last executing test programs: 28.264396965s ago: executing program 4 (id=550): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 27.124199227s ago: executing program 4 (id=554): openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bb9, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 24.376906669s ago: executing program 4 (id=563): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000240)={0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 24.285243096s ago: executing program 0 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, &(0x7f0000000840)}, 0x3}], 0x2, 0x10022, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) 24.284037796s ago: executing program 3 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r1, 0xfffffffb) syz_open_dev$video4linux(0x0, 0x5, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x1db) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x29a, 0x0, 0x82, 0x0, &(0x7f0000000180)) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 24.262238448s ago: executing program 4 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 24.197715033s ago: executing program 1 (id=569): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0xb4b7, 0x800, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 23.271438518s ago: executing program 2 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 22.900382298s ago: executing program 4 (id=571): r0 = socket(0x2, 0x3, 0xff) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000080)=0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) 22.543008287s ago: executing program 0 (id=572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) r4 = syz_open_dev$video(0x0, 0x9, 0x4a142) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) shutdown(r3, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 22.429825666s ago: executing program 1 (id=573): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="13", 0x1}], 0x1}}], 0x2, 0x20004840) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) 22.356505482s ago: executing program 0 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) ptrace$setregs(0xf, r0, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000001000084f7ffffff0400000002000000566700000800000000000008000000000030615f610000305f"], &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) 22.353682702s ago: executing program 1 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) listen(r3, 0x0) 22.329746144s ago: executing program 2 (id=576): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 22.327039395s ago: executing program 3 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 21.14563093s ago: executing program 3 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x1003}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.514106681s ago: executing program 1 (id=579): openat$ttynull(0xffffffffffffff9c, 0x0, 0x2901, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc00) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 19.946467297s ago: executing program 2 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34324258, 0x3, @discrete={0x3b79f0fc, 0xffffffff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x6000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19.946109377s ago: executing program 3 (id=581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x470b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x3, 0x5, 0x1, 0xfffffff5}}}}]}, 0x4c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19.453830137s ago: executing program 1 (id=582): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x28) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x4000}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 19.335767576s ago: executing program 4 (id=583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19.086759827s ago: executing program 0 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000700)=@sack_info={r6, 0x2, 0x6}, &(0x7f0000000740)=0xc) 17.977735506s ago: executing program 0 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x3e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4098884, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) recvmmsg(r3, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 17.374173455s ago: executing program 2 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) unshare(0x8040480) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x5, 0x100) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f8, &(0x7f00000005c0)="$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") 17.31559515s ago: executing program 1 (id=587): socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x40d) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)) semop(r3, &(0x7f0000000000)=[{0x2, 0x7d, 0x3800}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x6, 0x800}, {0x2, 0x6, 0x1800}], 0x5) 17.225745707s ago: executing program 2 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) socket(0x2a, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 17.211278178s ago: executing program 2 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.866370466s ago: executing program 0 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.777734373s ago: executing program 3 (id=591): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'bridge0\x00'}}, 0x1e) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[], 0x68) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r4, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) shutdown(r4, 0x1) syz_emit_vhci(&(0x7f0000003980)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc8}}}, 0x6) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x516, &(0x7f0000000600)="$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") syz_emit_vhci(&(0x7f0000005980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0xf, 0xc9, 0x8}}}}, 0xa) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x1, 0x2, 0x8}) 15.968845099s ago: executing program 3 (id=592): socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x10000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 3.500069737s ago: executing program 32 (id=583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.996422699s ago: executing program 33 (id=587): socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x40d) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)) semop(r3, &(0x7f0000000000)=[{0x2, 0x7d, 0x3800}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x6, 0x800}, {0x2, 0x6, 0x1800}], 0x5) 1.973266831s ago: executing program 34 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.495483719s ago: executing program 35 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 36 (id=592): socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x10000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ackets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.909411][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.913771][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.914947][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.916497][ T4326] device bridge_slave_1 entered promiscuous mode [ 32.921894][ T4319] team0: Port device team_slave_1 added [ 32.939482][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.940802][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.942241][ T4325] device bridge_slave_0 entered promiscuous mode [ 32.943996][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.945170][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.947196][ T4325] device bridge_slave_1 entered promiscuous mode [ 32.952033][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.965022][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.966172][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.970416][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.973134][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.983213][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.984290][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.988390][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.051041][ T4324] device hsr_slave_0 entered promiscuous mode [ 33.090100][ T4324] device hsr_slave_1 entered promiscuous mode [ 33.139920][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.141170][ T4324] Cannot create hsr debugfs directory [ 33.143015][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.152792][ T4326] team0: Port device team_slave_0 added [ 33.155208][ T4326] team0: Port device team_slave_1 added [ 33.164786][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.210832][ T4319] device hsr_slave_0 entered promiscuous mode [ 33.260120][ T4319] device hsr_slave_1 entered promiscuous mode [ 33.300024][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.301210][ T4319] Cannot create hsr debugfs directory [ 33.303534][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.304543][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.308374][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.311398][ T4325] team0: Port device team_slave_0 added [ 33.313097][ T4325] team0: Port device team_slave_1 added [ 33.316461][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.317559][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.321950][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.328555][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.329605][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.334201][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.343031][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.344111][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.348079][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.411088][ T4325] device hsr_slave_0 entered promiscuous mode [ 33.450156][ T4325] device hsr_slave_1 entered promiscuous mode [ 33.489980][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.491270][ T4325] Cannot create hsr debugfs directory [ 33.530888][ T4326] device hsr_slave_0 entered promiscuous mode [ 33.580148][ T4326] device hsr_slave_1 entered promiscuous mode [ 33.619908][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.621114][ T4326] Cannot create hsr debugfs directory [ 33.622578][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.692208][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.731427][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.783492][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.867106][ T4324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.935810][ T4324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.971870][ T4324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.022470][ T4324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.072169][ T4319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.111741][ T4319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.174918][ T4319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.212573][ T4319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.287521][ T4325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.315478][ T4325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.362259][ T4325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.404917][ T4325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.449757][ T4326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.480035][ T4320] Bluetooth: hci4: command 0x0409 tx timeout [ 34.480095][ T4333] Bluetooth: hci1: command 0x0409 tx timeout [ 34.481090][ T4320] Bluetooth: hci2: command 0x0409 tx timeout [ 34.485378][ T4326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.490372][ T4320] Bluetooth: hci3: command 0x0409 tx timeout [ 34.490530][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 34.511099][ T4326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.556698][ T4326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.593451][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.599542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.601482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.605825][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.614257][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.619590][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.625594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.627361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.637241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.638800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.640848][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.642067][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.643994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.649478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.651854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.653260][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.654383][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.655897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.657404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.658898][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.660066][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.661658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.674027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.675710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.677147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.678569][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.679639][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.681582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.683747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.690524][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.692115][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.693896][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.695480][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.699402][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.703566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.705232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.706752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.708242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.714463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.715921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.717478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.725764][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.728038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.729571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.731763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.734019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.735504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.737021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.738471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.741207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.745525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.747000][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.748407][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.749483][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.754235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.755735][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.757204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.759034][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.771487][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.773716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.775585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.777098][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.778167][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.782107][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.788649][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.791717][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.793527][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.797988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.799552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.805732][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.814746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.816316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.818020][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.819411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.823068][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.824659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.826290][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.827438][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.828745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.830813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.833664][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.835623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.838916][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.850219][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.851759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.853217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.854644][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.856170][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.857368][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.858775][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.861778][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.863201][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.864314][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.865688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.873327][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.875208][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.877571][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.879032][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.881887][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.883551][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.885657][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.886836][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.892870][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.895489][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.896965][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.898398][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.899526][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.903687][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.911851][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.913629][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.919030][ T4325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.921434][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.929194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.931260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.932790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.934567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.936185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.937553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.945715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.952270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.953605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.973115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.974811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.976601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.980068][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.985022][ T4322] device veth0_vlan entered promiscuous mode [ 34.987622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.989182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.991999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.993407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.998774][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.003039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.004316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.008954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.012265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.014150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.025073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.026511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.028082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.035232][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.036709][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.038244][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.039725][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.043397][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.044805][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.052907][ T4322] device veth1_vlan entered promiscuous mode [ 35.054192][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.055733][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.057368][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.058847][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.061322][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.063437][ T4324] device veth0_vlan entered promiscuous mode [ 35.067210][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.075073][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.076578][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.077933][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.080328][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.083381][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.084830][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.086494][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.087847][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.090825][ T4324] device veth1_vlan entered promiscuous mode [ 35.093731][ T4319] device veth0_vlan entered promiscuous mode [ 35.101775][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.107644][ T4319] device veth1_vlan entered promiscuous mode [ 35.113740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.115307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.116875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.118286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.119687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.131243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.134410][ T4322] device veth0_macvtap entered promiscuous mode [ 35.138366][ T4322] device veth1_macvtap entered promiscuous mode [ 35.146836][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.148325][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.149765][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.151948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.153933][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.161872][ T4324] device veth0_macvtap entered promiscuous mode [ 35.168421][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.169673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.171214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.172785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.174297][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.175891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.183656][ T4324] device veth1_macvtap entered promiscuous mode [ 35.185803][ T4319] device veth0_macvtap entered promiscuous mode [ 35.188960][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.193431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.194907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.196407][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.198223][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.202971][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.204308][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.205758][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.207140][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.214896][ T4319] device veth1_macvtap entered promiscuous mode [ 