last executing test programs: 1m2.586422228s ago: executing program 4 (id=845): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) 1m2.439475401s ago: executing program 4 (id=847): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x10) fallocate(r2, 0x0, 0x0, 0x400001) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x7}, 0x9c) fcntl$addseals(r2, 0x409, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r2, 0x0) 57.110523498s ago: executing program 4 (id=862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, &(0x7f0000000240)) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x208101, 0x1a3) unlinkat(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2172, r0, 0x4000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) setrlimit(0xc, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000300), 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r5, &(0x7f0000001d00), 0x0, 0x1}, 0x20) 52.357517444s ago: executing program 4 (id=868): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 19.324502817s ago: executing program 0 (id=927): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_pgetevents(0x0, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0xfffffffffffffffd) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r4, &(0x7f00000077c0)={0x2020}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) getdents64(r5, 0x0, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) 16.182393562s ago: executing program 0 (id=933): r0 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000007090400001202060000052406000005240020000d240f010000000000000000000905820200020000000905030240"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_ep_read(r0, 0x3, 0xff33, 0x0) 13.574522971s ago: executing program 3 (id=940): unshare(0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r4, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/96}], 0x1e, 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r4, &(0x7f0000001b00)=""/194, 0xc2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x48}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6579, 0x1, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000240)={r7}) socket$nl_route(0x10, 0x3, 0x0) 12.592332187s ago: executing program 3 (id=941): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) 12.128009737s ago: executing program 3 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aa"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) 10.621638599s ago: executing program 0 (id=948): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r5, 0x29, 0x0, &(0x7f0000000000)=0x402, 0x4) connect$inet6(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r3]) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x101002, 0x112) pread64(r7, &(0x7f0000000080)=""/75, 0x4b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 8.22054338s ago: executing program 0 (id=952): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000160700b2310000f1260000410000000000", @ANYRES32=r0, @ANYBLOB="810400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0xfe01, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00006d2000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfeffffffffffff, &(0x7f0000000600)=','}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 7.293359571s ago: executing program 1 (id=955): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r5, 0x29, 0x0, &(0x7f0000000000)=0x402, 0x4) connect$inet6(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r3, @ANYBLOB=',\x00']) sendmsg$NFNL_MSG_CTHELPER_GET(r6, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x101002, 0x112) pread64(r7, &(0x7f0000000080)=""/75, 0x4b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 6.235942194s ago: executing program 1 (id=956): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 5.950593009s ago: executing program 3 (id=957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x5) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x401, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000005c0), 0x619}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000959740cc602e771fc2f82f8e2f21e4dac33abdc83bfb3183c29614f01a42c100ceb7f0414a4e37bbd68e23107e12b86c575f66650d9cedd7eecdadb20565b9fc671e0d70bd892abcfbf1c76963a6f40112a611cd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x11) socket(0x10, 0x3, 0x0) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x60) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 5.210411353s ago: executing program 1 (id=959): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='virtiofs\x00', 0x0, 0x0) 4.22413791s ago: executing program 1 (id=960): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x562, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100008b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsync(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000bc0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.160811885s ago: executing program 2 (id=961): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r5, 0x29, 0x0, &(0x7f0000000000)=0x402, 0x4) connect$inet6(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r3]) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x101002, 0x112) pread64(r7, &(0x7f0000000080)=""/75, 0x4b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 3.255459775s ago: executing program 2 (id=962): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10022, &(0x7f0000000500)=ANY=[@ANYRESDEC]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 3.056677882s ago: executing program 3 (id=963): unshare(0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r4, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/96}], 0x1e, 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r4, &(0x7f0000001b00)=""/194, 0xc2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x48}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6579, 0x1, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000240)={r7}) socket$nl_route(0x10, 0x3, 0x0) 2.291909019s ago: executing program 4 (id=885): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.238699694s ago: executing program 2 (id=964): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="410106000a000200aaaaaa"], 0x28}}, 0x0) 2.119200204s ago: executing program 2 (id=965): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r5, 0x29, 0x0, &(0x7f0000000000)=0x402, 0x4) connect$inet6(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r3, @ANYBLOB=',\x00']) sendmsg$NFNL_MSG_CTHELPER_GET(r6, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x101002, 0x112) pread64(r7, &(0x7f0000000080)=""/75, 0x4b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 1.240689571s ago: executing program 3 (id=966): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d312c6e6f7374726963742c6c617374626c6f636b3d30303030303030303030303030303030303534362c6769643d666f726765742c6c6f6e6761642c6c6f6e6761642c756e64656c6574652c6d6f64653d30303030303030303030303030303030303030303030352c66696c657365743d30303030303030303030303030303030303030352c00dec7384d8361a83b0c62d0234b0736200709c52d3e3f9a6b8c5dc6bb7c76b4915fba54683d202192d9190f2b60a16fc088c41f1a3eb4a78b4ac61f8bee04ae1cf7901c792b3a8eff396e2065bc6c5f90f860a13e0bd7a8f1ff"], 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) fadvise64(r0, 0x0, 0x0, 0x4) 304.307703ms ago: executing program 2 (id=967): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc3d, &(0x7f00000021c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 271.227266ms ago: executing program 4 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005400000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008"], 0x28}}, 0x0) 268.987046ms ago: executing program 1 (id=969): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 180.414424ms ago: executing program 0 (id=970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) 42.573446ms ago: executing program 0 (id=971): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r5, 0x29, 0x0, &(0x7f0000000000)=0x402, 0x4) connect$inet6(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r3]) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x101002, 0x112) pread64(r7, &(0x7f0000000080)=""/75, 0x4b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 23.347868ms ago: executing program 1 (id=972): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='virtiofs\x00', 0x0, 0x0) 0s ago: executing program 2 (id=973): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): DEV_CHANGE): veth1_to_bond: link becomes ready [ 162.067362][ T4966] hfsplus: unable to parse mount options [ 162.096894][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.110565][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.242862][ T4954] SQUASHFS error: zstd decompression error: 2 [ 162.265423][ T4954] SQUASHFS error: zstd decompression failed, data probably corrupt [ 162.284788][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.029240][ T4954] SQUASHFS error: Failed to read block 0x62b: -5 [ 163.040119][ T4955] SQUASHFS error: Unable to read metadata cache entry [629] [ 163.058403][ T4954] SQUASHFS error: Unable to read metadata cache entry [629] [ 163.175821][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.653398][ T4955] SQUASHFS error: Unable to read directory block [629:ff26] [ 163.653445][ T4954] SQUASHFS error: Unable to read directory block [629:ff26] [ 163.692312][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.741196][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.755216][ T4979] loop3: detected capacity change from 0 to 1024 [ 163.797406][ T4979] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 163.824181][ T4979] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 163.903389][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.942451][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.989882][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.031121][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.101858][ T4989] binder: 4985:4989 ioctl c0306201 20000580 returned -14 [ 164.666522][ T4992] loop1: detected capacity change from 0 to 1024 [ 165.248195][ T5005] dccp_xmit_packet: Payload too large (65475) for featneg. [ 165.816107][ T5000] dccp_close: ABORT with 65475 bytes unread [ 165.826143][ T5000] dccp_close: ABORT with 11 bytes unread [ 166.214294][ T4992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.370469][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.405475][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.912429][ T4801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.015997][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.026996][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.518189][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.540907][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.595623][ T4801] device veth0_vlan entered promiscuous mode [ 167.604559][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.647124][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.662667][ T4801] device veth1_vlan entered promiscuous mode [ 167.754320][ T4801] device veth0_macvtap entered promiscuous mode [ 167.814196][ T4801] device veth1_macvtap entered promiscuous mode [ 167.851966][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.897516][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.928367][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.103816][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.778157][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.811477][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.843080][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.859540][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.884893][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.908748][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.933065][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.974411][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.994870][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.022979][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.080574][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.123065][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.142684][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.193360][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.239236][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.256371][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.272337][ T5037] loop1: detected capacity change from 0 to 1024 [ 169.283130][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.293503][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.305167][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.318705][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.330401][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.340818][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.351964][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.373561][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.381213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.404002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.414556][ T5037] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 169.454948][ T5037] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 170.385046][ T5040] dccp_close: ABORT with 11 bytes unread [ 170.756770][ T4801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.758379][ T3617] Bluetooth: hci3: command 0x0406 tx timeout [ 170.849084][ T4801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.037785][ T5051] loop2: detected capacity change from 0 to 512 [ 171.229831][ T4801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.263325][ T4801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.615443][ T5051] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 171.758893][ T5051] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.906553][ T5051] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 171.973996][ T5051] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 171.984799][ T5051] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.358: Failed to acquire dquot type 1 [ 172.032353][ T5051] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.358: bg 0: block 40: padding at end of block bitmap is not set [ 172.185236][ T5051] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 172.880324][ T5051] EXT4-fs (loop2): 1 truncate cleaned up [ 173.710716][ T5068] sched: RT throttling activated [ 173.744873][ T5051] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.767031][ T4073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.267579][ T4073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.440054][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.460331][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.524403][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.918368][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.930143][ T5090] loop1: detected capacity change from 0 to 1024 [ 175.966932][ T5090] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 