 0xc [ 137.063820][ T3686] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 137.074307][ T4537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.100551][ T4537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.112084][ T3686] hid-generic 0003:0158:0100.0002: unexpected long global item [ 137.152421][ T3686] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 137.223996][ T4108] usb 2-1: USB disconnect, device number 4 [ 137.325086][ T9] device hsr_slave_0 left promiscuous mode [ 137.331780][ T9] device hsr_slave_1 left promiscuous mode [ 137.355347][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.364064][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.372418][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.381948][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.424616][ T9] device bridge_slave_1 left promiscuous mode [ 137.434185][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.444833][ T9] device bridge_slave_0 left promiscuous mode [ 137.451092][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.575656][ T4566] loop3: detected capacity change from 0 to 256 [ 137.591721][ T9] device veth1_macvtap left promiscuous mode [ 137.599637][ T9] device veth0_macvtap left promiscuous mode [ 137.608644][ T9] device veth1_vlan left promiscuous mode [ 137.629317][ T9] device veth0_vlan left promiscuous mode [ 137.701746][ T4563] loop2: detected capacity change from 0 to 32768 [ 137.809500][ T4563] XFS (loop2): Mounting V5 Filesystem [ 137.921045][ T4563] XFS (loop2): Ending clean mount [ 137.971000][ T3686] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 [ 137.982994][ T3686] XFS (loop2): Unmount and run xfs_repair [ 137.991398][ T3686] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 138.002750][ T3686] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 138.013335][ T3686] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 138.024742][ T3686] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 138.034096][ T3686] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 138.051799][ T4576] loop3: detected capacity change from 0 to 1024 [ 138.060318][ T3686] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 138.074698][ T3686] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 138.087613][ T4576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.106198][ T3686] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.143678][ T3686] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.173516][ T4563] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74 [ 138.191480][ T4563] XFS (loop2): Failed to initialize disk quotas. [ 138.294886][ T7] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 [ 138.316169][ T3649] EXT4-fs (loop0): unmounting filesystem. [ 138.329803][ T7] XFS (loop2): Unmount and run xfs_repair [ 138.359566][ T7] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 138.404021][ T7] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 138.433921][ T7] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 138.461516][ T7] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 138.483306][ T7] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 138.502498][ T7] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 138.518950][ T7] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 138.542110][ T7] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.562501][ T7] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.585377][ T4563] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74 [ 138.787296][ T4098] XFS (loop2): Unmounting Filesystem [ 139.370375][ T4590] loop1: detected capacity change from 0 to 256 [ 139.425246][ T9] team0 (unregistering): Port device team_slave_1 removed [ 139.465118][ T4590] FAT-fs (loop1): Directory bread(block 64) failed [ 139.472232][ T4590] FAT-fs (loop1): Directory bread(block 65) failed [ 139.487130][ T4590] FAT-fs (loop1): Directory bread(block 66) failed [ 139.497396][ T4590] FAT-fs (loop1): Directory bread(block 67) failed [ 139.507949][ T4590] FAT-fs (loop1): Directory bread(block 68) failed [ 139.520616][ T4590] FAT-fs (loop1): Directory bread(block 69) failed [ 139.529258][ T9] team0 (unregistering): Port device team_slave_0 removed [ 139.535427][ T4590] FAT-fs (loop1): Directory bread(block 70) failed [ 139.550570][ T4590] FAT-fs (loop1): Directory bread(block 71) failed [ 139.558119][ T4590] FAT-fs (loop1): Directory bread(block 72) failed [ 139.571141][ T4590] FAT-fs (loop1): Directory bread(block 73) failed [ 139.614976][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.680962][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.681877][ T4596] loop2: detected capacity change from 0 to 764 [ 139.876186][ T27] audit: type=1326 audit(1722971118.100:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f799fb779f9 code=0x0 [ 140.174880][ T4589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.307445][ T9] bond0 (unregistering): Released all slaves [ 140.384243][ T4582] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 140.411415][ T4430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.469590][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.481435][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.516140][ T4430] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.552020][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.565510][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.579862][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.587094][ T4104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.627278][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.640092][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.656116][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.666212][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.673418][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.681724][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.692709][ T4610] tipc: Started in network mode [ 140.703441][ T4610] tipc: Node identity f7, cluster identity 4711 [ 140.718920][ T4610] tipc: Node number set to 247 [ 140.737414][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.779952][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.819327][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.872486][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.902291][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.936518][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.965707][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.990882][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.010002][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.030204][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.060253][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.158022][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.177081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.210014][ T4430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.509182][ T4648] loop1: detected capacity change from 0 to 1024 [ 142.516634][ T4648] EXT4-fs: Ignoring removed bh option [ 142.553525][ T4648] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #3: block 69: comm syz.1.233: lblock 8 mapped to illegal pblock 69 (length 1) [ 142.571215][ T4648] Quota error (device loop1): write_blk: dquota write failed [ 142.578782][ T4648] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #3: block 68: comm syz.1.233: lblock 7 mapped to illegal pblock 68 (length 1) [ 142.595692][ T4648] Quota error (device loop1): write_blk: dquota write failed [ 142.603170][ T4648] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #3: block 67: comm syz.1.233: lblock 6 mapped to illegal pblock 67 (length 1) [ 142.619929][ T4648] Quota error (device loop1): write_blk: dquota write failed [ 142.627451][ T4648] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 142.637520][ T4648] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #3: block 48: comm syz.1.233: lblock 0 mapped to illegal pblock 48 (length 1) [ 142.652694][ T4648] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 142.663286][ T4648] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.233: Failed to acquire dquot type 0 [ 142.674550][ T3684] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.679592][ T4648] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 142.695900][ T4648] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.233: mark_inode_dirty error [ 142.709565][ T4648] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 142.720099][ T4648] EXT4-fs (loop1): 1 orphan inode deleted [ 142.727300][ T4648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.757293][ T3880] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 142.850002][ T4648] EXT4-fs (loop1): unmounting filesystem. [ 142.886418][ T3880] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 142.913409][ T3684] usb 1-1: Using ep0 maxpacket: 8 [ 142.930658][ T3880] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:9: Failed to release dquot type 0 [ 142.995426][ T4648] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 143.008704][ T4648] EXT4-fs error (device loop1): ext4_quota_off:7066: inode #3: comm syz.1.233: mark_inode_dirty error [ 143.036287][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.047518][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 143.058101][ T3684] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 143.068419][ T3684] usb 1-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=5c.30 [ 143.084172][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.117485][ T3684] usb 1-1: config 0 descriptor?? [ 143.123557][ T1190] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.185673][ T3684] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 143.192101][ T3684] hdpvr: probe of 1-1:0.0 failed with error -12 [ 143.373342][ T1190] usb 2-1: Using ep0 maxpacket: 32 [ 143.477405][ T3684] usb 1-1: USB disconnect, device number 3 [ 143.493638][ T1190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.524343][ T1190] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 143.547125][ T1190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.556784][ T4655] loop2: detected capacity change from 0 to 256 [ 143.592614][ T1190] usb 2-1: config 0 descriptor?? [ 143.624927][ T4655] FAT-fs (loop2): Unrecognized mount option "shOrtname=win95" or missing value [ 143.646306][ T1190] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 144.095744][ T4672] ufs: You didn't specify the type of your ufs filesystem [ 144.095744][ T4672] [ 144.095744][ T4672] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 144.095744][ T4672] [ 144.095744][ T4672] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 144.127040][ T4672] ufs: ufstype=old is supported read-only [ 144.138997][ T4672] ufs: ufs_fill_super(): bad magic number [ 144.755339][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.789671][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.971403][ T4430] device veth0_vlan entered promiscuous mode [ 145.042092][ T4676] loop0: detected capacity change from 0 to 512 [ 145.051072][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.061765][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.087458][ T4430] device veth1_vlan entered promiscuous mode [ 