35.222655][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.224203][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.225496][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.233056][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.234699][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.237266][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.241581][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.243094][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.244524][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.246269][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.248546][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.251721][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.253337][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.254958][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.256416][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.263214][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.264863][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.267040][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.268941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.270606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.272159][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.273620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.282953][ T4324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.284380][ T4324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.285854][ T4324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.287327][ T4324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.290760][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.296075][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.298065][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.299759][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.302513][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.304674][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.306357][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.307820][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.309533][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.311997][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.313524][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.314983][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.323905][ T4325] device veth0_vlan entered promiscuous mode [ 35.325597][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.326997][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.328367][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.329839][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.340099][ T477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.341392][ T477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.348376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.350329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.351905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.353469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.354997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.359202][ T4325] device veth1_vlan entered promiscuous mode [ 35.364885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.366269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.367723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.373094][ T4326] device veth0_vlan entered promiscuous mode [ 35.387832][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.395818][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.398594][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.400435][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.406918][ T477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.408210][ T477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.413825][ T4326] device veth1_vlan entered promiscuous mode [ 35.416432][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.417933][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.424985][ T4325] device veth0_macvtap entered promiscuous mode [ 35.428443][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.429706][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.430570][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.432947][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.434470][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.435926][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.437318][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.446663][ T4325] device veth1_macvtap entered promiscuous mode [ 35.458232][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.459755][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.462087][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.464759][ T4326] device veth0_macvtap entered promiscuous mode [ 35.479290][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.480762][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.482563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.484094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.487538][ T4326] device veth1_macvtap entered promiscuous mode [ 35.497013][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.498694][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.501340][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.502992][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.504693][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.506462][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.508852][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.516706][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.518251][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.522658][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.528244][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.529391][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.533826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.536548][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.544728][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.546317][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.548011][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.549568][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.552911][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.554416][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.556219][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.558999][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.562619][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.564125][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.571009][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.572695][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.574316][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.585525][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.587105][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.588676][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.591869][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.594977][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.596584][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.597967][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.599650][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.601981][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.603554][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.604941][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.606623][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.608824][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.612621][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.614373][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.615967][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.617582][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.620153][ T4325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.621479][ T4325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.622736][ T4325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.624036][ T4325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.742246][ T4326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.743751][ T4326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.745130][ T4326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.746507][ T4326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.770065][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.771487][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.773664][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.078101][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.079395][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.081815][ T221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.118312][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 36.151862][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.153068][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.154804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.185859][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.187247][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.189183][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.265751][ T27] audit: type=1326 audit(36.250:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc75af28 code=0x7ffc0000 [ 36.282508][ T27] audit: type=1326 audit(36.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffbc75af28 code=0x7ffc0000 [ 36.292391][ T27] audit: type=1326 audit(36.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc75af28 code=0x7ffc0000 [ 36.303284][ T27] audit: type=1326 audit(36.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbc759454 code=0x7ffc0000 [ 36.314141][ T27] audit: type=1326 audit(36.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc75af28 code=0x7ffc0000 [ 36.323643][ T27] audit: type=1326 audit(36.270:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbc75af28 code=0x7ffc0000 [ 36.586600][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 36.596782][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 36.598623][ T4320] Bluetooth: hci4: command 0x041b tx timeout [ 36.599935][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 36.602160][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 36.639649][ T27] audit: type=1326 audit(36.270:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc75af28 code=0x7ffc0000 [ 36.643375][ T27] audit: type=1326 audit(36.270:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffbc75af28 code=0x7ffc0000 [ 36.644470][ T4453] Zero length message leads to an empty skb [ 36.646480][ T27] audit: type=1326 audit(36.290:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc75af28 code=0x7ffc0000 [ 36.651098][ T27] audit: type=1326 audit(36.