175.989722][ T5096] loop0: detected capacity change from 0 to 2048 [ 176.007727][ T5090] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 176.032477][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.175980][ T5096] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.200940][ T5132] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 182.249166][ T5136] loop4: detected capacity change from 0 to 1024 [ 182.888690][ T5136] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 182.937662][ T5136] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 184.414538][ T3613] Bluetooth: hci0: command 0x0406 tx timeout [ 185.936982][ T9] device hsr_slave_0 left promiscuous mode [ 185.992654][ T9] device hsr_slave_1 left promiscuous mode [ 187.511335][ T5205] loop4: detected capacity change from 0 to 16 [ 187.524689][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.532339][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.355361][ T5205] erofs: (device loop4): mounted with root inode @ nid 36. [ 188.567537][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.586465][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.604567][ T5211] loop0: detected capacity change from 0 to 1024 [ 188.881174][ T9] device bridge_slave_1 left promiscuous mode [ 188.977836][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.991813][ T5211] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 189.004431][ T9] device bridge_slave_0 left promiscuous mode [ 189.010667][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.028750][ T5211] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 189.200685][ T9] device veth1_macvtap left promiscuous mode [ 189.206850][ T9] device veth0_macvtap left promiscuous mode [ 189.231090][ T9] device veth1_vlan left promiscuous mode [ 189.737872][ T9] device veth0_vlan left promiscuous mode [ 190.133190][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 190.656341][ T9] team0 (unregistering): Port device team_slave_1 removed [ 190.663093][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 190.676312][ T9] team0 (unregistering): Port device team_slave_0 removed [ 190.689782][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.706636][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.782596][ T9] bond0 (unregistering): Released all slaves [ 190.783266][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 190.805799][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 190.983193][ T23] usb 1-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 190.995621][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.008074][ T23] usb 1-1: Product: syz [ 191.100335][ T23] usb 1-1: Manufacturer: syz [ 191.508855][ T23] usb 1-1: SerialNumber: syz [ 191.551384][ T23] usb 1-1: config 0 descriptor?? [ 191.614305][ T23] rndis_wlan 1-1:0.0: skipping garbage [ 191.633499][ T23] usb 1-1: bad CDC descriptors [ 191.675090][ T23] rndis_host 1-1:0.0: skipping garbage [ 191.727436][ T23] usb 1-1: bad CDC descriptors [ 191.732570][ T23] cdc_acm 1-1:0.0: skipping garbage [ 191.775359][ T5255] loop2: detected capacity change from 0 to 2048 [ 191.811009][ T23] usb 1-1: USB disconnect, device number 5 [ 191.910378][ T5269] loop3: detected capacity change from 0 to 1024 [ 191.979685][ T5271] loop1: detected capacity change from 0 to 1024 [ 192.026199][ T5271] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 192.060522][ T5271] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 192.088217][ T5255] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.405356][ T5279] devtmpfs: Bad value for 'nr_inodes' [ 193.503870][ T5296] binder: BINDER_SET_CONTEXT_MGR already set [ 193.512020][ T5296] binder: 5293:5296 ioctl 4018620d 200001c0 returned -16 [ 193.787106][ T5296] binder: 5293:5296 ioctl c0406618 20000780 returned -22 [ 193.806360][ T5303] loop4: detected capacity change from 0 to 8 [ 193.885661][ T5303] SQUASHFS error: Unable to read directory block [6aa:9] [ 194.835778][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.842934][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.401535][ T5317] loop0: detected capacity change from 0 to 1024 [ 195.446436][ T5317] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 195.479717][ T5317] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 195.974642][ T5323] binder: 5309:5323 unknown command 0 [ 195.980148][ T5323] binder: 5309:5323 ioctl c0306201 20000080 returned -22 [ 195.988920][ T5323] binder: BINDER_SET_CONTEXT_MGR already set [ 195.994945][ T5323] binder: 5309:5323 ioctl 4018620d 20000040 returned -16 [ 196.002579][ T5323] binder: 5309:5323 ioctl c0306201 0 returned -14 [ 196.009386][ T5323] binder: 5309:5323 ioctl c0306201 200002c0 returned -14 [ 199.047707][ T5351] loop4: detected capacity change from 0 to 2048 [ 199.089324][ T5364] loop1: detected capacity change from 0 to 1024 [ 199.093186][ T3659] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 199.150194][ T5351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.208898][ T5369] loop3: detected capacity change from 0 to 1024 [ 199.266731][ T5369] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 199.280882][ T5369] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 199.645448][ T3659] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 199.676096][ T3659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.906170][ T3659] usb 3-1: Product: syz [ 199.910373][ T3659] usb 3-1: Manufacturer: syz [ 199.923315][ T3659] usb 3-1: SerialNumber: syz [ 200.354239][ T3659] usb 3-1: config 0 descriptor?? [ 200.591899][ T5387] binder: 5376:5387 unknown command 0 [ 200.597770][ T5387] binder: 5376:5387 ioctl c0306201 20000080 returned -22 [ 200.606551][ T5387] binder: BINDER_SET_CONTEXT_MGR already set [ 200.612549][ T5387] binder: 5376:5387 ioctl 4018620d 20000040 returned -16 [ 200.620255][ T5387] binder: 5376:5387 ioctl c0306201 0 returned -14 [ 200.627080][ T5387] binder: 5376:5387 ioctl c0306201 200002c0 returned -14 [ 201.935865][ T3659] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 202.023857][ T3659] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 202.059295][ T3659] usb 3-1: USB disconnect, device number 7 [ 203.884402][ T5411] loop0: detected capacity change from 0 to 1024 [ 204.817997][ T5424] loop2: detected capacity change from 0 to 1024 [ 204.882109][ T5411] EXT4-fs (loop0): Test dummy encryption mode enabled [ 204.890288][ T5411] EXT4-fs (loop0): Invalid want_extra_isize 125 [ 204.900795][ T5424] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 204.916570][ T5424] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 205.137267][ T1076] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 206.751226][ T5454] 9pnet: Insufficient options for proto=fd [ 206.844058][ T5459] binder: 5427:5459 unknown command 0 [ 206.849519][ T5459] binder: 5427:5459 ioctl c0306201 20000080 returned -22 [ 206.858272][ T5459] binder: BINDER_SET_CONTEXT_MGR already set [ 206.864339][ T5459] binder: 5427:5459 ioctl 4018620d 20000040 returned -16 [ 206.872023][ T5459] binder: 5427:5459 ioctl c0306201 0 returned -14 [ 206.879387][ T5459] binder: 5427:5459 ioctl c0306201 200002c0 returned -14 [ 207.063177][ T1076] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 207.072250][ T1076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.734074][ T1076] usb 2-1: Product: syz [ 207.738300][ T1076] usb 2-1: Manufacturer: syz [ 207.743831][ T1076] usb 2-1: SerialNumber: syz [ 207.750338][ T1076] usb 2-1: config 0 descriptor?? [ 207.875113][ T1076] cx82310_eth: probe of 2-1:0.0 failed with error -22 [ 209.723270][ T1076] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 209.750465][ T1076] usb 2-1: USB disconnect, device number 3 [ 211.048701][ T5498] 9pnet: Insufficient options for proto=fd [ 211.261241][ T5501] binder: 5499:5501 unknown command 0 [ 211.266759][ T5501] binder: 5499:5501 ioctl c0306201 20000080 returned -22 [ 211.275775][ T5501] binder: BINDER_SET_CONTEXT_MGR already set [ 211.282431][ T5501] binder: 5499:5501 ioctl 4018620d 20000040 returned -16 [ 211.290441][ T5501] binder: 5499:5501 ioctl c0306201 0 returned -14 [ 211.297389][ T5501] binder: 5499:5501 ioctl c0306201 200002c0 returned -14 [ 212.096294][ T5522] loop4: detected capacity change from 0 to 2048 [ 212.261002][ T5522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.833287][ T1076] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 212.963508][ T5529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 212.972676][ T5529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 214.067422][ T5540] 9pnet: Insufficient options for proto=fd [ 214.216292][ T5553] binder: 5541:5553 unknown command 0 [ 214.222014][ T5553] binder: 5541:5553 ioctl c0306201 20000080 returned -22 [ 214.239096][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 214.245178][ T5553] binder: 5541:5553 ioctl 4018620d 20000040 returned -16 [ 214.255465][ T5553] binder: 5541:5553 ioctl c0306201 0 returned -14 [ 214.263644][ T5553] binder: 5541:5553 ioctl c0306201 200002c0 returned -14 [ 214.304001][ T1076] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 214.477993][ T1076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.684026][ T1076] usb 4-1: Product: syz [ 214.856085][ T1076] usb 4-1: Manufacturer: syz [ 214.861053][ T1076] usb 4-1: SerialNumber: syz [ 214.874555][ T1076] usb 4-1: config 0 descriptor?? [ 214.934652][ T1076] usb 4-1: can't set config #0, error -71 [ 214.952677][ T5567] loop1: detected capacity change from 0 to 1024 [ 215.036498][ T1076] usb 4-1: USB disconnect, device number 4 [ 215.067438][ T5567] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 215.236970][ T5567] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 215.270601][ T5571] loop3: detected capacity change from 0 to 2048 [ 217.402475][ T5571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.625016][ T5593] loop0: detected capacity change from 0 to 512 [ 217.648235][ T5593] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 217.761271][ T5593] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 217.790820][ T5593] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 217.809926][ T5602] loop3: detected capacity change from 0 to 1024 [ 217.816117][ T5593] System zones: 0-2, 18-18, 34-35 [ 217.852326][ T5602] EXT4-fs (loop3): Test dummy encryption mode enabled [ 217.875105][ T5593] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,data_err=ignore,,errors=continue. Quota mode: none. [ 217.884220][ T5602] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 217.900840][ T5605] loop1: detected capacity change from 0 to 256 [ 217.939743][ T5602] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 217.976425][ T5593] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 217.987599][ T5602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 218.019335][ T5611] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 218.069008][ T5602] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 218.092150][ T5611] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 218.106080][ T5611] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 218.119928][ T5605] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 218.373534][ T5616] binder: 5610:5616 unknown command 0 [ 218.378983][ T5616] binder: 5610:5616 ioctl c0306201 20000080 returned -22 [ 218.388614][ T5616] binder: BINDER_SET_CONTEXT_MGR already set [ 218.394741][ T5616] binder: 5610:5616 ioctl 4018620d 20000040 returned -16 [ 218.402426][ T5616] binder: 5610:5616 ioctl c0306201 0 returned -14 [ 218.409300][ T5616] binder: 5610:5616 ioctl c0306201 200002c0 returned -14 [ 219.330805][ T5602] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 219.495742][ T5629] loop0: detected capacity change from 0 to 2048 [ 219.925534][ T5629] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 220.236912][ T5629] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 220.310314][ T5637] loop3: detected capacity change from 0 to 1024 [ 220.324127][ T5637] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 220.428325][ T5637] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 220.453350][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.314660][ T5645] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.514: bg 0: block 234: padding at end of block bitmap is not set [ 221.652976][ T5645] EXT4-fs (loop0): Remounting filesystem read-only [ 223.355328][ T4801] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /28/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 223.560314][ T4801] EXT4-fs error (device loop0): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 223.589368][ T4801] EXT4-fs error (device loop0): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 225.220827][ T5706] loop4: detected capacity change from 0 to 16 [ 225.309438][ T5706] erofs: (device loop4): mounted with root inode @ nid 36. [ 226.166386][ T5723] loop2: detected capacity change from 0 to 1024 [ 226.307838][ T5723] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 226.351745][ T5716] device syzkaller0 entered promiscuous mode [ 226.462306][ T5723] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 226.487215][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.576477][ T5741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.542'. [ 227.633713][ T5747] loop2: detected capacity change from 0 to 128 [ 227.693528][ T5747] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 227.707553][ C1] eth0: bad gso: type: 1, size: 1408 [ 227.817972][ T5732] chnl_net:caif_netlink_parms(): no params data found [ 227.833926][ T5747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.597508][ T5747] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 228.751763][ T5771] loop4: detected capacity change from 0 to 1024 [ 228.814540][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.849022][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.902347][ T5732] device bridge_slave_0 entered promiscuous mode [ 228.910994][ T5771] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.912531][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.989540][ T5776] loop2: detected capacity change from 0 to 1024 [ 229.003437][ T1076] Bluetooth: hci2: command 0x0409 tx timeout [ 229.030108][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.040837][ T5776] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 229.065787][ T5776] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 229.096678][ T5732] device bridge_slave_1 entered promiscuous mode [ 229.276914][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.288776][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.361951][ T5732] team0: Port device team_slave_0 added [ 229.391315][ T5732] team0: Port device team_slave_1 added [ 229.409936][ T5780] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 229.556499][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.583065][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.612711][ T5781] binder: 5760:5781 unknown command 0 [ 229.650067][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.673004][ T5781] binder: 5760:5781 ioctl c0306201 20000080 returned -22 [ 229.687008][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.703846][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.747950][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.833227][ T26] audit: type=1326 audit(1726022588.177:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.3.