145.115192][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.123769][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.138738][ T4676] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 145.152164][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.175174][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 145.286520][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.299252][ T4676] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 145.314200][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.333387][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.340310][ T4676] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.241: Failed to acquire dquot type 1 [ 145.367480][ T4430] device veth0_macvtap entered promiscuous mode [ 145.405725][ T4430] device veth1_macvtap entered promiscuous mode [ 145.440941][ T4676] EXT4-fs (loop0): 1 truncate cleaned up [ 145.457248][ T4676] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.474026][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.486740][ T4684] loop2: detected capacity change from 0 to 128 [ 145.503692][ T4676] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 145.513321][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.563339][ T3686] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.603921][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.640294][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.680719][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.722306][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.764916][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.793676][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.820634][ T3649] EXT4-fs (loop0): unmounting filesystem. [ 145.834083][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.853374][ T3686] usb 4-1: Using ep0 maxpacket: 16 [ 145.883394][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.891704][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.914110][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.922965][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.956140][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.983619][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.003553][ T3686] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 146.020673][ T3686] usb 4-1: config 0 has no interface number 0 [ 146.023353][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.057166][ T3686] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.068457][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.113174][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.113246][ T3686] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.174224][ T3686] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 146.178409][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.203256][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.228628][ T4430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.240075][ T3686] usb 4-1: config 0 descriptor?? [ 146.259579][ T4430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.335039][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.342465][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.365621][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.406284][ T4430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.428531][ T4430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.455451][ T4430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.487654][ T4430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.760853][ T3880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.783232][ T3880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.803659][ T48] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 146.812436][ T48] Bluetooth: hci2: Injecting HCI hardware error event [ 146.823848][ T3656] Bluetooth: hci2: hardware error 0x00 [ 146.834971][ T3686] wacom 0003:056A:0084.0003: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.3-1/input4 [ 146.941791][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.984158][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.992491][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.015527][ T3686] usb 4-1: USB disconnect, device number 3 [ 147.063661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.128098][ T4704] netlink: 'syz.2.254': attribute type 3 has an invalid length. [ 147.152725][ T4704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.254'. [ 147.247149][ T7] usb 2-1: USB disconnect, device number 5 [ 147.469725][ T4713] ip6gretap0 speed is unknown, defaulting to 1000 [ 147.481767][ T4713] ip6gretap0 speed is unknown, defaulting to 1000 [ 147.776389][ T27] audit: type=1326 audit(1722971125.970:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b39779f9 code=0x7ffc0000 [ 147.789470][ T4713] ip6gretap0 speed is unknown, defaulting to 1000 [ 147.824392][ T27] audit: type=1326 audit(1722971125.