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffbc786648 code=0x7ffc0000 [ 36.928985][ T4478] process 'syz.0.10' launched './file1' with NULL argv: empty string added [ 37.298466][ T4483] binder: 4482:4483 ioctl c00c620f 0 returned -14 [ 38.348138][ T4501] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.349626][ T4501] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.351119][ T4501] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.352423][ T4501] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.800420][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 38.801822][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 38.803097][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 38.804551][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 38.979016][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 38.985545][ T4501] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 38.987148][ T4499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14'. [ 38.998169][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.000534][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.001865][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.065638][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 41.066858][ T4337] Bluetooth: hci2: command 0x0419 tx timeout [ 41.067847][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 41.068903][ T4337] Bluetooth: hci3: command 0x0419 tx timeout [ 41.088007][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 42.182475][ T4555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 42.183887][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 42.197094][ T4555] netlink: 'syz.1.26': attribute type 10 has an invalid length. [ 42.202711][ T4555] bridge0: port 3(team0) entered blocking state [ 42.206231][ T4555] bridge0: port 3(team0) entered disabled state [ 42.208046][ T4555] device team0 entered promiscuous mode [ 42.217129][ T4555] device team_slave_0 entered promiscuous mode [ 42.218443][ T4555] device team_slave_1 entered promiscuous mode [ 42.221381][ T4555] bridge0: port 3(team0) entered blocking state [ 42.222498][ T4555] bridge0: port 3(team0) entered forwarding state [ 42.227392][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 42.356277][ T4586] loop1: detected capacity change from 0 to 128 [ 42.363581][ T4586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 42.804513][ T4586] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 42.875401][ T4609] loop3: detected capacity change from 0 to 8 [ 42.877553][ T4609] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 42.888642][ T4609] cramfs: Error -5 while decompressing! [ 42.889931][ T4609] cramfs: 0000000004a1fbd3(26)->0000000072c72e4b(4096) [ 42.891086][ T4609] cramfs: Error -3 while decompressing! [ 42.891968][ T4609] cramfs: 000000009baf94fa(26)->00000000c296dc8e(4096) [ 42.893094][ T4609] cramfs: Error -3 while decompressing! [ 42.893124][ T4311] udevd[4311]: incorrect cramfs checksum on /dev/loop3 [ 42.893992][ T4609] cramfs: 000000002354d7a5(16)->000000005cc9ed11(4096) [ 42.896081][ T4609] cramfs: Error -5 while decompressing! [ 42.896920][ T4609] cramfs: 0000000004a1fbd3(26)->0000000072c72e4b(4096) [ 43.288102][ T4330] udevd[4330]: incorrect cramfs checksum on /dev/loop3 [ 43.330195][ T4600] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 43.355245][ T4600] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 43.364665][ T4330] udevd[4330]: incorrect cramfs checksum on /dev/loop3 [ 44.439806][ T4637] loop4: detected capacity change from 0 to 1024 [ 45.568336][ T4637] loop4: detected capacity change from 0 to 256 [ 45.569660][ T4637] ======================================================= [ 45.569660][ T4637] WARNING: The mand mount option has been deprecated and [ 45.569660][ T4637] and is ignored by this kernel. Remove the mand [ 45.569660][ T4637] option from the mount to silence this warning. [ 45.569660][ T4637] ======================================================= [ 45.580943][ T4637] exfat: Unknown parameter 'xœìÝÏoU' [ 45.659852][ C0] sched: RT throttling activated [ 45.732385][ C1] vxcan0: j1939_tp_rxtimer: 0x000000006f5dc654: rx timeout, send abort [ 45.887746][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 45.900503][ T4330] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.042010][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 46.384293][ T4677] loop3: detected capacity change from 0 to 512 [ 46.432925][ T4677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.449729][ T4677] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #4: comm syz.3.48: corrupted inode contents [ 46.455033][ T4677] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #4: comm syz.3.48: mark_inode_dirty error [ 46.457177][ T4677] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #4: comm syz.3.48: corrupted inode contents [ 46.459361][ T4677] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #4: comm syz.3.48: mark_inode_dirty error [ 46.462283][ T4677] __quota_error: 21 callbacks suppressed [ 46.462295][ T4677] Quota error (device loop3): write_blk: dquota write failed [ 46.465512][ T4677] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 46.467107][ T4677] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 46.468801][ T4677] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.48: Failed to acquire dquot type 1 [ 46.531148][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 48.817787][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 49.214748][ T27] audit: type=1326 audit(49.200:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4730 comm="syz.3.62" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635af28 code=0x0 [ 49.758365][ T4753] loop2: detected capacity change from 0 to 1024 [ 49.824009][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.825528][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.841469][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.844855][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.849111][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.853870][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.863442][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.864820][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.869136][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.871104][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.881355][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.882622][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.886624][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 49.888085][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 50.450678][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 50.452046][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 50.453945][ T4337] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 50.456876][ T4337] Bluetooth: hci3: Injecting HCI hardware error event [ 50.459118][ T4328] Bluetooth: hci3: hardware error 0x00 [ 50.477546][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 50.478892][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 50.492035][ T4764] batman_adv: batadv0: Adding interface: dummy0 [ 50.493563][ T4764] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.494063][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 50.497789][ T4764] batman_adv: batadv0: Interface activated: dummy0 [ 50.505373][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 50.512102][ T4764] batadv0: mtu less than device minimum [ 50.514837][ T4764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.518045][ T4764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.521002][ T4764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.524112][ T4764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.527059][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 50.527096][ T4764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.529408][ T4753] hfsplus: request for non-existent node 33423360 in B*Tree [ 50.531328][ T4764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.534460][ T4764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.537384][ T4764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.540333][ T4764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.662781][ T4779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'. [ 50.665798][ T4779] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.667388][ T4779] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.736395][ T4785] binder: 4784:4785 tried to acquire reference to desc 0, got 1 instead [ 50.743909][ T4785] binder: 4784:4785 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.745988][ T4785] binder: 4785 RLIMIT_NICE not set [ 50.746941][ T4785] binder: 4785 RLIMIT_NICE not set [ 50.748238][ T4785] binder: 4785 RLIMIT_NICE not set [ 50.757312][ T4404] binder: undelivered TRANSACTION_COMPLETE [ 50.811625][ T4791] netlink: 48 bytes leftover after parsing attributes in process `syz.0.80'. [ 50.813110][ T4791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.814369][ T4791] IPv6: NLM_F_CREATE should be set when creating new route [ 50.898315][ T4796] loop2: detected capacity change from 0 to 256 [ 50.929784][ C0] vcan0: j1939_tp_rxtimer: 0x0000000088a61907: rx timeout, send abort [ 50.953152][ T4796] FAT-fs (loop2): Directory bread(block 64) failed [ 50.954335][ T4796] FAT-fs (loop2): Directory bread(block 65) failed [ 50.955593][ T4796] FAT-fs (loop2): Directory bread(block 66) failed [ 50.956736][ T4796] FAT-fs (loop2): Directory bread(block 67) failed [ 50.957949][ T4796] FAT-fs (loop2): Directory bread(block 68) failed [ 50.959090][ T4796] FAT-fs (loop2): Directory bread(block 69) failed [ 50.960379][ T4796] FAT-fs (loop2): Directory bread(block 70) failed [ 50.961578][ T4796] FAT-fs (loop2): Directory bread(block 71) failed [ 50.962848][ T4796] FAT-fs (loop2): Directory bread(block 72) failed [ 50.964056][ T4796] FAT-fs (loop2): Directory bread(block 73) failed [ 51.217839][ T4793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 51.429823][ C0] vcan0: j1939_tp_rxtimer: 0x000000001c719803: rx timeout, send abort [ 51.725277][ C0] vcan0: j1939_tp_rxtimer: 0x0000000088a61907: abort rx timeout. Force session deactivation [ 52.030397][ C0] vcan0: j1939_tp_rxtimer: 0x000000001c719803: abort rx timeout. Force session deactivation [ 52.212896][ T4818] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 52.677892][ T4828] loop4: detected capacity change from 0 to 64 [ 52.685121][ T4828] hfs: type requires a 4 character value [ 52.686342][ T4828] hfs: unable to parse mount options [ 52.719985][ T4328] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 52.875742][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.90'. [ 53.471638][ T4842] loop0: detected capacity change from 0 to 8 [ 53.558544][ T4842] SQUASHFS error: Failed to read block 0x2fc: -5 [ 53.559787][ T4842] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 53.561112][ T4842] SQUASHFS error: read_indexes: reading block [2fa:0] [ 53.562292][ T4842] SQUASHFS error: Failed to read block 0xfc: -5 [ 53.563611][ T4842] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 53.564769][ T4842] SQUASHFS error: read_indexes: reading block [2fa:0] [ 53.566082][ T4842] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 53.567191][ T4842] SQUASHFS error: read_indexes: reading block [2fa:0] [ 53.568362][ T4842] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 53.569438][ T4842] SQUASHFS error: read_indexes: reading block [2fa:0] [ 53.570561][ T4842] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 53.571565][ T4842] SQUASHFS error: read_indexes: reading block [2fa:0] [ 53.586960][ T4847] loop2: detected capacity change from 0 to 1024 [ 53.591095][ T4850] loop4: detected capacity change from 0 to 512 [ 53.591274][ T4847] EXT4-fs: Ignoring removed nobh option [ 53.593198][ T4847] EXT4-fs: Ignoring removed oldalloc option [ 53.596000][ T4847] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.603620][ T4850] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 53.890816][ T4847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.964747][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 54.023797][ T4856] netlink: 48 bytes leftover after parsing attributes in process `syz.4.98'. [ 54.120455][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 54.515290][ T4870] netlink: 'syz.4.103': attribute type 4 has an invalid length. [ 54.533494][ T4871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.101'. [ 54.910385][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 54.925919][ T4880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.106'. [ 55.063296][ T4875] loop4: detected capacity change from 0 to 32768 [ 55.123684][ T4893] device vlan2 entered promiscuous mode [ 55.439319][ T4875] XFS (loop4): Mounting V5 Filesystem [ 55.543018][ T4875] XFS (loop4): Ending clean mount [ 56.781810][ T4878] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 56.815563][ T4924] binder: 4923:4924 tried to acquire reference to desc 0, got 1 instead [ 56.847634][ T4325] XFS (loop4): Unmounting Filesystem [ 56.862540][ C0] Unknown status report in ack skb [ 56.885440][ T4924] binder: 4923:4924 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.887594][ T4924] binder: 4924 RLIMIT_NICE not set [ 56.888417][ T4924] binder: 4924 RLIMIT_NICE not set [ 56.889574][ T4924] binder: 4923:4924 got new transaction with bad transaction stack, transaction 11 has target 4923:4924 [ 56.961022][ T4933] loop2: detected capacity change from 0 to 1024 [ 57.397463][ T4933] hfsplus: bad catalog entry type [ 57.437082][ T4924] binder: 4923:4924 transaction call to 4923:0 failed 12/29201/-71, size 0-48 line 3114 [ 57.516958][ T1515] binder: release 4923:4924 transaction 11 out, still active [ 57.518353][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 57.519474][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.593316][ T112] binder: release 4923:4924 transaction 11 in, still active [ 57.594681][ T112] binder: send failed reply for transaction 11, target dead [ 57.711001][ T11] hfsplus: b-tree write err: -5, ino 4 [ 58.069540][ T4947] loop2: detected capacity change from 0 to 1024 [ 58.081190][ T4947] EXT4-fs: Ignoring removed nobh option [ 58.084417][ T4947] EXT4-fs: Ignoring removed bh option [ 58.088604][ T4947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 58.090163][ T4949] mmap: syz.3.122 (4949): VmData 175906816 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 58.111952][ T4947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.784929][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 60.518183][ T4993] loop0: detected capacity change from 0 to 1024 [ 61.377995][ T5010] loop4: detected capacity change from 0 to 256 [ 62.118520][ T5010] FAT-fs (loop4): Directory bread(block 64) failed [ 62.119707][ T5010] FAT-fs (loop4): Directory bread(block 65) failed [ 62.120861][ T5010] FAT-fs (loop4): Directory bread(block 66) failed [ 62.121975][ T5010] FAT-fs (loop4): Directory bread(block 67) failed [ 62.123087][ T5010] FAT-fs (loop4): Directory bread(block 68) failed [ 62.124199][ T5010] FAT-fs (loop4): Directory bread(block 69) failed [ 62.125299][ T5010] FAT-fs (loop4): Directory bread(block 70) failed [ 62.126466][ T5010] FAT-fs (loop4): Directory bread(block 71) failed [ 62.127517][ T5010] FAT-fs (loop4): Directory bread(block 72) failed [ 62.128491][ T5010] FAT-fs (loop4): Directory bread(block 73) failed [ 62.165063][ T5016] loop3: detected capacity change from 0 to 256 [ 62.194415][ T5016] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 62.197357][ T5016] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 62.200107][ T5016] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 62.201962][ T5016] UDF-fs: Scanning with blocksize 512 failed [ 62.204912][ T5016] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 62.207444][ T5016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.577354][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 62.728226][ T5034] loop4: detected capacity change from 0 to 2048 [ 62.839593][ T112] net_ratelimit: 10 callbacks suppressed [ 62.839606][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.867080][ T5034] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.127380][ T5037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.128983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.134793][ T5039] loop2: detected capacity change from 0 to 128 [ 63.166249][ T5037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.178548][ T5039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.183471][ T5037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.185778][ T4405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.522121][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.523819][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.603234][ T5044] syz.3.144 (5044): drop_caches: 2 [ 63.920883][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.922860][ T5037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.955840][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 64.015060][ T5048] loop3: detected capacity change from 0 to 512 [ 64.016420][ T5048] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.017477][ T5048] EXT4-fs: Ignoring removed bh option [ 64.019295][ T5048] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.021271][ T5048] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.023281][ T5048] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.094019][ T5060] loop0: detected capacity change from 0 to 256 [ 64.271061][ T5060] FAT-fs (loop0): Directory bread(block 64) failed [ 64.272231][ T5060] FAT-fs (loop0): Directory bread(block 65) failed [ 64.273443][ T5060] FAT-fs (loop0): Directory bread(block 66) failed [ 64.274566][ T5060] FAT-fs (loop0): Directory bread(block 67) failed [ 64.275886][ T5060] FAT-fs (loop0): Directory bread(block 68) failed [ 64.277191][ T5060] FAT-fs (loop0): Directory bread(block 69) failed [ 64.278471][ T5060] FAT-fs (loop0): Directory bread(block 70) failed [ 64.279709][ T5060] FAT-fs (loop0): Directory bread(block 71) failed [ 64.281074][ T5060] FAT-fs (loop0): Directory bread(block 72) failed [ 64.282241][ T5060] FAT-fs (loop0): Directory bread(block 73) failed [ 65.055344][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.056538][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.934607][ T24] cfg80211: failed to load regulatory.db [ 65.977652][ T5048] EXT4-fs (loop3): 1 truncate cleaned up [ 65.978554][ T5048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.096260][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 66.958547][ T5114] binder: 5113:5114 tried to acquire reference to desc 0, got 1 instead [ 66.972779][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 66.977782][ T5116] tipc: Started in network mode [ 66.988528][ T5116] tipc: Node identity 8263c597b39, cluster identity 4711 [ 66.989767][ T5116] tipc: Enabled bearer , priority 0 [ 66.991990][ T24] binder: undelivered transaction 17, process died. [ 67.000341][ T5116] device syzkaller0 entered promiscuous mode [ 67.012718][ T5116] tipc: Resetting bearer [ 67.023689][ T5115] tipc: Resetting bearer [ 67.060699][ T5115] tipc: Disabling bearer [ 67.155376][ T5126] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.001723][ T24] net_ratelimit: 10 callbacks suppressed [ 68.001736][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.889583][ T5147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.173'. [ 69.122141][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.679412][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.689805][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 69.833016][ T5163] netlink: 'syz.1.178': attribute type 11 has an invalid length. [ 70.354393][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.549261][ T5174] loop0: detected capacity change from 0 to 256 [ 70.984006][ T5181] netlink: 'syz.1.184': attribute type 4 has an invalid length. [ 71.370793][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.227819][ T5196] tipc: Enabled bearer , priority 10 [ 72.241632][ T5196] tipc: Enabled bearer , priority 0 [ 72.859868][ T4551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.060981][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.062619][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.154192][ T5214] loop3: detected capacity change from 0 to 64 [ 73.401587][ T5207] tipc: Node number set to 838059415 [ 74.701580][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.703236][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.387157][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.062467][ T5263] Bluetooth: MGMT ver 1.22 [ 77.849321][ T4551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.861258][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.955091][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.054809][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.613870][ T5307] could not allocate digest TFM handle sha1-ssse3 [ 80.880090][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.467463][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.897850][ T27] audit: type=1326 audit(337.874:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5348 comm="syz.3.231" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635af28 code=0x0 [ 82.446249][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.480425][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.205994][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 83.876864][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.913049][ T5384] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 83.920450][ T5384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.920491][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.944308][ T5384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.945706][ T5384] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 83.948342][ T5384] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 83.997596][ T5388] device gretap1 entered promiscuous mode [ 84.001959][ T5388] bond1: (slave gretap1): making interface the new active one [ 84.003900][ T5388] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 84.051171][ T5384] device macvlan2 entered promiscuous mode [ 84.063725][ T5384] device bond1 entered promiscuous mode [ 84.064933][ T5384] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.092125][ T5384] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 84.107429][ T5394] Cannot find set identified by id 0 to match [ 84.122955][ T5384] device bond1 left promiscuous mode [ 84.236792][ T27] audit: type=1326 audit(340.214:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5402 comm="syz.3.245" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635af28 code=0x0 [ 84.615445][ T5400] batman_adv: batadv0: Interface deactivated: dummy0 [ 84.616690][ T5400] batman_adv: batadv0: Removing interface: dummy0 [ 84.620533][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.623982][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.631707][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.632997][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.880220][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.957610][ T5419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.959736][ T5419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.961539][ T5419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.974941][ T5419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.977161][ T5419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.979167][ T5419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.981208][ T5419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.983432][ T5419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.985323][ T5419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.192723][ T5423] mmap: syz.3.251 (5423) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.580083][ T5428] loop2: detected capacity change from 0 to 1764 [ 85.625628][ T5431] loop4: detected capacity change from 0 to 1024 [ 85.666362][ T4330] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.668998][ T5431] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.755596][ T5431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.532711][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 87.284666][ T5458] netlink: 'syz.1.259': attribute type 1 has an invalid length. [ 87.292109][ T5458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.329269][ T5458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.334689][ T5458] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 87.337839][ T5458] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 87.802921][ T5458] device gretap1 entered promiscuous mode [ 87.806499][ T5458] bond1: (slave gretap1): making interface the new active one [ 87.808127][ T5458] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 87.820480][ T5458] device macvlan2 entered promiscuous mode [ 87.822179][ T5458] device bond1 entered promiscuous mode [ 87.823398][ T5458] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 87.892087][ T5458] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 88.316667][ T5458] device bond1 left promiscuous mode [ 88.784114][ T5488] loop4: detected capacity change from 0 to 256 [ 89.146415][ T5488] FAT-fs (loop4): Directory bread(block 64) failed [ 89.147718][ T5488] FAT-fs (loop4): Directory bread(block 65) failed [ 89.148921][ T5488] FAT-fs (loop4): Directory bread(block 66) failed [ 89.150142][ T5488] FAT-fs (loop4): Directory bread(block 67) failed [ 89.151376][ T5488] FAT-fs (loop4): Directory bread(block 68) failed [ 89.152468][ T5488] FAT-fs (loop4): Directory bread(block 69) failed [ 89.153732][ T5488] FAT-fs (loop4): Directory bread(block 70) failed [ 89.154973][ T5488] FAT-fs (loop4): Directory bread(block 71) failed [ 89.156224][ T5488] FAT-fs (loop4): Directory bread(block 72) failed [ 89.157452][ T5488] FAT-fs (loop4): Directory bread(block 73) failed [ 89.568034][ T5493] loop2: detected capacity change from 0 to 1024 [ 89.569774][ T5493] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.608645][ T5493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.160951][ T4404] net_ratelimit: 365 callbacks suppressed [ 90.160961][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.321389][ T4405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.406109][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 91.325710][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.073856][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.320088][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.332470][ T5526] devtmpfs: Unknown parameter 'dirsyncâŽö€kÈá9Ä›‘Çk9X÷ð[GÓåñcN½13‰Ÿ”H¢ÿ“ðs³¡ä~ßv÷Ѹ¹ ÀßLû œŒ€‹Dì®” eOp°ªÁtÓCâ{7-`'«*ì+Ê×þk¹2¼WQÒ—N•EZ'£´r¼{½Ò¬Z¦èzÎ6Ì„¾e“Ubš±:ÔÃüú$#Cš6–[YÚH ^ŽBÌÇÌ@Éœøl !