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9515f80ef9 code=0x0 [ 229.948666][ T5785] device syzkaller0 entered promiscuous mode [ 230.478771][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.665762][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.847073][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 230.899491][ T5732] device hsr_slave_0 entered promiscuous mode [ 230.906576][ T5732] device hsr_slave_1 entered promiscuous mode [ 230.931659][ T5732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.950864][ T5732] Cannot create hsr debugfs directory [ 231.083120][ T3614] Bluetooth: hci2: command 0x041b tx timeout [ 232.232022][ T5732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.287012][ T5812] binder: 5798:5812 unknown command 0 [ 232.303140][ T5812] binder: 5798:5812 ioctl c0306201 20000080 returned -22 [ 232.378330][ T5812] binder: 5798:5812 ioctl c0306201 0 returned -14 [ 232.421266][ T5732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.545887][ T5818] netlink: 92 bytes leftover after parsing attributes in process `syz.2.562'. [ 232.646708][ T5732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.797099][ T5821] loop2: detected capacity change from 0 to 1024 [ 232.880097][ T5821] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 233.004680][ T5821] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 233.179450][ T13] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 233.188341][ T13] Bluetooth: hci3: Injecting HCI hardware error event [ 233.198104][ T3570] Bluetooth: hci3: hardware error 0x00 [ 233.209011][ T1076] Bluetooth: hci2: command 0x040f tx timeout [ 233.281069][ T5732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.056194][ T5832] loop3: detected capacity change from 0 to 16 [ 234.155745][ T5832] erofs: (device loop3): mounted with root inode @ nid 36. [ 234.205978][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 234.336366][ T5835] device syzkaller0 entered promiscuous mode [ 234.348534][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 234.490156][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 234.538984][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.301337][ T3611] Bluetooth: hci2: command 0x0419 tx timeout [ 236.864429][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.879080][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.116596][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.131982][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.865015][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.880333][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.908642][ T5866] loop4: detected capacity change from 0 to 1024 [ 237.939200][ T5866] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 237.960673][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.967904][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.994023][ T5866] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 238.098965][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.156859][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.191037][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.211213][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.218453][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.251319][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.818408][ T5732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.983700][ T5732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.997946][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.031621][ T5881] binder: 5867:5881 unknown command 0 [ 239.044177][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.165454][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.402308][ T5882] binder: 5880:5882 unknown command 0 [ 239.407853][ T5882] binder: 5880:5882 ioctl c0306201 20000080 returned -22 [ 239.421466][ T5882] binder: BINDER_SET_CONTEXT_MGR already set [ 239.427607][ T5882] binder: 5880:5882 ioctl 4018620d 20000040 returned -16 [ 239.438264][ T5882] binder: 5880:5882 ioctl c0306201 0 returned -14 [ 239.447085][ T5882] binder: 5880:5882 ioctl c0306201 200002c0 returned -14 [ 239.486464][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.541536][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.546272][ T5881] binder: 5867:5881 ioctl c0306201 20000080 returned -22 [ 239.558104][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.574794][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.594957][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.604285][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.623114][ T5876] dccp_close: ABORT with 65475 bytes unread [ 239.623392][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.761691][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.031127][ T5886] device syzkaller0 entered promiscuous mode [ 240.151489][ T3774] device hsr_slave_0 left promiscuous mode [ 240.211826][ T3774] device hsr_slave_1 left promiscuous mode [ 240.221715][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.243769][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.206128][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.253614][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.404732][ T3774] device bridge_slave_1 left promiscuous mode [ 241.411164][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.420071][ T3774] device bridge_slave_0 left promiscuous mode [ 241.430394][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.466437][ T3774] device veth1_macvtap left promiscuous mode [ 241.472520][ T3774] device veth0_macvtap left promiscuous mode [ 241.479016][ T3774] device veth1_vlan left promiscuous mode [ 241.648222][ T3774] device veth0_vlan left promiscuous mode [ 242.564932][ T5918] loop4: detected capacity change from 0 to 1024 [ 242.617080][ T5918] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 242.659956][ T5918] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 242.863081][ T3774] team0 (unregistering): Port device team_slave_1 removed [ 242.881497][ T3774] team0 (unregistering): Port device team_slave_0 removed [ 242.903294][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.917118][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.476592][ T3774] bond0 (unregistering): Released all slaves [ 243.605984][ T5927] loop4: detected capacity change from 0 to 512 [ 243.633002][ T5916] device lo entered promiscuous mode [ 243.656906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.680793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.701070][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.733487][ T5916] device lo left promiscuous mode [ 243.951186][ T5930] binder: 5928:5930 unknown command 0 [ 243.957047][ T5930] binder: 5928:5930 ioctl c0306201 20000080 returned -22 [ 243.965843][ T5930] binder: BINDER_SET_CONTEXT_MGR already set [ 243.971939][ T5930] binder: 5928:5930 ioctl 4018620d 20000040 returned -16 [ 243.979611][ T5930] binder: 5928:5930 ioctl c0306201 0 returned -14 [ 243.986580][ T5930] binder: 5928:5930 ioctl c0306201 200002c0 returned -14 [ 244.004242][ T4073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.221753][ T5927] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 244.240918][ T4073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.270246][ T5927] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 244.370163][ T4073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.412531][ T4073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.479291][ T4073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.488001][ T4073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.522863][ T5732] device veth0_vlan entered promiscuous mode [ 244.545518][ T5732] device veth1_vlan entered promiscuous mode [ 244.640407][ T3617] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 244.771543][ T5949] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 244.784229][ T5949] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 244.793811][ T5949] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.588: Failed to acquire dquot type 0 [ 245.154221][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.187960][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.257772][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.308459][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.350422][ T5732] device veth0_macvtap entered promiscuous mode [ 245.529335][ T5732] device veth1_macvtap entered promiscuous mode [ 245.546288][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.558587][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.569621][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.594854][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.613963][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.626162][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.636789][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.651157][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.672282][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.686927][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.700240][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.711779][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.737789][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.757669][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.768836][ T3617] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 245.771088][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.780891][ T3617] usb 3-1: config 0 has no interface number 0 [ 245.788119][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.804607][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.815192][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.047596][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.165646][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.623353][ T3617] usb 3-1: New USB device found, idVendor=1c9e, idProduct=9801, bcdDevice=25.d8 [ 246.661099][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.669517][ T5968] loop3: detected capacity change from 0 to 128 [ 246.676283][ T3617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.693149][ T3617] usb 3-1: Product: syz [ 246.698585][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.706452][ T3617] usb 3-1: Manufacturer: syz [ 246.803065][ T5970] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.824930][ T5970] netlink: 580 bytes leftover after parsing attributes in process `syz.1.598'. [ 247.432791][ T5972] udc-core: couldn't find an available UDC or it's busy [ 247.454287][ T3617] usb 3-1: SerialNumber: syz [ 247.479224][ T5972] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 248.466166][ T3617] usb 3-1: config 0 descriptor?? [ 248.486953][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.504842][ T3617] usb 3-1: bad CDC descriptors [ 248.510858][ T3617] usb 3-1: bad CDC descriptors [ 248.616355][ T5978] binder: 5977:5978 unknown command 0 [ 248.621747][ T5978] binder: 5977:5978 ioctl c0306201 20000080 returned -22 [ 248.631174][ T5978] binder: 5977:5978 ioctl c0306201 0 returned -14 [ 248.638360][ T5978] binder: 5977:5978 ioctl c0306201 200002c0 returned -14 [ 248.675665][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.716400][ T1076] usb 3-1: USB disconnect, device number 8 [ 248.765728][ T5732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.783840][ T5732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.797074][ T5732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.813054][ T5732] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.813201][ T3611] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 248.975526][ T5989] loop1: detected capacity change from 0 to 256 [ 248.988219][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.018210][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.044230][ T4073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.051686][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.052409][ T4073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.096076][ T5989] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 249.132876][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.273510][ T3611] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.326746][ T3611] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.378532][ T3611] usb 4-1: config 0 interface 0 has no altsetting 0 [ 249.874355][ T3611] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.535213][ T5992] loop2: detected capacity change from 0 to 1024 [ 250.689657][ T3611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.697817][ T3611] usb 4-1: Product: syz [ 250.707065][ T3611] usb 4-1: Manufacturer: syz [ 250.713499][ T3611] usb 4-1: config 0 descriptor?? [ 250.743389][ T3611] usb 4-1: can't set config #0, error -71 [ 250.907743][ T3611] usb 4-1: USB disconnect, device number 5 [ 251.020191][ T9] hfsplus: b-tree write err: -5, ino 4 [ 251.646142][ T6026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.614'. [ 251.694310][ T6018] chnl_net:caif_netlink_parms(): no params data found [ 253.320862][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 253.956503][ T6041] dccp_close: ABORT with 65475 bytes unread [ 253.966815][ T6041] dccp_close: ABORT with 11 bytes unread [ 254.334845][ T6051] loop4: detected capacity change from 0 to 128 [ 254.385988][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.408535][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.462659][ T6018] device bridge_slave_0 entered promiscuous mode [ 255.559174][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.569915][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.712848][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.722574][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.734078][ T6018] device bridge_slave_1 entered promiscuous mode [ 255.763328][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.442894][ T23] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 256.452159][ T6066] loop0: detected capacity change from 0 to 256 [ 256.470193][ T6069] loop2: detected capacity change from 0 to 512 [ 256.515858][ T3614] Bluetooth: hci3: command 0x041b tx timeout [ 256.552206][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.660243][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.700829][ T6069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 256.771971][ T6069] EXT4-fs (loop2): 1 truncate cleaned up [ 256.793034][ T6069] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000005,minixdf,auto_da_alloc,block_validity,quota,,errors=continue. Quota