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f70b39779f9 code=0x7ffc0000 [ 148.699529][ T4731] loop2: detected capacity change from 0 to 512 [ 148.714355][ T4713] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.722218][ T27] audit: type=1326 audit(1722971125.970:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b39779f9 code=0x7ffc0000 [ 148.755202][ T4731] EXT4-fs (loop2): Test dummy encryption mode enabled [ 148.893596][ T3656] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 148.940710][ T27] audit: type=1326 audit(1722971125.970:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70b39779f9 code=0x7ffc0000 [ 148.982020][ T4713] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.997359][ T4731] EXT4-fs error (device loop2): __ext4_iget:5044: inode #11: block 1: comm syz.2.262: invalid block [ 149.012853][ T4731] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.262: couldn't read orphan inode 11 (err -117) [ 149.031271][ T4731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 149.076003][ T4731] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.262: Directory hole found for htree leaf block 0 [ 149.089701][ T27] audit: type=1326 audit(1722971125.970:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b39779f9 code=0x7ffc0000 [ 149.089747][ T27] audit: type=1326 audit(1722971125.970:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70b39779f9 code=0x7ffc0000 [ 149.089782][ T27] audit: type=1326 audit(1722971125.970:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b39779f9 code=0x7ffc0000 [ 149.089818][ T27] audit: type=1326 audit(1722971125.970:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.4.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70b3976390 code=0x7ffc0000 [ 149.496980][ T3880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.549068][ T4713] ip6gretap0 speed is unknown, defaulting to 1000 [ 149.622563][ T3880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.656696][ T4713] ip6gretap0 speed is unknown, defaulting to 1000 [ 149.742497][ T3880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.795125][ T4713] ip6gretap0 speed is unknown, defaulting to 1000 [ 149.818612][ T4713] ip6gretap0 speed is unknown, defaulting to 1000 [ 149.839951][ T4098] EXT4-fs (loop2): unmounting filesystem. [ 149.868647][ T3880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.901168][ C0] eth0: bad gso: type: 1, size: 1408 [ 149.920296][ T4713] ip6gretap0 speed is unknown, defaulting to 1000 [ 150.011537][ T4746] loop4: detected capacity change from 0 to 16 [ 150.072504][ T4746] erofs: (device loop4): mounted with root inode @ nid 36. [ 150.179589][ T4746] syz.4.270: attempt to access beyond end of device [ 150.179589][ T4746] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 150.205133][ T4746] syz.4.270: attempt to access beyond end of device [ 150.205133][ T4746] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 150.620166][ T4754] netlink: 'syz.3.272': attribute type 3 has an invalid length. [ 150.759041][ T4758] loop4: detected capacity change from 0 to 256 [ 151.041152][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.073293][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.083823][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.094071][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.102518][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.110993][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.252185][ T4769] nbd4: detected capacity change from 0 to 6 [ 151.319306][ T4767] block nbd4: shutting down sockets [ 151.396028][ T4764] ip6gretap0 speed is unknown, defaulting to 1000 [ 151.421042][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.430319][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.455308][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.464803][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.477091][ T1209] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.486307][ T1209] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.495296][ T1209] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.504603][ T1209] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.523418][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.533270][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.541057][ T4564] ldm_validate_partition_table(): Disk read failed. [ 151.556321][ T4771] loop4: detected capacity change from 0 to 2048 [ 151.572472][ T4771] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 151.576514][ T1209] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.591911][ T1209] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.600414][ T1209] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.610364][ T1209] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.610374][ T4771] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 151.643697][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.652774][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.663096][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.672231][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.680756][ T4564] Dev nbd4: unable to read RDB block 0 [ 151.688762][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.699874][ T52] Buffer I/O error on dev nbd4, logical block 0, async page read [ 151.709447][ T4564] nbd4: unable to read partition table [ 151.720533][ T4564] nbd4: partition table beyond EOD, truncated [ 151.726793][ T4771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.754134][ T4564] ldm_validate_partition_table(): Disk read failed. [ 151.772309][ T4564] Dev nbd4: unable to read RDB block 0 [ 151.778826][ T4564] nbd4: unable to read partition table [ 151.786089][ T4564] nbd4: partition table beyond EOD, truncated [ 152.283982][ T4748] loop2: detected capacity change from 0 to 40427 [ 152.360687][ T4748] F2FS-fs (loop2): invalid crc value [ 152.440233][ T4748] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.642431][ T3880] device hsr_slave_0 left promiscuous mode [ 152.673751][ T3880] device hsr_slave_1 left promiscuous mode [ 152.702807][ T4748] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 152.709680][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.730010][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.737461][ T4748] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.752448][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.767913][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.804276][ T3880] device bridge_slave_1 left promiscuous mode [ 152.820741][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.839602][ T3880] device bridge_slave_0 left promiscuous mode [ 152.855673][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.980056][ T3880] device veth1_macvtap left promiscuous mode [ 153.000977][ C0] eth0: bad gso: type: 1, size: 1408 [ 153.001969][ T3880] device veth0_macvtap left promiscuous mode [ 153.007645][ T4098] syz-executor: attempt to access beyond end of device [ 153.007645][ T4098] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.046959][ T3880] device veth1_vlan left promiscuous mode [ 153.075694][ T3880] device veth0_vlan left promiscuous mode [ 153.203372][ T3656] Bluetooth: hci0: command tx timeout [ 153.237145][ T4805] loop3: detected capacity change from 0 to 2048 [ 153.350458][ T4805] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 153.358444][ T4797] loop0: detected capacity change from 0 to 32768 [ 153.370817][ T4805] UDF-fs: Scanning with blocksize 512 failed [ 153.397571][ T4797] XFS: ikeep mount option is deprecated. [ 153.451540][ T4805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.466526][ T4783] loop4: detected capacity change from 0 to 40427 [ 153.484923][ T4783] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 153.515692][ T4783] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.556365][ T4797] XFS (loop0): Mounting V5 Filesystem [ 153.634629][ T4783] F2FS-fs (loop4): invalid crc value [ 153.652019][ T4783] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.407305][ T4797] XFS (loop0): Ending clean mount [ 154.430163][ T4783] F2FS-fs (loop4): recover fsync data on readonly fs [ 154.445591][ T4797] XFS (loop0): Quotacheck needed: Please wait. [ 154.512522][ T4783] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 154.585224][ T4783] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 154.640431][ T4797] XFS (loop0): Quotacheck: Done. [ 154.799257][ T4821] loop2: detected capacity change from 0 to 512 [ 154.854179][ T4821] EXT4-fs: quotafile must be on filesystem root [ 154.996498][ T3649] XFS (loop0): Unmounting Filesystem [ 155.011537][ T4823] fuse: Bad value for 'group_id' [ 155.065814][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 155.065830][ T27] audit: type=1326 audit(1722971133.290:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.2.287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3a47779f9 code=0x0 [ 155.337945][ T3656] Bluetooth: hci0: command tx timeout [ 156.189448][ T3880] team0 (unregistering): Port device team_slave_1 removed [ 156.277352][ T4834] nfs4: Unknown parameter 'context' [ 156.292135][ T4832] loop4: detected capacity change from 0 to 512 [ 156.315270][ T3880] team0 (unregistering): Port device team_slave_0 removed [ 156.351987][ T4836] loop0: detected capacity change from 0 to 256 [ 156.397166][ T4832] EXT4-fs (loop4): 1 orphan inode deleted [ 156.404437][ T4832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.425387][ T4832] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 156.446566][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.573747][ T4832] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz.4.292: Invalid inode table block 0 in block_group 0 [ 156.598025][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.617063][ T4832] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 156.648363][ T4832] EXT4-fs error (device loop4): ext4_alloc_file_blocks:4524: inode #16: comm syz.4.292: mark_inode_dirty error [ 156.734904][ T4430] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 156.751215][ T4430] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 157.061861][ T53] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 157.081659][ T53] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 157.092359][ T53] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm kworker/u4:4: mark_inode_dirty error [ 157.124003][ T53] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 117 [ 157.145312][ T53] EXT4-fs (loop4): This should not happen!! Data will be lost [ 157.145312][ T53] [ 157.157623][ T53] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 157.332411][ T3880] bond0 (unregistering): Released all slaves [ 157.363472][ T3656] Bluetooth: hci0: command tx timeout [ 157.557700][ T4764] chnl_net:caif_netlink_parms(): no params data found [ 157.584264][ T4855] x_tables: duplicate underflow at hook 2 [ 157.725879][ T4430] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 157.839399][ T4430] EXT4-fs (loop4): unmounting filesystem. [ 158.997273][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.031989][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.051091][ T4764] device bridge_slave_0 entered promiscuous mode [ 159.182643][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.197258][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.258631][ T4764] device bridge_slave_1 entered promiscuous mode [ 159.291878][ T4884] loop3: detected capacity change from 0 to 64 [ 159.407881][ T4764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.443642][ T3656] Bluetooth: hci0: command tx timeout [ 159.522883][ T4764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.743957][ T4764] team0: Port device team_slave_0 added [ 159.774886][ T4764] team0: Port device team_slave_1 added [ 159.811513][ T4891] overlayfs: failed to resolve './file0': -2 [ 159.907972][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.957938][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.027182][ T4764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.081716][ T3656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.096075][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.103124][ T3656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.114104][ T3656] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.130013][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.157385][ T3656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.228645][ T4764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.305758][ T3656] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.334235][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.495743][ T4903] 9pnet: p9_errstr2errno: server reported unknown error [ 160.822827][ T3655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.842431][ T3655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.864074][ T3655] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.887845][ T3655] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.126232][ T4764] device hsr_slave_0 entered promiscuous mode [ 161.163752][ T3655] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.172506][ T3655] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.286574][ T4764] device hsr_slave_1 entered promiscuous mode [ 161.314761][ T4764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.322939][ T4764] Cannot create hsr debugfs directory [ 161.362205][ T4894] ip6gretap0 speed is unknown, defaulting to 1000 [ 161.480058][ T4902] ip6gretap0 speed is unknown, defaulting to 1000 [ 162.423286][ T3656] Bluetooth: hci3: command tx timeout [ 163.158005][ T4902] chnl_net:caif_netlink_parms(): no params data found [ 163.201189][ T4894] chnl_net:caif_netlink_parms(): no params data found [ 163.203650][ T3656] Bluetooth: hci4: command tx timeout [ 164.555737][ T3656] Bluetooth: hci3: command tx timeout [ 164.942101][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.965687][ T4894] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.002818][ T4894] device bridge_slave_0 entered promiscuous mode [ 165.072612][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.103330][ T4894] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.171833][ T4894] device bridge_slave_1 entered promiscuous mode [ 165.313297][ T3656] Bluetooth: hci4: command tx timeout [ 165.462562][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.487863][ T4902] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.508961][ T4902] device bridge_slave_0 entered promiscuous mode [ 165.534063][ T4894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.622265][ T4902] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.643681][ T4902] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.671576][ T4902] device bridge_slave_1 entered promiscuous mode [ 165.733878][ T4894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.825693][ T4902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.885330][ T4902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.930401][ T4894] team0: Port device team_slave_0 added [ 165.941581][ T4764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.033750][ T4894] team0: Port device team_slave_1 added [ 166.040364][ T4764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.073493][ T4902] team0: Port device team_slave_0 added [ 166.094944][ T4764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.114127][ T4764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.177399][ T4902] team0: Port device team_slave_1 added [ 166.190747][ T4894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.203470][ T4894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.259189][ T4894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.320008][ T4894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.333928][ T4894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.388077][ T4894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.401320][ T4902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.423327][ T4902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.459654][ T4902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.475097][ T4902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.496464][ T4902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.523835][ T4902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.563509][ T3655] Bluetooth: hci3: command tx timeout [ 166.609798][ T3880] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.742713][ T3880] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.839642][ T4902] device hsr_slave_0 entered promiscuous mode [ 166.854304][ T4902] device hsr_slave_1 entered promiscuous mode [ 166.872254][ T4902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.880484][ T4902] Cannot create hsr debugfs directory [ 167.003925][ T3880] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.048451][ T4894] device hsr_slave_0 entered promiscuous mode [ 167.083311][ T4894] device hsr_slave_1 entered promiscuous mode [ 167.095922][ T4894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.113345][ T4894] Cannot create hsr debugfs directory [ 167.198331][ T3880] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.356252][ T4764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.363599][ T3655] Bluetooth: hci4: command tx timeout [ 167.430293][ T4764] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.467466][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.477274][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.535312][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.554184][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.562869][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.570063][ T4104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.589946][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.600262][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.614769][ T4104] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.622080][ T4104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.679164][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.701113][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.721186][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.860669][ T3880] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.890385][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.915374][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.925129][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.944465][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.953071][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.970085][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.009172][ T3880] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.051791][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.074386][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.082964][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.120983][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.215953][ T3880] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.335334][ T3880] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.644011][ T3655] Bluetooth: hci3: command tx timeout [ 168.767835][ T3880] tipc: Left network mode [ 168.873611][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.881117][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.061544][ T4764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.089554][ T4104] ip6gretap0 speed is unknown, defaulting to 1000 [ 169.108999][ T4104] ================================================================== [ 169.117116][ T4104] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430 [ 169.124349][ T4104] Read of size 4 at addr ffff88805c66c0e0 by task kworker/1:10/4104 [ 169.132345][ T4104] [ 169.134700][ T4104] CPU: 1 PID: 4104 Comm: kworker/1:10 Not tainted 6.1.103-syzkaller #0 [ 169.142961][ T4104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 169.153043][ T4104] Workqueue: infiniband ib_cache_event_task [ 169.159067][ T4104] Call Trace: [ 169.162393][ T4104] [ 169.165350][ T4104] dump_stack_lvl+0x1e3/0x2cb [ 169.170050][ T4104] ? nf_tcp_handle_invalid+0x642/0x642 [ 169.175603][ T4104] ? panic+0x764/0x764 [ 169.179675][ T4104] ? _printk+0xd1/0x111 [ 169.183840][ T4104] ? __virt_addr_valid+0x17f/0x530 [ 169.188961][ T4104] ? __virt_addr_valid+0x17f/0x530 [ 169.194077][ T4104] print_report+0x15f/0x4f0 [ 169.198580][ T4104] ? __virt_addr_valid+0x17f/0x530 [ 169.203697][ T4104] ? __virt_addr_valid+0x17f/0x530 [ 169.208811][ T4104] ? __virt_addr_valid+0x45b/0x530 [ 169.213928][ T4104] ? __phys_addr+0xb6/0x170 [ 169.218437][ T4104] ? siw_query_port+0x342/0x430 [ 169.223288][ T4104] kasan_report+0x136/0x160 [ 169.227794][ T4104] ? siw_query_port+0x342/0x430 [ 169.232657][ T4104] siw_query_port+0x342/0x430 [ 169.237334][ T4104] ? ib_query_port+0x344/0x7c0 [ 169.242104][ T4104] ib_cache_update+0x1a8/0xaf0 [ 169.246906][ T4104] ? ib_cache_setup_one+0x5a0/0x5a0 [ 169.252109][ T4104] ? read_lock_is_recursive+0x10/0x10 [ 169.257501][ T4104] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 169.263495][ T4104] ? print_irqtrace_events+0x210/0x210 [ 169.268962][ T4104] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 169.274857][ T4104] ib_cache_event_task+0xef/0x1e0 [ 169.279886][ T4104] ? process_one_work+0x7a9/0x11d0 [ 169.285007][ T4104] process_one_work+0x8a9/0x11d0 [ 169.289961][ T4104] ? worker_detach_from_pool+0x260/0x260 [ 169.295600][ T4104] ? _raw_spin_lock_irqsave+0x120/0x120 [ 169.301146][ T4104] ? kthread_data+0x4e/0xc0 [ 169.305669][ T4104] ? wq_worker_running+0x97/0x190 [ 169.310702][ T4104] worker_thread+0xa47/0x1200 [ 169.315385][ T4104] ? _raw_spin_unlock+0x40/0x40 [ 169.320241][ T4104] kthread+0x28d/0x320 [ 169.324305][ T4104] ? worker_clr_flags+0x190/0x190 [ 169.329331][ T4104] ? kthread_blkcg+0xd0/0xd0 [ 169.333935][ T4104] ret_from_fork+0x1f/0x30 [ 169.338363][ T4104] [ 169.341403][ T4104] [ 169.343723][ T4104] Allocated by task 3649: [ 169.348042][ T4104] kasan_set_track+0x4b/0x70 [ 169.352642][ T4104] __kasan_kmalloc+0x97/0xb0 [ 169.357241][ T4104] __kmalloc_node+0xb3/0x230 [ 169.361838][ T4104] kvmalloc_node+0x6e/0x180 [ 169.366340][ T4104] alloc_netdev_mqs+0x85/0xeb0 [ 169.371105][ T4104] rtnl_create_link+0x2e9/0xa30 [ 169.375978][ T4104] rtnl_newlink+0x1403/0x2050 [ 169.380663][ T4104] rtnetlink_rcv_msg+0x818/0xff0 [ 169.385608][ T4104] netlink_rcv_skb+0x1cd/0x410 [ 169.390380][ T4104] netlink_unicast+0x7d8/0x970 [ 169.395161][ T4104] netlink_sendmsg+0xa26/0xd60 [ 169.399935][ T4104] __sys_sendto+0x480/0x600 [ 169.404461][ T4104] __x64_sys_sendto+0xda/0xf0 [ 169.409139][ T4104] do_syscall_64+0x3b/0xb0 [ 169.413557][ T4104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.419470][ T4104] [ 169.421785][ T4104] Freed by task 3880: [ 169.425757][ T4104] kasan_set_track+0x4b/0x70 [ 169.430354][ T4104] kasan_save_free_info+0x27/0x40 [ 169.435378][ T4104] ____kasan_slab_free+0xd6/0x120 [ 169.440397][ T4104] __kmem_cache_free+0x25c/0x3c0 [ 169.445332][ T4104] device_release+0x91/0x1c0 [ 169.449918][ T4104] kobject_put+0x224/0x460 [ 169.454337][ T4104] netdev_run_todo+0xe56/0xf40 [ 169.459102][ T4104] ip6gre_exit_batch_net+0x41a/0x460 [ 169.464411][ T4104] cleanup_net+0x763/0xb60 [ 169.468843][ T4104] process_one_work+0x8a9/0x11d0 [ 169.473781][ T4104] worker_thread+0xa47/0x1200 [ 169.478455][ T4104] kthread+0x28d/0x320 [ 169.482522][ T4104] ret_from_fork+0x1f/0x30 [ 169.486942][ T4104] [ 169.489278][ T4104] The buggy address belongs to the object at ffff88805c66c000 [ 169.489278][ T4104] which belongs to the cache kmalloc-cg-4k of size 4096 [ 169.503596][ T4104] The buggy address is located 224 bytes inside of [ 169.503596][ T4104] 4096-byte region [ffff88805c66c000, ffff88805c66d000) [ 169.516955][ T4104] [ 169.519272][ T4104] The buggy address belongs to the physical page: [ 169.525684][ T4104] page:ffffea0001719a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c668 [ 169.535841][ T4104] head:ffffea0001719a00 order:3 compound_mapcount:0 compound_pincount:0 [ 169.544167][ T4104] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 169.552169][ T4104] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801284c280 [ 169.560748][ T4104] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 169.569427][ T4104] page dumped because: kasan: bad access detected [ 169.575838][ T4104] page_owner tracks the page as allocated [ 169.581541][ T4104] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3638, tgid 3638 (syz-executor), ts 69682386600, free_ts 18095367559 [ 169.602915][ T4104] post_alloc_hook+0x18d/0x1b0 [ 169.607689][ T4104] get_page_from_freelist+0x322e/0x33b0 [ 169.613240][ T4104] __alloc_pages+0x28d/0x770 [ 169.617832][ T4104] alloc_slab_page+0x6a/0x150 [ 169.622517][ T4104] new_slab+0x84/0x2d0 [ 169.626593][ T4104] ___slab_alloc+0xc20/0x1270 [ 169.631272][ T4104] __kmem_cache_alloc_node+0x19f/0x260 [ 169.636733][ T4104] kmalloc_trace+0x26/0xe0 [ 169.641148][ T4104] ipv6_add_dev+0x5a7/0x1180 [ 169.645743][ T4104] addrconf_notify+0x7a6/0xf60 [ 169.650502][ T4104] raw_notifier_call_chain+0xd0/0x170 [ 169.655878][ T4104] call_netdevice_notifiers+0x145/0x1b0 [ 169.661430][ T4104] register_netdevice+0x12f2/0x1720 [ 169.666627][ T4104] bond_newlink+0x37/0x80 [ 169.671048][ T4104] rtnl_newlink+0x14e3/0x2050 [ 169.675746][ T4104] rtnetlink_rcv_msg+0x818/0xff0 [ 169.680687][ T4104] page last free stack trace: [ 169.685349][ T4104] free_unref_page_prepare+0xf63/0x1120 [ 169.690905][ T4104] free_unref_page+0x33/0x3e0 [ 169.695584][ T4104] free_contig_range+0x9a/0x150 [ 169.700437][ T4104] destroy_args+0xfe/0x997 [ 169.704859][ T4104] debug_vm_pgtable+0x416/0x46b [ 169.709711][ T4104] do_one_initcall+0x265/0x8f0 [ 169.714497][ T4104] do_initcall_level+0x157/0x207 [ 169.719429][ T4104] do_initcalls+0x49/0x86 [ 169.723765][ T4104] kernel_init_freeable+0x45c/0x60f [ 169.728970][ T4104] kernel_init+0x19/0x290 [ 169.733311][ T4104] ret_from_fork+0x1f/0x30 [ 169.737744][ T4104] [ 169.740064][ T4104] Memory state around the buggy address: [ 169.745687][ T4104] ffff88805c66bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 169.753747][ T4104] ffff88805c66c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.761801][ T4104] >ffff88805c66c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.769873][ T4104] ^ [ 169.777061][ T4104] ffff88805c66c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.785120][ T4104] ffff88805c66c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.793176][ T4104] ================================================================== [ 169.804666][ T3655] Bluetooth: hci4: command tx timeout [ 169.947706][ T4104] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.954951][ T4104] CPU: 1 PID: 4104 Comm: kworker/1:10 Not tainted 6.1.103-syzkaller #0 [ 169.963216][ T4104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 169.973288][ T4104] Workqueue: infiniband ib_cache_event_task [ 169.979214][ T4104] Call Trace: [ 169.982511][ T4104] [ 169.985456][ T4104] dump_stack_lvl+0x1e3/0x2cb [ 169.990161][ T4104] ? nf_tcp_handle_invalid+0x642/0x642 [ 169.995646][ T4104] ? panic+0x764/0x764 [ 169.999740][ T4104] ? preempt_schedule_common+0xa6/0xd0 [ 170.005235][ T4104] ? vscnprintf+0x59/0x80 [ 170.009590][ T4104] panic+0x318/0x764 [ 170.013500][ T4104] ? check_panic_on_warn+0x1d/0xa0 [ 170.018633][ T4104] ? memcpy_page_flushcache+0xfc/0xfc [ 170.024031][ T4104] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 170.030032][ T4104] ? _raw_spin_unlock+0x40/0x40 [ 170.034900][ T4104] ? print_report+0x4a3/0x4f0 [ 170.039599][ T4104] check_panic_on_warn+0x7e/0xa0 [ 170.044557][ T4104] ? siw_query_port+0x342/0x430 [ 170.049421][ T4104] end_report+0x66/0x110 [ 170.053679][ T4104] kasan_report+0x143/0x160 [ 170.058206][ T4104] ? siw_query_port+0x342/0x430 [ 170.063080][ T4104] siw_query_port+0x342/0x430 [ 170.067778][ T4104] ? ib_query_port+0x344/0x7c0 [ 170.072561][ T4104] ib_cache_update+0x1a8/0xaf0 [ 170.077354][ T4104] ? ib_cache_setup_one+0x5a0/0x5a0 [ 170.082573][ T4104] ? read_lock_is_recursive+0x10/0x10 [ 170.088059][ T4104] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 170.094063][ T4104] ? print_irqtrace_events+0x210/0x210 [ 170.099547][ T4104] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 170.105461][ T4104] ib_cache_event_task+0xef/0x1e0 [ 170.110506][ T4104] ? process_one_work+0x7a9/0x11d0 [ 170.115638][ T4104] process_one_work+0x8a9/0x11d0 [ 170.120601][ T4104] ? worker_detach_from_pool+0x260/0x260 [ 170.126250][ T4104] ? _raw_spin_lock_irqsave+0x120/0x120 [ 170.131811][ T4104] ? kthread_data+0x4e/0xc0 [ 170.136341][ T4104] ? wq_worker_running+0x97/0x190 [ 170.141395][ T4104] worker_thread+0xa47/0x1200 [ 170.146099][ T4104] ? _raw_spin_unlock+0x40/0x40 [ 170.150979][ T4104] kthread+0x28d/0x320 [ 170.155063][ T4104] ? worker_clr_flags+0x190/0x190 [ 170.160105][ T4104] ? kthread_blkcg+0xd0/0xd0 [ 170.164712][ T4104] ret_from_fork+0x1f/0x30 [ 170.169159][ T4104] [ 170.172481][ T4104] Kernel Offset: disabled [ 170.176817][ T4104] Rebooting in 86400 seconds..