×/ŸJ±°åU¥£•“É8qÿ~µì­¶H7¢Ø‡#ïeªQRãÕ†NWXaò°–' [ 93.060254][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.436415][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.828684][ T5545] loop4: detected capacity change from 0 to 32768 [ 93.843758][ T5545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.280 (5545) [ 93.847915][ T5548] serio: Serial port pts0 [ 93.933969][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.939312][ T5545] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.945606][ T5545] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 93.946986][ T5545] BTRFS info (device loop4): force clearing of disk cache [ 93.948246][ T5545] BTRFS info (device loop4): enabling auto defrag [ 93.949355][ T5545] BTRFS info (device loop4): max_inline at 0 [ 93.953935][ T5545] BTRFS info (device loop4): enabling disk space caching [ 93.955286][ T5545] BTRFS info (device loop4): disk space caching is enabled [ 94.480970][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.496119][ T5565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.504498][ T5567] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 94.538476][ T5567] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 94.552850][ T5567] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 94.564483][ T5545] BTRFS info (device loop4): enabling ssd optimizations [ 94.568048][ T5545] BTRFS info (device loop4): rebuilding free space tree [ 94.585863][ T5545] BTRFS info (device loop4): disabling free space tree [ 94.587518][ T5545] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.589744][ T5545] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.634957][ T5567] bond2 (unregistering): Released all slaves [ 94.658539][ T4617] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 95.470051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.543032][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.183259][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.307287][ T4325] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.579291][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.788544][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.475102][ T5641] loop3: detected capacity change from 0 to 256 [ 98.080619][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.128971][ T5641] FAT-fs (loop3): Directory bread(block 64) failed [ 98.130188][ T5641] FAT-fs (loop3): Directory bread(block 65) failed [ 98.131316][ T5641] FAT-fs (loop3): Directory bread(block 66) failed [ 98.132452][ T5641] FAT-fs (loop3): Directory bread(block 67) failed [ 98.133694][ T5641] FAT-fs (loop3): Directory bread(block 68) failed [ 98.134822][ T5641] FAT-fs (loop3): Directory bread(block 69) failed [ 98.135997][ T5641] FAT-fs (loop3): Directory bread(block 70) failed [ 98.137114][ T5641] FAT-fs (loop3): Directory bread(block 71) failed [ 98.138265][ T5641] FAT-fs (loop3): Directory bread(block 72) failed [ 98.139452][ T5641] FAT-fs (loop3): Directory bread(block 73) failed [ 98.344601][ T5643] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 98.399798][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 98.886714][ T5658] loop4: detected capacity change from 0 to 16 [ 98.993165][ T5658] erofs: (device loop4): mounted with root inode @ nid 36. [ 99.186055][ T5662] syz.4.312: attempt to access beyond end of device [ 99.186055][ T5662] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 99.198281][ T5662] syz.4.312: attempt to access beyond end of device [ 99.198281][ T5662] loop4: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 99.208495][ T5662] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 99.210346][ T5662] syz.4.312: attempt to access beyond end of device [ 99.210346][ T5662] loop4: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 99.383820][ T4405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.385232][ T4405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.980963][ T5667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.982419][ T5667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.991704][ T5667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.992984][ T5667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.523819][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.080328][ T5693] No such timeout policy "syz1" [ 101.640153][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.182215][ T5711] binder: BINDER_SET_CONTEXT_MGR already set [ 102.184457][ T5711] binder: 5701:5711 ioctl 4018620d 20004a80 returned -16 [ 102.194308][ T5711] binder: tried to use weak ref as strong ref [ 102.195694][ T5711] binder: 5701:5711 Acquire 1 refcount change on invalid ref 0 ret -22 [ 102.292139][ T5716] xt_bpf: check failed: parse error [ 102.303222][ T5711] binder: 5701:5711 got transaction to invalid handle, 1 [ 102.304498][ T5711] binder: 5711:5701 cannot find target node [ 102.305494][ T5711] binder: 5701:5711 transaction call to 0:0 failed 26/29201/-22, size 0-0 line 3054 [ 102.646253][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.654161][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.665856][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.667116][ T5720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.669005][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.670478][ T5720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.752356][ T5729] loop2: detected capacity change from 0 to 16 [ 102.759904][ T5729] erofs: (device loop2): mounted with root inode @ nid 36. [ 102.779589][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.787071][ T5729] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 102.788959][ T5729] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 102.805724][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.807365][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.808748][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 102.810975][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.812387][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 102.813817][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.815346][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 102.816884][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 102.818306][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 102.820016][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 102.821538][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.823042][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 102.824732][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 102.826231][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 102.827851][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 102.830329][ T5729] syz.2.328: attempt to access beyond end of device [ 102.830329][ T5729] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 102.832787][ T5729] syz.2.328: attempt to access beyond end of device [ 102.832787][ T5729] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 102.835009][ T5729] syz.2.328: attempt to access beyond end of device [ 102.835009][ T5729] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 102.838191][ T5729] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[2639] [ 102.841885][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 102.843387][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 102.844942][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.846441][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 102.847860][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.849278][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 102.851527][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 102.852922][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 102.854436][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.855934][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 102.857222][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.858548][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 102.859934][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 102.861345][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 102.862744][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 102.864256][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 102.865875][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 102.867372][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 102.868858][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.870319][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 102.871796][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.873147][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 102.874508][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 102.876300][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.877668][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 102.879080][ T5729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.880530][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 102.881899][ T5729] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 102.883518][ T5729] syz.2.328: attempt to access beyond end of device [ 102.883518][ T5729] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 102.885699][ T5729] syz.2.328: attempt to access beyond end of device [ 102.885699][ T5729] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 102.887841][ T5729] syz.2.328: attempt to access beyond end of device [ 102.887841][ T5729] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 102.891459][ T5729] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[5297] [ 102.982709][ T5727] netlink: 'syz.1.332': attribute type 10 has an invalid length. [ 102.984196][ T5731] binder: 5701:5731 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.986415][ T5731] binder: 5731 RLIMIT_NICE not set [ 102.988163][ T5731] binder: 5701:5731 got reply transaction with no transaction stack [ 102.991616][ T5731] binder: 5701:5731 transaction reply to 0:0 failed 27/29201/-71, size 0-0 line 2955 [ 103.002913][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.004651][ T5727] device bond0 entered promiscuous mode [ 103.005754][ T5727] device bond_slave_0 entered promiscuous mode [ 103.006972][ T5727] device bond_slave_1 entered promiscuous mode [ 103.008258][ T5727] device vxlan0 entered promiscuous mode [ 103.011611][ T5727] team0: Port device bond0 added [ 103.020521][ T5730] bridge0: port 3(team0) entered disabled state [ 103.179476][ T4533] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.180719][ T4533] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.460026][ T112] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 103.521526][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.643279][ T112] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.645359][ T112] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 103.647148][ T112] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 103.648893][ T112] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 103.652218][ T112] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.653728][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.655118][ T112] usb 1-1: Product: syz [ 103.655803][ T112] usb 1-1: Manufacturer: syz [ 103.656551][ T112] usb 1-1: SerialNumber: syz [ 103.662509][ T5735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.680515][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.867547][ T5735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.868944][ T5735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.961899][ T5730] device team0 left promiscuous mode [ 103.969975][ T5730] device team_slave_0 left promiscuous mode [ 103.971035][ T5730] device team_slave_1 left promiscuous mode [ 103.971988][ T5730] device bond0 left promiscuous mode [ 103.972773][ T5730] device bond_slave_0 left promiscuous mode [ 103.973721][ T5730] device bond_slave_1 left promiscuous mode [ 103.974811][ T5730] device vxlan0 left promiscuous mode [ 103.975889][ T5730] bridge0: port 3(team0) entered disabled state [ 104.046975][ T5730] team0 (unregistering): Port device team_slave_0 removed [ 104.051073][ T5743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.105222][ T5743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.118163][ T5730] team0 (unregistering): Port device team_slave_1 removed [ 104.337131][ T5730] team0 (unregistering): Port device bond0 removed [ 104.453401][ T5747] overlayfs: failed to clone upperpath [ 104.626290][ T5757] loop4: detected capacity change from 0 to 256 [ 104.694658][ T5757] FAT-fs (loop4): Directory bread(block 64) failed [ 104.695892][ T5757] FAT-fs (loop4): Directory bread(block 65) failed [ 104.697111][ T5757] FAT-fs (loop4): Directory bread(block 66) failed [ 104.698214][ T5757] FAT-fs (loop4): Directory bread(block 67) failed [ 104.699483][ T5757] FAT-fs (loop4): Directory bread(block 68) failed [ 104.700626][ T5757] FAT-fs (loop4): Directory bread(block 69) failed [ 104.701870][ T5757] FAT-fs (loop4): Directory bread(block 70) failed [ 104.703064][ T5757] FAT-fs (loop4): Directory bread(block 71) failed [ 104.704346][ T5757] FAT-fs (loop4): Directory bread(block 72) failed [ 104.705470][ T5757] FAT-fs (loop4): Directory bread(block 73) failed [ 104.810292][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.939848][ T5735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.946828][ T5735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.002627][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 105.004138][ T5759] netlink: 'syz.3.341': attribute type 5 has an invalid length. [ 105.021462][ T5759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 105.024203][ T5759] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 105.025566][ T5759] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 105.026990][ T5759] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 105.028340][ T5759] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 105.029825][ T5759] device geneve2 entered promiscuous mode [ 105.165291][ T112] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 105.167211][ T112] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 105.168449][ T112] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 105.592368][ T5772] loop4: detected capacity change from 0 to 16 [ 105.601534][ T5772] erofs: (device loop4): mounted with root inode @ nid 36. [ 105.611088][ T5772] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 105.612683][ T5772] syz.4.345: attempt to access beyond end of device [ 105.612683][ T5772] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 105.618145][ T5772] syz.4.345: attempt to access beyond end of device [ 105.618145][ T5772] loop4: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 105.630758][ T5772] syz.4.345: attempt to access beyond end of device [ 105.630758][ T5772] loop4: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 105.633126][ T112] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 105.633852][ T5772] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 105.646871][ T112] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 105.660151][ T112] usb 1-1: USB disconnect, device number 2 [ 105.661702][ T112] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 105.698589][ T5779] loop4: detected capacity change from 0 to 512 [ 105.751144][ T5779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.797701][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 106.081339][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.092729][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.561827][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.790300][ T5809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 107.120265][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.831280][ T5824] loop0: detected capacity change from 0 to 256 [ 108.107263][ T5824] FAT-fs (loop0): Directory bread(block 64) failed [ 108.108517][ T5824] FAT-fs (loop0): Directory bread(block 65) failed [ 108.109679][ T5824] FAT-fs (loop0): Directory bread(block 66) failed [ 108.110881][ T5824] FAT-fs (loop0): Directory bread(block 67) failed [ 108.112131][ T5824] FAT-fs (loop0): Directory bread(block 68) failed [ 108.113287][ T5824] FAT-fs (loop0): Directory bread(block 69) failed [ 108.114491][ T5824] FAT-fs (loop0): Directory bread(block 70) failed [ 108.115672][ T5824] FAT-fs (loop0): Directory bread(block 71) failed [ 108.116858][ T5824] FAT-fs (loop0): Directory bread(block 72) failed [ 108.118020][ T5824] FAT-fs (loop0): Directory bread(block 73) failed [ 108.273589][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.382292][ T5819] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 108.394498][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.396071][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.397571][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.399133][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.402180][ T5819] bond2: (slave geneve3): making interface the new active one [ 108.403816][ T5819] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 108.407039][ T5819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.359'. [ 108.410418][ T5819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.129892][ T5839] loop3: detected capacity change from 0 to 256 [ 109.286671][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.132975][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.154602][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 110.220120][ T5839] FAT-fs (loop3): Directory bread(block 64) failed [ 110.221397][ T5839] FAT-fs (loop3): Directory bread(block 65) failed [ 110.222589][ T5839] FAT-fs (loop3): Directory bread(block 66) failed [ 110.223818][ T5839] FAT-fs (loop3): Directory bread(block 67) failed [ 110.225079][ T5839] FAT-fs (loop3): Directory bread(block 68) failed [ 110.226309][ T5839] FAT-fs (loop3): Directory bread(block 69) failed [ 110.227595][ T5839] FAT-fs (loop3): Directory bread(block 70) failed [ 110.228726][ T5839] FAT-fs (loop3): Directory bread(block 71) failed [ 110.230059][ T5839] FAT-fs (loop3): Directory bread(block 72) failed [ 110.231214][ T5839] FAT-fs (loop3): Directory bread(block 73) failed [ 110.626536][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.702305][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.369735][ T5873] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 112.465269][ T5877] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 112.468667][ T5877] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 112.470370][ T5877] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 112.471752][ T5877] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 112.474064][ T5877] bond1: (slave geneve3): making interface the new active one [ 112.475987][ T5877] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 112.476332][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 112.597225][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 112.612228][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 112.720758][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.994883][ T5899] tipc: Started in network mode [ 112.995748][ T5899] tipc: Node identity 16dabaf2502e, cluster identity 4711 [ 112.996885][ T5899] tipc: Enabled bearer , priority 0 [ 113.008187][ T5899] device syzkaller0 entered promiscuous mode [ 114.137479][ T5912] loop2: detected capacity change from 0 to 256 [ 114.216102][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.252345][ T5912] FAT-fs (loop2): Directory bread(block 64) failed [ 114.253605][ T5912] FAT-fs (loop2): Directory bread(block 65) failed [ 114.254831][ T5912] FAT-fs (loop2): Directory bread(block 66) failed [ 114.255951][ T5912] FAT-fs (loop2): Directory bread(block 67) failed [ 114.257190][ T5912] FAT-fs (loop2): Directory bread(block 68) failed [ 114.258351][ T5912] FAT-fs (loop2): Directory bread(block 69) failed [ 114.259726][ T5912] FAT-fs (loop2): Directory bread(block 70) failed [ 114.260947][ T5912] FAT-fs (loop2): Directory bread(block 71) failed [ 114.262201][ T5912] FAT-fs (loop2): Directory bread(block 72) failed [ 114.263365][ T5912] FAT-fs (loop2): Directory bread(block 73) failed [ 114.672473][ T5899] tipc: Resetting bearer [ 114.696614][ T5898] tipc: Resetting bearer [ 115.157243][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.173835][ T7] tipc: Node number set to 1190443762 [ 115.748872][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.791261][ T5898] tipc: Disabling bearer [ 116.158093][ T5940] tipc: Started in network mode [ 116.159016][ T5940] tipc: Node identity 2a7c4028d71a, cluster identity 4711 [ 116.164199][ T5940] tipc: Enabled bearer , priority 0 [ 116.167929][ T5940] device syzkaller0 entered promiscuous mode [ 116.171275][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.215127][ T5940] tipc: Resetting bearer [ 116.220375][ T5938] tipc: Resetting bearer [ 116.274983][ T5938] tipc: Disabling bearer [ 116.285801][ T5946] loop4: detected capacity change from 0 to 256 [ 117.280136][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.585122][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.754622][ T5958] tipc: Enabled bearer , priority 0 [ 117.759318][ T5959] netlink: 'syz.3.399': attribute type 10 has an invalid length. [ 117.777393][ T5959] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.782661][ T5960] device syzkaller0 entered promiscuous mode [ 117.810558][ T5967] netlink: 'syz.3.402': attribute type 21 has an invalid length. [ 117.812033][ T5967] netlink: 128 bytes leftover after parsing attributes in process `syz.3.402'. [ 117.813680][ T5967] netlink: 'syz.3.402': attribute type 5 has an invalid length. [ 117.818150][ T5967] netlink: 'syz.3.402': attribute type 6 has an invalid length. [ 117.820265][ T5967] netlink: 3 bytes leftover after parsing attributes in process `syz.3.402'. [ 117.825904][ T5954] tipc: Resetting bearer [ 117.828136][ T5953] tipc: Resetting bearer [ 117.950583][ T5953] tipc: Disabling bearer [ 118.650180][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.028000][ T5990] syz.4.410 uses obsolete (PF_INET,SOCK_PACKET) [ 119.202228][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.203961][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.728276][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.730947][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.997353][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.320842][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.040732][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.968414][ T6032] loop0: detected capacity change from 0 to 4096 [ 121.985596][ T6032] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 122.090587][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.763826][ T6043] loop3: detected capacity change from 0 to 512 [ 122.766441][ T6043] EXT4-fs: Ignoring