mode: writeback. [ 256.817929][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.843293][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.864840][ T23] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.879313][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.539515][ T6080] usb usb8: usbfs: process 6080 (syz.0.628) did not claim interface 0 before use [ 257.654896][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.786080][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.799292][ T23] usb 5-1: Product: syz [ 259.112529][ T3611] Bluetooth: hci4: command 0x0406 tx timeout [ 259.149685][ T23] usb 5-1: config 0 descriptor?? [ 259.183295][ T23] usb 5-1: can't set config #0, error -71 [ 259.201970][ T23] usb 5-1: USB disconnect, device number 4 [ 259.213137][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 259.382491][ T6018] team0: Port device team_slave_0 added [ 259.428125][ T6018] team0: Port device team_slave_1 added [ 259.715268][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.747825][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.819331][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.858668][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.884692][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.053034][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.108273][ T6018] device hsr_slave_0 entered promiscuous mode [ 260.126595][ T6018] device hsr_slave_1 entered promiscuous mode [ 260.426347][ T6114] loop0: detected capacity change from 0 to 512 [ 260.534811][ T6018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.598770][ T6114] EXT4-fs (loop0): Ignoring removed bh option [ 260.773425][ T6114] EXT4-fs error (device loop0): __ext4_iget:4872: inode #12: block 2: comm syz.0.640: invalid block [ 260.910921][ T6018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.968212][ T6114] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.640: couldn't read orphan inode 12 (err -117) [ 261.379985][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 261.442090][ T6117] dccp_close: ABORT with 65475 bytes unread [ 261.678601][ T6114] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 262.173753][ T3774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.521288][ T3659] Bluetooth: hci4: command 0x0409 tx timeout [ 263.128174][ T3659] Bluetooth: hci1: command 0x0406 tx timeout [ 263.148794][ T6114] loop0: detected capacity change from 0 to 256 [ 263.172639][ T6018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.404207][ T3774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.419974][ T6114] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 263.801211][ T6018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.867554][ T3774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.981750][ T3774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.028117][ T6115] chnl_net:caif_netlink_parms(): no params data found [ 265.125240][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 265.141618][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.173052][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.186987][ T6115] device bridge_slave_0 entered promiscuous mode [ 265.318197][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.405728][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.571231][ T6115] device bridge_slave_1 entered promiscuous mode [ 265.823683][ T6161] dccp_close: ABORT with 65475 bytes unread [ 265.978899][ T6115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.993280][ T6114] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 266.040240][ T6115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.151070][ T6182] loop2: detected capacity change from 0 to 1024 [ 267.155617][ T6115] team0: Port device team_slave_0 added [ 267.171023][ T3659] Bluetooth: hci4: command 0x040f tx timeout [ 267.185313][ T6115] team0: Port device team_slave_1 added [ 267.297505][ T3773] hfsplus: b-tree write err: -5, ino 4 [ 267.403585][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.411008][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.540567][ T6115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.568208][ T6018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.599323][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.610138][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.641113][ T6115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.654274][ T6018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.706389][ T6018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.728330][ T6018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.798039][ T3617] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 267.932865][ T6115] device hsr_slave_0 entered promiscuous mode [ 267.951871][ T6115] device hsr_slave_1 entered promiscuous mode [ 267.974952][ T6115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.990511][ T6115] Cannot create hsr debugfs directory [ 268.073126][ T3617] usb 3-1: Using ep0 maxpacket: 16 [ 268.181411][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.203492][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 268.232146][ T3617] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 268.251989][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.296614][ T3617] usb 3-1: config 0 descriptor?? [ 268.346186][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.361096][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.379561][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.457195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.474745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.493882][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.501164][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.519027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.529630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.538745][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.546029][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.649658][ T6018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.678407][ T6018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.893561][ T6223] binder: BINDER_SET_CONTEXT_MGR already set [ 268.899772][ T6223] binder: 6218:6223 ioctl 4018620d 20000040 returned -16 [ 269.644290][ T3659] Bluetooth: hci4: command 0x0419 tx timeout [ 269.723514][ T6196] udc-core: couldn't find an available UDC or it's busy [ 269.964027][ T6196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 270.062763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.088689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.100686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.112697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.125162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.126441][ T3617] hid (null): unknown global tag 0x83 [ 270.143463][ T6228] 9pnet: Insufficient options for proto=fd [ 270.143652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.163020][ T3617] hid (null): unknown global tag 0xc [ 270.168370][ T3617] hid (null): global environment stack underflow [ 270.183863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.199806][ T3617] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 270.214858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.228385][ T3617] hid-generic 0003:0158:0100.0003: unexpected long global item [ 270.237331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.246934][ T3617] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 270.256006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.271694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.461693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.664700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.983136][ T1076] usb 3-1: USB disconnect, device number 9 [ 272.453199][ T6246] dccp_close: ABORT with 65475 bytes unread [ 272.463254][ T6246] dccp_close: ABORT with 11 bytes unread [ 273.164911][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.205686][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.236214][ T6259] loop2: detected capacity change from 0 to 2048 [ 273.241773][ T6258] loop1: detected capacity change from 0 to 512 [ 273.267951][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.331983][ T6259] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 273.359328][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.366299][ T6259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.376664][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.407619][ T6258] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 273.450338][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.478339][ T6259] UDF-fs: unknown compression code (0) [ 273.497987][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.509277][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.518098][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.518275][ T6258] EXT4-fs (loop1): 1 truncate cleaned up [ 273.549845][ T6258] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 273.607217][ T6258] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.669: corrupted in-inode xattr [ 273.684514][ T6258] EXT4-fs (loop1): Remounting filesystem read-only [ 273.694511][ T6018] device veth0_vlan entered promiscuous mode [ 273.703556][ T6258] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1751: inode #15: comm syz.1.669: unable to update i_inline_off [ 273.729092][ T6270] 9pnet: Insufficient options for proto=fd [ 273.756005][ T6115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.774079][ T6258] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 273.806119][ T6018] device veth1_vlan entered promiscuous mode [ 273.863535][ T6115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.906718][ T6115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.948501][ T6115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.025314][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.054176][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.174933][ T6277] loop2: detected capacity change from 0 to 2048 [ 274.250303][ T6282] binder: BINDER_SET_CONTEXT_MGR already set [ 274.256437][ T6282] binder: 6278:6282 ioctl 4018620d 20000040 returned -16 [ 274.597681][ T6018] device veth0_macvtap entered promiscuous mode [ 274.866480][ T3774] device hsr_slave_0 left promiscuous mode [ 274.879302][ T3774] device hsr_slave_1 left promiscuous mode [ 274.926784][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.941930][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.952019][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.982737][ T6277] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.019280][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.040299][ T3774] device bridge_slave_1 left promiscuous mode [ 275.046730][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.065654][ T3774] device bridge_slave_0 left promiscuous mode [ 275.081121][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.121871][ T3774] device hsr_slave_0 left promiscuous mode [ 275.168564][ T3774] device hsr_slave_1 left promiscuous mode [ 275.183843][ T6289] input: syz1 as /devices/virtual/input/input30 [ 275.191415][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.212400][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.251628][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.279855][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.298464][ T3774] device bridge_slave_1 left promiscuous mode [ 275.311701][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.339748][ T3774] device bridge_slave_0 left promiscuous mode [ 275.350577][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.461610][ T3774] device veth1_macvtap left promiscuous mode [ 275.470072][ T3774] device veth0_macvtap left promiscuous mode [ 275.480511][ T3774] device veth1_vlan left promiscuous mode [ 275.487984][ T3774] device veth0_vlan left promiscuous mode [ 275.704321][ T3774] device veth1_macvtap left promiscuous mode [ 275.739254][ T3774] device veth0_macvtap left promiscuous mode [ 275.773758][ T3774] device veth1_vlan left promiscuous mode [ 275.813797][ T3774] device veth0_vlan left promiscuous mode [ 277.340215][ T3774] team0 (unregistering): Port device team_slave_1 removed [ 277.358599][ T3774] team0 (unregistering): Port device team_slave_0 removed [ 277.372884][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.389085][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.464542][ T3774] bond0 (unregistering): Released all slaves [ 277.566812][ T3774] team0 (unregistering): Port device team_slave_1 removed [ 277.583349][ T3774] team0 (unregistering): Port device team_slave_0 removed [ 277.598430][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.614238][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.680853][ T3774] bond0 (unregistering): Released all slaves [ 277.758078][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.767713][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.794402][ T6018] device veth1_macvtap entered promiscuous mode [ 277.821796][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.842259][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.854718][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.873625][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.884229][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.896840][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.908633][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.018645][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.038682][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.052619][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.175379][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.739455][ T6299] dccp_close: ABORT with 65475 bytes unread [ 278.745735][ T6299] dccp_close: ABORT with 11 bytes unread [ 279.022979][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.034030][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.903134][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.928966][ T6018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.937951][ T6018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.947073][ T6018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.103571][ T6018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.158407][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.176339][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.192612][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.220548][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.239547][ T6313] 9pnet: Insufficient options for proto=fd [ 280.240148][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.355818][ T6318] loop1: detected capacity change from 0 to 8192 [ 282.195703][ T6336] binder: BINDER_SET_CONTEXT_MGR already set [ 282.201895][ T6336] binder: 6330:6336 ioctl 4018620d 20000040 returned -16 [ 283.328477][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.349767][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.392207][ T6115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.091875][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.150617][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.173280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.191372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.446745][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.546891][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.894984][ T6347] dccp_close: ABORT with 65475 bytes unread [ 285.003908][ T6115] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.369251][ T6372] binder: 6364:6372 unknown command 0 [ 285.374703][ T6372] binder: 6364:6372 ioctl c0306201 20000080 returned -22 [ 285.383510][ T6372] binder: BINDER_SET_CONTEXT_MGR already set [ 285.389693][ T6372] binder: 6364:6372 ioctl 4018620d 20000040 returned -16 [ 285.397438][ T6372] binder: 6364:6372 ioctl c0306201 0 returned -14 [ 285.404626][ T6372] binder: 6364:6372 ioctl c0306201 200002c0 returned -14 [ 285.789095][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.942242][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.148564][ T3613] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 286.161406][ T3977] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.168733][ T3977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.221908][ T6115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.241321][ T6378] loop1: detected capacity change from 0 to 256 [ 286.259566][ T6115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.502135][ T6388] syz.0.696 uses obsolete (PF_INET,SOCK_PACKET) [ 286.684500][ T3613] usb 3-1: Using ep0 maxpacket: 16 [ 286.822949][ T3613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.079649][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.089626][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.136168][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.143264][ T3613] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 287.164678][ T3977] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.170817][ T3613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.171896][ T3977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.197596][ T3613] usb 3-1: Product: syz [ 287.201847][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.218250][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.219841][ T3613] usb 3-1: Manufacturer: syz [ 287.252055][ T3613] usb 3-1: SerialNumber: syz [ 287.274738][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.299966][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.343951][ T3613] usb 3-1: config 0 descriptor?? [ 287.346173][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.381603][ T3613] usb 3-1: can't set config #0, error -71 [ 287.418968][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.423361][ T3613] usb 3-1: USB disconnect, device number 10 [ 287.461637][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.512254][ T6408] loop2: detected capacity change from 0 to 164 [ 287.533940][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.574439][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.590918][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.663446][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.717057][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.204357][ T6421] dccp_xmit_packet: Payload too large (65475) for featneg. [ 290.221608][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.251709][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.292424][ T6115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.637438][ T6444] binder: 6438:6444 unknown command 0 [ 290.643163][ T6444] binder: 6438:6444 ioctl c0306201 20000080 returned -22 [ 290.652079][ T6444] binder: BINDER_SET_CONTEXT_MGR already set [ 290.658357][ T6444] binder: 6438:6444 ioctl 4018620d 20000040 returned -16 [ 290.666125][ T6444] binder: 6438:6444 ioctl c0306201 0 returned -14 [ 290.672972][ T6444] binder: 6438:6444 ioctl c0306201 200002c0 returned -14 [ 291.828628][ T6462] loop1: detected capacity change from 0 to 128 [ 291.950665][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.959191][ T6462] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 82) [ 291.977385][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.023365][ T6462] FAT-fs (loop1): Filesystem has been set read-only [ 292.030052][ T6462] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 82) [ 292.097914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.123043][ T6462] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 82) [ 292.133697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.150579][ T6462] FAT-fs (loop1): error, clusters badly computed (1 != 2) [ 292.164176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.223576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.244919][ T6115] device veth0_vlan entered promiscuous mode [ 292.257667][ T6472] loop0: detected capacity change from 0 to 128 [ 292.309188][ T6115] device veth1_vlan entered promiscuous mode [ 292.358861][ T6115] device veth0_macvtap entered promiscuous mode [ 292.370183][ T6115] device veth1_macvtap entered promiscuous mode [ 292.397455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.413726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 292.448250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.745354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.144631][ T6474] dccp_close: ABORT with 65475 bytes unread [ 293.195300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.410517][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.479302][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.925608][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.050960][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.066979][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.081112][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.091273][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.102209][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.131423][ T6115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.170604][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.205904][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.404447][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.468599][ T6504] binder: 6499:6504 unknown command 0 [ 294.475056][ T6504] binder: 6499:6504 ioctl c0306201 20000080 returned -22 [ 294.484723][ T6504] binder: BINDER_SET_CONTEXT_MGR already set [ 294.491001][ T6504] binder: 6499:6504 ioctl 4018620d 20000040 returned -16 [ 294.498942][ T6504] binder: 6499:6504 ioctl c0306201 0 returned -14 [ 294.505882][ T6504] binder: 6499:6504 ioctl c0306201 200002c0 returned -14 [ 294.639089][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.650425][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.662375][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.672985][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.687090][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.712695][ T6115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.811136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.829052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.858569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.870086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.881204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.897167][ T6115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.926553][ T6115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.943074][ T6115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.953277][ T6115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.157083][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.071799][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.283521][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 301.308843][ T4744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.362289][ T4744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.533767][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.934988][ T6568] binder: 6565:6568 unknown command 0 [ 302.940399][ T6568] binder: 6565:6568 ioctl c0306201 20000080 returned -22 [ 302.948915][ T6568] binder: BINDER_SET_CONTEXT_MGR already set [ 302.954988][ T6568] binder: 6565:6568 ioctl 4018620d 20000040 returned -16 [ 302.962771][ T6568] binder: 6565:6568 ioctl c0306201 0 returned -14 [ 302.969605][ T6568] binder: 6565:6568 ioctl c0306201 200002c0 returned -14 [ 303.112091][ T6573] input: syz0 as /devices/virtual/input/input31 [ 304.206411][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 304.273538][ T3612] Bluetooth: hci0: command 0x0409 tx timeout [ 304.290744][ T6591] loop2: detected capacity change from 0 to 512 [ 304.487027][ C1] eth0: bad gso: type: 1, size: 1408 [ 304.568225][ T6591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 304.988240][ T6591] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 305.022612][ T6601] loop4: detected capacity change from 0 to 512 [ 305.045151][ T6591] EXT4-fs (loop2): 1 truncate cleaned up [ 305.058531][ T6601] EXT4-fs (loop4): Test dummy encryption mode enabled [ 305.082186][ T6591] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 305.185476][ T6601] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.737: inline data xattr refers to an external xattr inode [ 305.204608][ T6601] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.737: couldn't read orphan inode 12 (err -117) [ 305.257724][ T6601] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 305.299692][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.333747][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.356696][ T6535] device bridge_slave_0 entered promiscuous mode [ 305.420458][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.541690][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.564557][ T6614] dccp_xmit_packet: Payload too large (65475) for featneg. [ 305.937587][ T6535] device bridge_slave_1 entered promiscuous mode [ 306.076117][ T6609] dccp_close: ABORT with 65475 bytes unread [ 306.353171][ T3613] Bluetooth: hci0: command 0x041b tx timeout [ 306.363791][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.380007][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.752426][ T6624] binder: 6620:6624 unknown command 0 [ 306.758218][ T6624] binder: 6620:6624 ioctl c0306201 20000080 returned -22 [ 306.770983][ T6624] binder: BINDER_SET_CONTEXT_MGR already set [ 306.777130][ T6624] binder: 6620:6624 ioctl 4018620d 20000040 returned -16 [ 306.785192][ T6624] binder: 6620:6624 ioctl c0306201 0 returned -14 [ 306.792248][ T6624] binder: 6620:6624 ioctl c0306201 200002c0 returned -14 [ 306.891094][ T3774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.956720][ T6535] team0: Port device team_slave_0 added [ 306.974437][ T6535] team0: Port device team_slave_1 added [ 307.208775][ T3774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.334857][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.342723][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.004169][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.235945][ T3774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.654887][ T3614] Bluetooth: hci0: command 0x040f tx timeout [ 308.665116][ T6635] loop4: detected capacity change from 0 to 16 [ 308.767848][ T6635] erofs: (device loop4): mounted with root inode @ nid 36. [ 308.842402][ T6635] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 308.853796][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.860766][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.137779][ T6635] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -5 in[46, 4050] out[1851] [ 309.163347][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.219712][ T6635] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 309.323341][ T6643] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 309.350963][ T6643] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -5 in[46, 4050] out[1851] [ 309.355627][ T3774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.386199][ T6649] 9pnet: Could not find request transport: fd0x0000000000000003 [ 309.494121][ T6535] device hsr_slave_0 entered promiscuous mode [ 309.509847][ T6535] device hsr_slave_1 entered promiscuous mode [ 309.527810][ T6535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.544588][ T6535] Cannot create hsr debugfs directory [ 309.592306][ T6643] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 310.152928][ T6660] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 310.298027][ T6654] dccp_close: ABORT with 65475 bytes unread [ 310.914231][ T6675] binder: 6670:6675 unknown command 0 [ 310.919806][ T6675] binder: 6670:6675 ioctl c0306201 20000080 returned -22 [ 310.939648][ T6675] binder: BINDER_SET_CONTEXT_MGR already set [ 310.945931][ T6675] binder: 6670:6675 ioctl 4018620d 20000040 returned -16 [ 310.958150][ T6675] binder: 6670:6675 ioctl c0306201 0 returned -14 [ 310.967763][ T6675] binder: 6670:6675 ioctl c0306201 200002c0 returned -14 [ 311.237796][ T3614] Bluetooth: hci0: command 0x0419 tx timeout [ 312.894355][ T6686] 9pnet: Could not find request transport: fd0x0000000000000003 [ 314.207709][ T6704] binder: 6703:6704 unknown command 0 [ 314.213321][ T6704] binder: 6703:6704 ioctl c0306201 20000080 returned -22 [ 314.222284][ T6704] binder: 6703:6704 ioctl c0306201 0 returned -14 [ 314.229361][ T6704] binder: 6703:6704 ioctl c0306201 200002c0 returned -14 [ 314.417561][ T6535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.643191][ T6535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.656027][ T6710] loop0: detected capacity change from 0 to 2048 [ 314.740398][ T6719] dccp_xmit_packet: Payload too large (65475) for featneg. [ 315.138904][ T6535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.242078][ T6710] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.297920][ T6713] dccp_close: ABORT with 65475 bytes unread [ 315.383591][ T6535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 315.897935][ T6732] binder: 6726:6732 unknown command 0 [ 315.903744][ T6732] binder: 6726:6732 ioctl c0306201 20000080 returned -22 [ 315.924168][ T6732] binder: BINDER_SET_CONTEXT_MGR already set [ 315.930365][ T6732] binder: 6726:6732 ioctl 4018620d 20000040 returned -16 [ 315.942406][ T6732] binder: 6726:6732 ioctl c0306201 0 returned -14 [ 315.951594][ T6732] binder: 6726:6732 ioctl c0306201 200002c0 returned -14 [ 316.556970][ T6742] 9pnet: Could not find request transport: fd0x0000000000000003 [ 316.787596][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.077036][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.084242][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.980521][ T6760] loop0: detected capacity change from 0 to 1024 [ 318.020421][ T6751] binder: 6749:6751 unknown command 0 [ 318.026392][ T6751] binder: 6749:6751 ioctl c0306201 20000080 returned -22 [ 318.035949][ T6751] binder: 6749:6751 ioctl c0306201 0 returned -14 [ 318.042770][ T6751] binder: 6749:6751 ioctl c0306201 200002c0 returned -14 [ 318.051487][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.064575][ T6760] hfsplus: unable to parse mount options [ 318.066174][ T6765] loop4: detected capacity change from 0 to 2048 [ 318.081157][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.101724][ T6765] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.561055][ T6773] loop0: detected capacity change from 0 to 2048 [ 318.620071][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.884472][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.938654][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.028006][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.035468][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.239894][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.792422][ T6790] binder: 6785:6790 unknown command 0 [ 320.798202][ T6790] binder: 6785:6790 ioctl c0306201 20000080 returned -22 [ 320.817486][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 320.823995][ T6790] binder: 6785:6790 ioctl 4018620d 20000040 returned -16 [ 320.836741][ T6790] binder: 6785:6790 ioctl c0306201 0 returned -14 [ 320.846285][ T6790] binder: 6785:6790 ioctl c0306201 200002c0 returned -14 [ 321.059240][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.070476][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.079473][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.086715][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.094808][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.104021][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.121720][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.142606][ T6794] 9pnet: Insufficient options for proto=fd [ 321.152402][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.172008][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.185041][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.200417][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.221591][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.260510][ C1] eth0: bad gso: type: 1, size: 1408 [ 321.292165][ T6535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.347087][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.356363][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.517249][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.579911][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.334390][ T6816] loop4: detected capacity change from 0 to 2048 [ 322.372007][ T3774] device hsr_slave_0 left promiscuous mode [ 322.379539][ T3774] device hsr_slave_1 left promiscuous mode [ 322.389864][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.397735][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.405566][ T6816] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.422316][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.430663][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.450994][ T3774] device bridge_slave_1 left promiscuous mode [ 322.457908][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.467786][ T3774] device bridge_slave_0 left promiscuous mode [ 322.474952][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.493302][ T3774] device veth1_macvtap left promiscuous mode [ 322.499399][ T3774] device veth0_macvtap left promiscuous mode [ 322.510249][ T3774] device veth1_vlan left promiscuous mode [ 322.516526][ T3774] device veth0_vlan left promiscuous mode [ 322.698557][ T6822] binder: 6817:6822 unknown command 0 [ 322.704117][ T6822] binder: 6817:6822 ioctl c0306201 20000080 returned -22 [ 322.713654][ T6822] binder: BINDER_SET_CONTEXT_MGR already set [ 322.719892][ T6822] binder: 6817:6822 ioctl 4018620d 20000040 returned -16 [ 322.727945][ T6822] binder: 6817:6822 ioctl c0306201 0 returned -14 [ 322.735096][ T6822] binder: 6817:6822 ioctl c0306201 200002c0 returned -14 [ 322.925680][ T3774] team0 (unregistering): Port device team_slave_1 removed [ 322.955759][ T3774] team0 (unregistering): Port device team_slave_0 removed [ 322.971981][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.988758][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.065985][ T3774] bond0 (unregistering): Released all slaves [ 323.315821][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.350317][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.407358][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.616027][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.638850][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.701687][ T6840] 9pnet: Insufficient options for proto=fd [ 323.776489][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.796722][ T6839] loop2: detected capacity change from 0 to 2048 [ 323.809585][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.822840][ T6535] device veth0_vlan entered promiscuous mode [ 323.831392][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.840285][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.854792][ T6535] device veth1_vlan entered promiscuous mode [ 323.936321][ T6845] loop4: detected capacity change from 0 to 2048 [ 324.009643][ T6845] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.029144][ T6839] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 324.069059][ T6839] UDF-fs: Scanning with blocksize 512 failed [ 324.109253][ T6849] binder: 6842:6849 unknown command 0 [ 324.114965][ T6849] binder: 6842:6849 ioctl c0306201 20000080 returned -22 [ 324.119241][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.132644][ T6849] binder: BINDER_SET_CONTEXT_MGR already set [ 324.136133][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.140852][ T6849] binder: 6842:6849 ioctl 4018620d 20000040 returned -16 [ 324.147442][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.160378][ T6839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.170645][ T6849] binder: 6842:6849 ioctl c0306201 0 returned -14 [ 324.177555][ T6849] binder: 6842:6849 ioctl c0306201 200002c0 returned -14 [ 324.192266][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.210581][ T6535] device veth0_macvtap entered promiscuous mode [ 324.277297][ T6535] device veth1_macvtap entered promiscuous mode [ 324.319020][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.337773][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.372653][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.396002][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.483286][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.585385][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.605207][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.629911][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.656129][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.681429][ T6839] attempt to access beyond end of device [ 324.681429][ T6839] loop2: rw=2049, want=2050, limit=2048 [ 324.699389][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.722119][ T6839] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 324.736134][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.762943][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.785537][ T6839] attempt to access beyond end of device [ 324.785537][ T6839] loop2: rw=2049, want=2050, limit=2048 [ 324.802962][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.819375][ T6839] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 324.828767][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.887364][ T6839] attempt to access beyond end of device [ 324.887364][ T6839] loop2: rw=2049, want=2050, limit=2048 [ 324.899476][ T6839] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 324.908500][ T6839] attempt to access beyond end of device [ 324.908500][ T6839] loop2: rw=2049, want=2050, limit=2048 [ 324.923288][ T6839] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 324.928679][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.949777][ T6839] attempt to access beyond end of device [ 324.949777][ T6839] loop2: rw=2049, want=2052, limit=2048 [ 324.972974][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.992022][ T6839] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 324.995612][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.001530][ T6839] attempt to access beyond end of device [ 325.001530][ T6839] loop2: rw=2049, want=2052, limit=2048 [ 325.021770][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.033670][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.043477][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.066665][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.093890][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.099677][ T6839] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 325.169345][ T6839] attempt to access beyond end of device [ 325.169345][ T6839] loop2: rw=2049, want=2052, limit=2048 [ 325.186999][ T6535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.319452][ T6535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.319475][ T6839] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 325.337402][ T6839] attempt to access beyond end of device [ 325.337402][ T6839] loop2: rw=2049, want=2052, limit=2048 [ 325.353258][ T6839] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 325.417469][ T6871] binder: 6866:6871 unknown command 0 [ 325.423125][ T6871] binder: 6866:6871 ioctl c0306201 20000080 returned -22 [ 325.432035][ T6871] binder: BINDER_SET_CONTEXT_MGR already set [ 325.438349][ T6871] binder: 6866:6871 ioctl 4018620d 20000040 returned -16 [ 325.446142][ T6871] binder: 6866:6871 ioctl c0306201 0 returned -14 [ 325.453165][ T6871] binder: 6866:6871 ioctl c0306201 200002c0 returned -14 [ 325.569408][ T6535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.570792][ T6839] attempt to access beyond end of device [ 325.570792][ T6839] loop2: rw=2049, want=2054, limit=2048 [ 325.578432][ T6535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.598533][ T6839] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 325.647308][ T6839] attempt to access beyond end of device [ 325.647308][ T6839] loop2: rw=2049, want=2054, limit=2048 [ 325.687222][ T6839] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 325.970343][ T3707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.033572][ T3707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.049358][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.183425][ T6883] 9pnet: Insufficient options for proto=fd [ 326.231048][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.243893][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.275681][ T6885] loop0: detected capacity change from 0 to 2048 [ 326.323818][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.362361][ T6885] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.156667][ T6902] binder: 6896:6902 unknown command 0 [ 331.162378][ T6902] binder: 6896:6902 ioctl c0306201 20000080 returned -22 [ 331.181723][ T6902] binder: BINDER_SET_CONTEXT_MGR already set [ 331.189285][ T6902] binder: 6896:6902 ioctl 4018620d 20000040 returned -16 [ 331.201854][ T6902] binder: 6896:6902 ioctl c0306201 0 returned -14 [ 331.211523][ T6902] binder: 6896:6902 ioctl c0306201 200002c0 returned -14 [ 333.086539][ C1] eth0: bad gso: type: 1, size: 1408 [ 333.176739][ T6928] binder: 6919:6928 unknown command 0 [ 333.182453][ T6928] binder: 6919:6928 ioctl c0306201 20000080 returned -22 [ 333.192136][ T6928] binder: BINDER_SET_CONTEXT_MGR already set [ 333.198197][ T6928] binder: 6919:6928 ioctl 4018620d 20000040 returned -16 [ 333.205943][ T6928] binder: 6919:6928 ioctl c0306201 0 returned -14 [ 333.212868][ T6928] binder: 6919:6928 ioctl c0306201 200002c0 returned -14 [ 333.228600][ T6925] 9pnet: Insufficient options for proto=fd [ 333.527795][ T6934] loop2: detected capacity change from 0 to 512 [ 333.626004][ T6938] loop3: detected capacity change from 0 to 2048 [ 333.684960][ T6938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.703653][ T6934] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 333.874913][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 333.935583][ T6934] loop2: detected capacity change from 0 to 512 [ 334.180965][ T6934] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 334.203293][ T6934] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038 (0x7fffffff) [ 334.258341][ T6953] binder: 6945:6953 unknown command 0 [ 334.264789][ T6953] binder: 6945:6953 ioctl c0306201 20000080 returned -22 [ 334.283119][ T6953] binder: BINDER_SET_CONTEXT_MGR already set [ 334.289292][ T6953] binder: 6945:6953 ioctl 4018620d 20000040 returned -16 [ 334.300642][ T6953] binder: 6945:6953 ioctl c0306201 0 returned -14 [ 334.309766][ T6953] binder: 6945:6953 ioctl c0306201 200002c0 returned -14 [ 336.059544][ T6961] 9pnet: Insufficient options for proto=fd [ 336.146638][ T6966] loop0: detected capacity change from 0 to 164 [ 337.395825][ T6986] binder: 6980:6986 unknown command 0 [ 337.401353][ T6986] binder: 6980:6986 ioctl c0306201 20000080 returned -22 [ 337.411338][ T6986] binder: BINDER_SET_CONTEXT_MGR already set [ 337.417472][ T6986] binder: 6980:6986 ioctl 4018620d 20000040 returned -16 [ 337.425586][ T6986] binder: 6980:6986 ioctl c0306201 0 returned -14 [ 337.432674][ T6986] binder: 6980:6986 ioctl c0306201 200002c0 returned -14 [ 337.938783][ T6990] loop1: detected capacity change from 0 to 2048 [ 338.143663][ T6990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.708430][ T6996] binder: 6993:6996 unknown command 0 [ 338.714083][ T6996] binder: 6993:6996 ioctl c0306201 20000080 returned -22 [ 338.734801][ T6996] binder: BINDER_SET_CONTEXT_MGR already set [ 338.740957][ T6996] binder: 6993:6996 ioctl 4018620d 20000040 returned -16 [ 338.809770][ T6995] binder: 6993:6995 ioctl c0306201 0 returned -14 [ 338.816893][ T6995] binder: 6993:6995 ioctl c0306201 200002c0 returned -14 [ 340.049965][ T7007] input: syz0 as /devices/virtual/input/input32 [ 340.289389][ T7009] 9pnet: Insufficient options for proto=fd [ 340.572451][ T7013] device syzkaller0 entered promiscuous mode [ 340.769369][ T7022] loop3: detected capacity change from 0 to 764 [ 341.529419][ T7035] binder: 7030:7035 unknown command 0 [ 341.535157][ T7035] binder: 7030:7035 ioctl c0306201 20000080 returned -22 [ 341.599267][ T7035] binder: BINDER_SET_CONTEXT_MGR already set [ 341.605625][ T7035] binder: 7030:7035 ioctl 4018620d 20000040 returned -16 [ 341.643863][ T7035] binder: 7030:7035 ioctl c0306201 0 returned -14 [ 341.665240][ T7035] binder: 7030:7035 ioctl c0306201 200002c0 returned -14 [ 343.799415][ T7050] loop2: detected capacity change from 0 to 2048 [ 344.051012][ T7050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.156286][ T7096] binder: 7085:7096 unknown command 0 [ 348.161834][ T7096] binder: 7085:7096 ioctl c0306201 20000080 returned -22 [ 348.250478][ T7096] binder: BINDER_SET_CONTEXT_MGR already set [ 348.256670][ T7096] binder: 7085:7096 ioctl 4018620d 20000040 returned -16 [ 348.289735][ T7096] binder: 7085:7096 ioctl c0306201 0 returned -14 [ 348.313060][ T7096] binder: 7085:7096 ioctl c0306201 200002c0 returned -14 [ 350.251051][ T3614] Bluetooth: hci2: command 0x0406 tx timeout [ 352.728789][ T7114] loop1: detected capacity change from 0 to 512 [ 355.633133][ T7140] binder: 7136:7140 unknown command 0 [ 355.638543][ T7140] binder: 7136:7140 ioctl c0306201 20000080 returned -22 [ 356.043091][ T7140] binder: BINDER_SET_CONTEXT_MGR already set [ 356.049198][ T7140] binder: 7136:7140 ioctl 4018620d 20000040 returned -16 [ 356.253112][ T7140] binder: 7136:7140 ioctl c0306201 0 returned -14 [ 356.353128][ T7140] binder: 7136:7140 ioctl c0306201 200002c0 returned -14 [ 357.186922][ T7154] virtio-fs: tag <(null)> not found [ 357.210098][ T7154] loop2: detected capacity change from 0 to 1024 [ 364.908102][ T7188] binder: 7181:7188 unknown command 0 [ 364.914239][ T7188] binder: 7181:7188 ioctl c0306201 20000080 returned -22 [ 364.923423][ T7188] binder: 7181:7188 ioctl c0306201 0 returned -14 [ 364.930564][ T7188] binder: 7181:7188 ioctl c0306201 200002c0 returned -14 [ 365.389367][ T3977] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.507894][ T3977] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.572802][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 365.620197][ T3977] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.779015][ T3977] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.882123][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.898881][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.926918][ T7174] device bridge_slave_0 entered promiscuous mode [ 365.946515][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.965151][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.986426][ T7174] device bridge_slave_1 entered promiscuous mode [ 366.309848][ T7207] loop3: detected capacity change from 0 to 8 [ 367.517844][ T3669] Bluetooth: hci5: command 0x0409 tx timeout [ 367.625710][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.673424][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.713624][ T7207] SQUASHFS error: zlib decompression failed, data probably corrupt [ 367.722252][ T7207] SQUASHFS error: Failed to read block 0x9b: -5 [ 367.728770][ T7207] SQUASHFS error: Unable to read metadata cache entry [99] [ 367.736120][ T7207] SQUASHFS error: Unable to read inode 0x127 [ 367.809371][ T7174] team0: Port device team_slave_0 added [ 367.935476][ T7174] team0: Port device team_slave_1 added [ 368.207678][ T7215] 9pnet: Insufficient options for proto=fd [ 368.936754][ T3570] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 368.936820][ T3570] CPU: 0 PID: 3570 Comm: kworker/u5:1 Not tainted 5.15.166-syzkaller #0 [ 368.936840][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 368.936857][ T3570] Workqueue: hci2 hci_rx_work [ 368.936892][ T3570] Call Trace: [ 368.936903][ T3570] [ 368.936911][ T3570] dump_stack_lvl+0x1e3/0x2d0 [ 368.936936][ T3570] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 368.936955][ T3570] ? panic+0x860/0x860 [ 368.936980][ T3570] ? sysfs_create_dir_ns+0x282/0x390 [ 368.937006][ T3570] sysfs_create_dir_ns+0x2c6/0x390 [ 368.937027][ T3570] ? sysfs_warn_dup+0xa0/0xa0 [ 368.937047][ T3570] ? do_raw_spin_unlock+0x137/0x8b0 [ 368.937075][ T3570] kobject_add_internal+0x6e0/0xe00 [ 368.937102][ T3570] kobject_add+0x14e/0x210 [ 368.937122][ T3570] ? device_add+0x3c2/0xfd0 [ 368.937143][ T3570] ? kobject_init+0x1d0/0x1d0 [ 368.937163][ T3570] ? __raw_spin_lock_init+0x41/0x100 [ 368.937182][ T3570] ? get_device_parent+0x128/0x400 [ 368.937205][ T3570] device_add+0x476/0xfd0 [ 368.937234][ T3570] hci_conn_add_sysfs+0xe4/0x1f0 [ 368.937256][ T3570] le_conn_complete_evt+0xc15/0x1500 [ 368.937287][ T3570] ? cs_le_create_conn+0x5f0/0x5f0 [ 368.937320][ T3570] hci_le_meta_evt+0xd86/0x3f50 [ 368.937342][ T3570] ? __lock_acquire+0x1ff0/0x1ff0 [ 368.937363][ T3570] ? __mutex_lock_common+0x444/0x25a0 [ 368.937393][ T3570] ? hci_remote_host_features_evt+0x280/0x280 [ 368.937412][ T3570] ? __mutex_unlock_slowpath+0x218/0x750 [ 368.937429][ T3570] ? hci_event_packet+0x3b4/0x1550 [ 368.937453][ T3570] ? mutex_unlock+0x10/0x10 [ 368.937474][ T3570] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 368.937495][ T3570] ? print_irqtrace_events+0x210/0x210 [ 368.937517][ T3570] hci_event_packet+0xc41/0x1550 [ 368.937544][ T3570] ? rcu_lock_release+0x20/0x20 [ 368.937582][ T3570] ? hci_send_to_monitor+0x99/0x4d0 [ 368.937607][ T3570] hci_rx_work+0x232/0x990 [ 368.937636][ T3570] process_one_work+0x8a1/0x10c0 [ 368.937671][ T3570] ? worker_detach_from_pool+0x260/0x260 [ 368.937693][ T3570] ? _raw_spin_lock_irqsave+0x120/0x120 [ 368.937712][ T3570] ? kthread_data+0x4e/0xc0 [ 368.937732][ T3570] ? wq_worker_running+0x97/0x170 [ 368.937753][ T3570] worker_thread+0xaca/0x1280 [ 368.937795][ T3570] kthread+0x3f6/0x4f0 [ 368.937812][ T3570] ? rcu_lock_release+0x20/0x20 [ 368.937831][ T3570] ? kthread_blkcg+0xd0/0xd0 [ 368.937857][ T3570] ret_from_fork+0x1f/0x30 [ 368.937890][ T3570] [ 368.937910][ T3570] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 368.937934][ T3570] Bluetooth: hci2: failed to register connection device [ 369.660803][ T3669] Bluetooth: hci5: command 0x041b tx timeout [ 369.931298][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.931315][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.931338][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.933730][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.933744][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.933765][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.187018][ T7241] device syzkaller0 entered promiscuous mode [ 370.346814][ T7174] device hsr_slave_0 entered promiscuous mode [ 370.349695][ T7174] device hsr_slave_1 entered promiscuous mode [ 370.351013][ T7174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.351191][ T7174] Cannot create hsr debugfs directory [ 371.366344][ T3669] Bluetooth: hci2: command 0x2016 tx timeout [ 371.648901][ T7263] binder: 7257:7263 unknown command 0 [ 371.648962][ T7263] binder: 7257:7263 ioctl c0306201 20000080 returned -22 [ 371.656413][ T7263] binder: BINDER_SET_CONTEXT_MGR already set [ 371.656515][ T7263] binder: 7257:7263 ioctl 4018620d 20000040 returned -16 [ 371.658604][ T7263] binder: 7257:7263 ioctl c0306201 0 returned -14 [ 371.659755][ T7263] binder: 7257:7263 ioctl c0306201 200002c0 returned -14 [ 372.240478][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 372.276827][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.839557][ T7277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.857464][ T7277] netlink: 580 bytes leftover after parsing attributes in process `syz.0.909'. [ 374.367730][ T3614] Bluetooth: hci5: command 0x0419 tx timeout [ 374.608756][ T7283] loop2: detected capacity change from 0 to 512 [ 375.110072][ T7283] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 375.387798][ T7283] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 375.438893][ T3977] device hsr_slave_0 left promiscuous mode [ 375.460985][ T7283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 375.475727][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 375.481885][ T3977] device hsr_slave_1 left promiscuous mode [ 375.498827][ T7283] System zones: 1-12 [ 375.613288][ T3977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.628135][ T3977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.657256][ T3977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.671742][ T3977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.696957][ T3977] device bridge_slave_1 left promiscuous mode [ 375.713119][ T3977] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.752525][ T7283] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.911: corrupted in-inode xattr [ 375.774075][ T3977] device bridge_slave_0 left promiscuous mode [ 375.780263][ T3977] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.805663][ T7283] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.911: couldn't read orphan inode 15 (err -117) [ 375.863379][ T3977] device veth1_macvtap left promiscuous mode [ 375.869957][ T3977] device veth0_macvtap left promiscuous mode [ 375.878229][ T3977] device veth1_vlan left promiscuous mode [ 375.887477][ T7283] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,data_err=abort,debug,noload,nomblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 375.922038][ T3977] device veth0_vlan left promiscuous mode [ 377.572311][ T7350] loop1: detected capacity change from 0 to 2048 [ 377.824559][ T7350] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 377.843310][ T7350] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 377.973464][ T3977] team0 (unregistering): Port device team_slave_1 removed [ 377.989835][ T3977] team0 (unregistering): Port device team_slave_0 removed [ 378.030837][ T7350] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,mblk_io_submit,mblk_io_submit,i_version,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 378.118253][ T7367] binder: 7362:7367 unknown command 0 [ 378.123764][ T7367] binder: 7362:7367 ioctl c0306201 20000080 returned -22 [ 378.141061][ T7367] binder: BINDER_SET_CONTEXT_MGR already set [ 378.147178][ T7367] binder: 7362:7367 ioctl 4018620d 20000040 returned -16 [ 378.158180][ T7367] binder: 7362:7367 ioctl c0306201 0 returned -14 [ 378.166702][ T7367] binder: 7362:7367 ioctl c0306201 200002c0 returned -14 [ 378.555535][ T3977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.606748][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.615310][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.793559][ T3977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.950024][ T3977] bond0 (unregistering): Released all slaves [ 379.269925][ T7174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 379.298507][ T7174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 379.334151][ T7174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.392375][ T7301] device syzkaller0 entered promiscuous mode [ 379.520602][ T7174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 380.972623][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.446326][ T7393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.460757][ T7393] netlink: 580 bytes leftover after parsing attributes in process `syz.0.921'. [ 382.458979][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.736645][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.842154][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.130860][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.265388][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.274308][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.281387][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.350072][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.414208][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.457359][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.464507][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.472248][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.506261][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.630526][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.873258][ T7412] loop0: detected capacity change from 0 to 512 [ 384.018322][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 384.150211][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.226261][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.357558][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.374397][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.395178][ T7359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.481885][ T7422] binder: 7418:7422 unknown command 0 [ 384.487404][ T7422] binder: 7418:7422 ioctl c0306201 20000080 returned -22 [ 384.505388][ T7422] binder: BINDER_SET_CONTEXT_MGR already set [ 384.511797][ T7422] binder: 7418:7422 ioctl 4018620d 20000040 returned -16 [ 384.523407][ T7422] binder: 7418:7422 ioctl c0306201 0 returned -14 [ 384.532337][ T7422] binder: 7418:7422 ioctl c0306201 200002c0 returned -14 [ 384.685526][ T7359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.239804][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.927: inode #1: comm syz.0.927: iget: illegal inode # [ 385.310438][ T7174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.359395][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.927: error while reading EA inode 1 err=-117 [ 385.376837][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.397667][ T7359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.447770][ T7359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.475163][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.927: inode #1: comm syz.0.927: iget: illegal inode # [ 385.517080][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.927: error while reading EA inode 1 err=-117 [ 385.594074][ T7412] EXT4-fs (loop0): 1 orphan inode deleted [ 385.619812][ T7412] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 385.645471][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.034814][ T7443] fuse: Unknown parameter '0x00000000000000070000000000000000000000000000000000000000' [ 386.475500][ T26] audit: type=1326 audit(1726022744.437:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.0.927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10f5660ef9 code=0x0 [ 386.592162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.609473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.674838][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.006287][ T7456] device syzkaller0 entered promiscuous mode [ 387.033142][ T13] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 387.186477][ T7470] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.201041][ T7470] netlink: 580 bytes leftover after parsing attributes in process `syz.2.934'. [ 387.990275][ T7482] virtio-fs: tag <(null)> not found [ 389.113413][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 389.173014][ T13] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 389.463829][ T7504] binder: 7493:7504 unknown command 0 [ 389.469285][ T7504] binder: 7493:7504 ioctl c0306201 20000080 returned -22 [ 389.484888][ T7504] binder: BINDER_SET_CONTEXT_MGR already set [ 389.491004][ T7504] binder: 7493:7504 ioctl 4018620d 20000040 returned -16 [ 389.510714][ T7504] binder: 7493:7504 ioctl c0306201 0 returned -14 [ 389.524626][ T7504] binder: 7493:7504 ioctl c0306201 200002c0 returned -14 [ 390.161549][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.170801][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 390.179066][ T13] usb 1-1: SerialNumber: syz [ 390.268078][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.294437][ T7341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.303501][ T7459] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 390.404189][ T7174] device veth0_vlan entered promiscuous mode [ 390.410851][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 390.447533][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.529907][ T7174] device veth1_vlan entered promiscuous mode [ 390.554599][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.573930][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 390.704415][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 390.713567][ T13] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 390.868045][ T7522] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.882843][ T7522] netlink: 580 bytes leftover after parsing attributes in process `syz.2.944'. [ 391.797597][ T13] usb 1-1: USB disconnect, device number 6 [ 392.329331][ T7534] virtio-fs: tag <(null)> not found [ 393.047956][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 393.086417][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 394.777010][ T7529] device syzkaller0 entered promiscuous mode [ 394.786261][ T7174] device veth0_macvtap entered promiscuous mode [ 394.809424][ T7174] device veth1_macvtap entered promiscuous mode [ 394.893930][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 394.974150][ T7553] binder: 7548:7553 unknown command 0 [ 394.979786][ T7553] binder: 7548:7553 ioctl c0306201 20000080 returned -22 [ 394.997697][ T7553] binder: BINDER_SET_CONTEXT_MGR already set [ 395.003838][ T7553] binder: 7548:7553 ioctl 4018620d 20000040 returned -16 [ 395.015259][ T7553] binder: 7548:7553 ioctl c0306201 0 returned -14 [ 395.024160][ T7553] binder: 7548:7553 ioctl c0306201 200002c0 returned -14 [ 395.527950][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.573485][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.595945][ T7557] loop2: detected capacity change from 0 to 1024 [ 395.611694][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.697843][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.728291][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.739001][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.749304][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.759859][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.771141][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.779322][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.514009][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.547097][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.583096][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.597318][ T7557] hfsplus: bad catalog entry used to create inode [ 396.604013][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.633178][ T7557] hfsplus: failed to load root directory [ 396.684709][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.720416][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.765617][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.776902][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.788145][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.800274][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.814403][ T7174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.823298][ T7174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.834312][ T7174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.879059][ T7174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.511513][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.528017][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.671863][ T7568] loop3: detected capacity change from 0 to 2048 [ 397.857350][ T7572] virtio-fs: tag <(null)> not found [ 397.892670][ T3942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.383162][ T3942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.558599][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.590276][ T7568] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.740213][ T3773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.464768][ T7582] loop1: detected capacity change from 0 to 512 [ 399.577235][ T3773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.624415][ T7582] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 399.652980][ T7582] UDF-fs: Scanning with blocksize 512 failed [ 399.677783][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.763831][ T7582] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 399.791631][ T7582] UDF-fs: Scanning with blocksize 1024 failed [ 400.242068][ T7582] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 400.490480][ T7582] UDF-fs: Scanning with blocksize 2048 failed [ 400.553635][ T7582] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 400.596307][ T7590] bridge_slave_0: default FDB implementation only supports local addresses [ 400.601536][ T7582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.557269][ T7605] loop3: detected capacity change from 0 to 2048 [ 402.599573][ T7609] loop2: detected capacity change from 0 to 2048 [ 402.649918][ T7605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.749188][ T7609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.796508][ T7611] ------------[ cut here ]------------ [ 402.964331][ T7611] WARNING: CPU: 0 PID: 7611 at net/mac80211/cfg.c:3686 ieee80211_probe_client+0x5b1/0x730 [ 403.224622][ T7611] Modules linked in: [ 403.315412][ T7611] CPU: 0 PID: 7611 Comm: syz.4.968 Not tainted 5.15.166-syzkaller #0 [ 403.422687][ T7622] virtio-fs: tag <(null)> not found [ 403.489088][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 403.537511][ T7611] RIP: 0010:ieee80211_probe_client+0x5b1/0x730 [ 403.564126][ T7611] Code: f7 c6 05 80 b0 0f 04 01 48 c7 c7 20 8a 97 8b be 65 0e 00 00 48 c7 c2 00 8f 97 8b e8 a9 fa 9c f7 e9 98 fb ff ff e8 1f 4b ba f7 <0f> 0b bb ea ff ff ff e9 1f ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 [ 403.594581][ T7611] RSP: 0018:ffffc90003287290 EFLAGS: 00010283 [ 403.600755][ T7611] RAX: ffffffff89c60ee1 RBX: 0000000000000001 RCX: 0000000000040000 [ 403.608951][ T7611] RDX: ffffc9000da2a000 RSI: 0000000000000325 RDI: 0000000000000326 [ 403.618474][ T7611] RBP: 0000000000000000 R08: ffffffff89c60a60 R09: fffffbfff20e2219 [ 403.626616][ T7611] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900032873a0 [ 403.636219][ T7611] R13: dffffc0000000000 R14: ffff888061f06020 R15: ffff888019dba960 [ 403.644614][ T7611] FS: 00007f6f472d26c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 403.654089][ T7611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.660684][ T7611] CR2: 000000110c3b15b1 CR3: 0000000076be3000 CR4: 00000000003506f0 [ 403.668807][ T7611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 403.676879][ T7611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 403.684921][ T7611] Call Trace: [ 403.688793][ T7611] [ 403.691771][ T7611] ? __warn+0x15b/0x300 [ 403.698070][ T7611] ? ieee80211_probe_client+0x5b1/0x730 [ 403.703761][ T7611] ? report_bug+0x1b7/0x2e0 [ 403.708339][ T7611] ? handle_bug+0x3d/0x70 [ 403.712771][ T7611] ? exc_invalid_op+0x16/0x40 [ 403.717628][ T7611] ? asm_exc_invalid_op+0x16/0x20 [ 403.722704][ T7611] ? ieee80211_probe_client+0x130/0x730 [ 403.728526][ T7611] ? ieee80211_probe_client+0x5b1/0x730 [ 403.734228][ T7611] ? ieee80211_probe_client+0x5b1/0x730 [ 403.739986][ T7611] ? genlmsg_put+0x13b/0x2d0 [ 403.744721][ T7611] nl80211_probe_client+0x3e6/0x820 [ 403.749942][ T7611] ? nl80211_register_unexpected_frame+0x180/0x180 [ 403.756789][ T7611] genl_rcv_msg+0xfbd/0x14a0 [ 403.761416][ T7611] ? genl_bind+0x420/0x420 [ 403.765927][ T7611] ? local_bh_enable+0x5/0x20 [ 403.770616][ T7611] ? mark_lock+0x98/0x340 [ 403.775149][ T7611] ? __lock_acquire+0x1295/0x1ff0 [ 403.780216][ T7611] ? nl80211_register_unexpected_frame+0x180/0x180 [ 403.786914][ T7611] netlink_rcv_skb+0x1cf/0x410 [ 403.792372][ T7611] ? genl_bind+0x420/0x420 [ 403.797004][ T7611] ? netlink_ack+0xb10/0xb10 [ 403.801627][ T7611] ? down_read+0x1b3/0x2e0 [ 403.807576][ T7611] ? genl_rcv+0x9/0x40 [ 403.811665][ T7611] genl_rcv+0x24/0x40 [ 403.815874][ T7611] netlink_unicast+0x7b6/0x980 [ 403.820666][ T7611] ? netlink_detachskb+0x90/0x90 [ 403.825665][ T7611] ? __virt_addr_valid+0x3bb/0x460 [ 403.830882][ T7611] ? 0xffffffff81000000 [ 403.835220][ T7611] ? __check_object_size+0x300/0x410 [ 403.840606][ T7611] ? bpf_lsm_netlink_send+0x5/0x10 [ 403.845793][ T7611] netlink_sendmsg+0xa30/0xd60 [ 403.850692][ T7611] ? netlink_getsockopt+0x5b0/0x5b0 [ 403.856004][ T7611] ? plist_check_list+0x20d/0x220 [ 403.861040][ T7611] ? aa_sock_msg_perm+0x91/0x150 [ 403.866074][ T7611] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 403.871373][ T7611] ? security_socket_sendmsg+0x7d/0xa0 [ 403.876968][ T7611] ? netlink_getsockopt+0x5b0/0x5b0 [ 403.882184][ T7611] ____sys_sendmsg+0x59e/0x8f0 [ 403.887005][ T7611] ? iovec_from_user+0x300/0x390 [ 403.891957][ T7611] ? __sys_sendmsg_sock+0x30/0x30 [ 403.897755][ T7611] ___sys_sendmsg+0x252/0x2e0 [ 403.902479][ T7611] ? __sys_sendmsg+0x260/0x260 [ 403.907354][ T7611] ? __fdget+0x191/0x220 [ 403.911619][ T7611] __se_sys_sendmsg+0x19a/0x260 [ 403.917911][ T7611] ? __x64_sys_sendmsg+0x80/0x80 [ 403.923033][ T7611] ? syscall_enter_from_user_mode+0x2e/0x240 [ 403.929130][ T7611] ? lockdep_hardirqs_on+0x94/0x130 [ 403.934573][ T7611] ? syscall_enter_from_user_mode+0x2e/0x240 [ 403.940569][ T7611] do_syscall_64+0x3b/0xb0 [ 403.945092][ T7611] ? clear_bhb_loop+0x15/0x70 [ 403.949792][ T7611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.956031][ T7611] RIP: 0033:0x7f6f48e7aef9 [ 403.960468][ T7611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.980231][ T7611] RSP: 002b:00007f6f472d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.988846][ T7611] RAX: ffffffffffffffda RBX: 00007f6f49033058 RCX: 00007f6f48e7aef9 [ 403.997538][ T7611] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 404.005593][ T7611] RBP: 00007f6f48eed9f6 R08: 0000000000000000 R09: 0000000000000000 [ 404.013772][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.021749][ T7611] R13: 0000000000000000 R14: 00007f6f49033058 R15: 00007ffe1e2e6588 [ 404.030188][ T7611] [ 404.033491][ T7611] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 404.040857][ T7611] CPU: 0 PID: 7611 Comm: syz.4.968 Not tainted 5.15.166-syzkaller #0 [ 404.048913][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 404.058956][ T7611] Call Trace: [ 404.062234][ T7611] [ 404.065151][ T7611] dump_stack_lvl+0x1e3/0x2d0 [ 404.069821][ T7611] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 404.075448][ T7611] ? panic+0x860/0x860 [ 404.079537][ T7611] ? ieee80211_probe_client+0x4d0/0x730 [ 404.085074][ T7611] ? ieee80211_probe_client+0x4d0/0x730 [ 404.090611][ T7611] panic+0x318/0x860 [ 404.094514][ T7611] ? __warn+0x16a/0x300 [ 404.098681][ T7611] ? fb_is_primary_device+0xd0/0xd0 [ 404.103981][ T7611] ? ieee80211_probe_client+0x5b1/0x730 [ 404.109540][ T7611] __warn+0x2b2/0x300 [ 404.113521][ T7611] ? ieee80211_probe_client+0x5b1/0x730 [ 404.119104][ T7611] report_bug+0x1b7/0x2e0 [ 404.123454][ T7611] handle_bug+0x3d/0x70 [ 404.127600][ T7611] exc_invalid_op+0x16/0x40 [ 404.132088][ T7611] asm_exc_invalid_op+0x16/0x20 [ 404.136936][ T7611] RIP: 0010:ieee80211_probe_client+0x5b1/0x730 [ 404.143105][ T7611] Code: f7 c6 05 80 b0 0f 04 01 48 c7 c7 20 8a 97 8b be 65 0e 00 00 48 c7 c2 00 8f 97 8b e8 a9 fa 9c f7 e9 98 fb ff ff e8 1f 4b ba f7 <0f> 0b bb ea ff ff ff e9 1f ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 [ 404.162889][ T7611] RSP: 0018:ffffc90003287290 EFLAGS: 00010283 [ 404.168986][ T7611] RAX: ffffffff89c60ee1 RBX: 0000000000000001 RCX: 0000000000040000 [ 404.176971][ T7611] RDX: ffffc9000da2a000 RSI: 0000000000000325 RDI: 0000000000000326 [ 404.184965][ T7611] RBP: 0000000000000000 R08: ffffffff89c60a60 R09: fffffbfff20e2219 [ 404.192933][ T7611] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900032873a0 [ 404.201023][ T7611] R13: dffffc0000000000 R14: ffff888061f06020 R15: ffff888019dba960 [ 404.208995][ T7611] ? ieee80211_probe_client+0x130/0x730 [ 404.214625][ T7611] ? ieee80211_probe_client+0x5b1/0x730 [ 404.220182][ T7611] ? genlmsg_put+0x13b/0x2d0 [ 404.224775][ T7611] nl80211_probe_client+0x3e6/0x820 [ 404.229982][ T7611] ? nl80211_register_unexpected_frame+0x180/0x180 [ 404.236627][ T7611] genl_rcv_msg+0xfbd/0x14a0 [ 404.241479][ T7611] ? genl_bind+0x420/0x420 [ 404.245928][ T7611] ? local_bh_enable+0x5/0x20 [ 404.250673][ T7611] ? mark_lock+0x98/0x340 [ 404.255026][ T7611] ? __lock_acquire+0x1295/0x1ff0 [ 404.260192][ T7611] ? nl80211_register_unexpected_frame+0x180/0x180 [ 404.266705][ T7611] netlink_rcv_skb+0x1cf/0x410 [ 404.271464][ T7611] ? genl_bind+0x420/0x420 [ 404.275885][ T7611] ? netlink_ack+0xb10/0xb10 [ 404.280491][ T7611] ? down_read+0x1b3/0x2e0 [ 404.284897][ T7611] ? genl_rcv+0x9/0x40 [ 404.288954][ T7611] genl_rcv+0x24/0x40 [ 404.292945][ T7611] netlink_unicast+0x7b6/0x980 [ 404.297725][ T7611] ? netlink_detachskb+0x90/0x90 [ 404.302680][ T7611] ? __virt_addr_valid+0x3bb/0x460 [ 404.307803][ T7611] ? 0xffffffff81000000 [ 404.311946][ T7611] ? __check_object_size+0x300/0x410 [ 404.317225][ T7611] ? bpf_lsm_netlink_send+0x5/0x10 [ 404.322344][ T7611] netlink_sendmsg+0xa30/0xd60 [ 404.327103][ T7611] ? netlink_getsockopt+0x5b0/0x5b0 [ 404.332287][ T7611] ? plist_check_list+0x20d/0x220 [ 404.337309][ T7611] ? aa_sock_msg_perm+0x91/0x150 [ 404.342257][ T7611] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 404.347532][ T7611] ? security_socket_sendmsg+0x7d/0xa0 [ 404.352986][ T7611] ? netlink_getsockopt+0x5b0/0x5b0 [ 404.358239][ T7611] ____sys_sendmsg+0x59e/0x8f0 [ 404.363039][ T7611] ? iovec_from_user+0x300/0x390 [ 404.367971][ T7611] ? __sys_sendmsg_sock+0x30/0x30 [ 404.373005][ T7611] ___sys_sendmsg+0x252/0x2e0 [ 404.377696][ T7611] ? __sys_sendmsg+0x260/0x260 [ 404.382495][ T7611] ? __fdget+0x191/0x220 [ 404.386834][ T7611] __se_sys_sendmsg+0x19a/0x260 [ 404.391677][ T7611] ? __x64_sys_sendmsg+0x80/0x80 [ 404.396619][ T7611] ? syscall_enter_from_user_mode+0x2e/0x240 [ 404.402620][ T7611] ? lockdep_hardirqs_on+0x94/0x130 [ 404.407813][ T7611] ? syscall_enter_from_user_mode+0x2e/0x240 [ 404.413794][ T7611] do_syscall_64+0x3b/0xb0 [ 404.418220][ T7611] ? clear_bhb_loop+0x15/0x70 [ 404.422909][ T7611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 404.428894][ T7611] RIP: 0033:0x7f6f48e7aef9 [ 404.433303][ T7611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.452930][ T7611] RSP: 002b:00007f6f472d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.461353][ T7611] RAX: ffffffffffffffda RBX: 00007f6f49033058 RCX: 00007f6f48e7aef9 [ 404.469316][ T7611] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 404.477284][ T7611] RBP: 00007f6f48eed9f6 R08: 0000000000000000 R09: 0000000000000000 [ 404.485262][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.493231][ T7611] R13: 0000000000000000 R14: 00007f6f49033058 R15: 00007ffe1e2e6588 [ 404.501220][ T7611] [ 404.504472][ T7611] Kernel Offset: disabled [ 404.509053][ T7611] Rebooting in 86400 seconds..