removed oldalloc option [ 122.768240][ T6043] EXT4-fs: Ignoring removed bh option [ 122.826264][ T4319] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 122.832771][ T6043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 122.836733][ T6043] System zones: 1-12 [ 122.855876][ T6043] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.424: corrupted in-inode xattr [ 122.935885][ T6043] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.424: couldn't read orphan inode 15 (err -117) [ 122.944822][ T6043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.617515][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.618888][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.648109][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 125.515838][ T6075] loop0: detected capacity change from 0 to 40427 [ 126.725848][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.726931][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.855256][ T6075] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 126.856648][ T6075] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 126.865263][ T6075] F2FS-fs (loop0): invalid crc value [ 127.224434][ T6075] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.336194][ T6075] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 127.337509][ T6075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.340173][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.361997][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.366191][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.299139][ T6092] loop2: detected capacity change from 0 to 32768 [ 128.309097][ T6102] tipc: Enabled bearer , priority 0 [ 128.311760][ T6102] device syzkaller0 entered promiscuous mode [ 128.324721][ T6092] XFS (loop2): Mounting V5 Filesystem [ 128.364961][ T6102] tipc: Resetting bearer [ 128.432146][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.434847][ T6092] XFS (loop2): Ending clean mount [ 128.434929][ T6101] tipc: Resetting bearer [ 128.443054][ T6092] XFS (loop2): Quotacheck needed: Please wait. [ 128.463133][ T6092] XFS (loop2): Quotacheck: Done. [ 128.817837][ T6101] tipc: Disabling bearer [ 128.935966][ T4326] XFS (loop2): Unmounting Filesystem [ 129.342536][ T6142] tipc: Started in network mode [ 129.343469][ T6142] tipc: Node identity d632e1ed39e1, cluster identity 4711 [ 129.345878][ T6142] tipc: Enabled bearer , priority 0 [ 129.347925][ T6142] device syzkaller0 entered promiscuous mode [ 129.407465][ T6142] tipc: Resetting bearer [ 129.413755][ T6140] tipc: Resetting bearer [ 129.820816][ T6140] tipc: Disabling bearer [ 129.830451][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.222578][ T6155] loop4: detected capacity change from 0 to 512 [ 130.237896][ T6155] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.290230][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 130.299090][ T6161] loop0: detected capacity change from 0 to 512 [ 130.317280][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'. [ 130.326730][ T6161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.353631][ T6161] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.683012][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.880321][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.956738][ T6155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.969265][ T6172] tipc: Enabled bearer , priority 0 [ 130.972368][ T6172] device syzkaller0 entered promiscuous mode [ 131.126841][ T6174] tipc: Resetting bearer [ 131.684522][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 131.685809][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 131.697687][ T6171] tipc: Resetting bearer [ 131.791501][ T6171] tipc: Disabling bearer [ 132.089206][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.120994][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.134501][ T6207] netlink: 52 bytes leftover after parsing attributes in process `syz.3.468'. [ 133.761138][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.794463][ T6224] syz.1.471 sent an empty control message without MSG_MORE. [ 134.160156][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.247321][ T6234] loop0: detected capacity change from 0 to 4096 [ 134.595265][ T6234] NILFS (loop0): invalid segment: Checksum error in segment payload [ 134.597929][ T6234] NILFS (loop0): trying rollback from an earlier position [ 134.643796][ T6230] loop3: detected capacity change from 0 to 32768 [ 134.661408][ T6230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.474 (6230) [ 134.662972][ T6234] NILFS (loop0): recovery complete [ 134.671531][ T6243] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.674205][ T6230] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.676047][ T6230] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 134.684018][ T6230] BTRFS error (device loop3): superblock checksum mismatch [ 134.688051][ T6230] BTRFS error (device loop3): open_ctree failed: -22 [ 135.203784][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.381238][ T5072] udevd[5072]: incorrect btrfs checksum on /dev/loop3 [ 136.235596][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 136.252922][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.652563][ T6269] loop0: detected capacity change from 0 to 2048 [ 136.655990][ T6269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.800571][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.925888][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.375380][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.401754][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.178890][ T6302] netlink: 160 bytes leftover after parsing attributes in process `syz.2.490'. [ 139.223983][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.225202][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.227201][ T6306] device bridge_slave_0 left promiscuous mode [ 139.228234][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.261043][ T6306] device bridge_slave_1 left promiscuous mode [ 139.262144][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.400898][ T6310] loop0: detected capacity change from 0 to 32768 [ 139.524099][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.152605][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.763546][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.777549][ T6306] bond0: (slave bond_slave_0): Releasing backup interface [ 140.824668][ T6306] bond0: (slave bond_slave_1): Releasing backup interface [ 140.881469][ T6306] team0: Port device team_slave_0 removed [ 140.893121][ T6306] team0: Port device team_slave_1 removed [ 140.952740][ T6311] netlink: 'syz.4.493': attribute type 10 has an invalid length. [ 140.996851][ T6311] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.301630][ T6336] ptrace attach of "./syz-executor exec"[4325] was attempted by ""[6336] [ 141.478294][ T6332] loop3: detected capacity change from 0 to 32768 [ 141.502644][ T6332] JBD2: Ignoring recovery information on journal [ 141.515123][ T6332] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 141.972711][ T6338] loop0: detected capacity change from 0 to 32768 [ 141.974211][ T6338] xfs: Unknown parameter 'uid>00000000000000000000' [ 141.980297][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.000128][ T6346] tipc: Enabling of bearer rejected, failed to enable media [ 142.019497][ T4322] ocfs2: Unmounting device (7,3) on (node local) [ 142.025632][ T6344] tipc: Enabled bearer , priority 0 [ 142.047110][ T6344] device syzkaller0 entered promiscuous mode [ 142.102093][ T6344] tipc: Resetting bearer [ 142.108547][ T6343] tipc: Resetting bearer [ 142.220453][ T6343] tipc: Disabling bearer [ 143.170271][ T6359] device batadv_slave_0 entered promiscuous mode [ 143.189137][ T6338] loop0: detected capacity change from 0 to 32768 [ 143.201179][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.209650][ T6338] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.496 (6338) [ 143.839299][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.873486][ T6361] loop2: detected capacity change from 0 to 32768 [ 143.954893][ T6369] syz.4.509 (6369): drop_caches: 2 [ 143.961474][ T6338] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.963128][ T6338] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 143.964590][ T6338] BTRFS info (device loop0): using free space tree [ 143.984204][ T6361] XFS (loop2): Mounting V5 Filesystem [ 144.028577][ T6361] XFS (loop2): Ending clean mount [ 144.561481][ T6338] BTRFS error (device loop0): open_ctree failed: -12 [ 145.128752][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.275722][ T4326] XFS (loop2): Unmounting Filesystem [ 145.749733][ T6412] loop3: detected capacity change from 0 to 32768 [ 145.758826][ T6412] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.513 (6412) [ 145.766391][ T6412] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 145.773707][ T6412] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 145.777511][ T6412] BTRFS info (device loop3): using free space tree [ 146.160875][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.167115][ T6412] BTRFS info (device loop3): enabling ssd optimizations [ 146.914786][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.951057][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.959347][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.960739][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 146.967526][ T6449] device bridge_slave_0 left promiscuous mode [ 146.968512][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.985248][ T4322] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 147.061744][ T6449] device bridge_slave_1 left promiscuous mode [ 147.062839][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.079312][ T6451] loop0: detected capacity change from 0 to 1024 [ 147.303968][ T5207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.322000][ T6449] bond0: (slave bond_slave_0): Releasing backup interface [ 147.334602][ T6451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.375291][ T6449] bond0: (slave bond_slave_1): Releasing backup interface [ 147.396710][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.398328][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.399699][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.405172][ T6449] bond0: (slave vxlan0): Releasing backup interface [ 147.433160][ T6449] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.434698][ T6449] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.436113][ T6449] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.437521][ T6449] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.493617][ T6449] bond1: (slave gretap1): Releasing active interface [ 147.534261][ T6449] bond2: (slave geneve3): Releasing active interface [ 147.581375][ T6449] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.582815][ T6449] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.584289][ T6449] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.585872][ T6449] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.626766][ T6466] device vlan0 entered promiscuous mode [ 147.637059][ T6476] tipc: Enabling of bearer rejected, failed to enable media [ 147.710607][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 147.876121][ T6482] loop3: detected capacity change from 0 to 40427 [ 147.890783][ T6488] loop4: detected capacity change from 0 to 1024 [ 147.907457][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 147.935826][ T6488] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.937729][ T6482] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 147.938722][ T6482] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 147.945425][ T6482] F2FS-fs (loop3): invalid crc value [ 147.958802][ T6493] tipc: Enabled bearer , priority 0 [ 147.963122][ T6493] device syzkaller0 entered promiscuous mode [ 147.966149][ T6482] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 147.977373][ T6488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.269994][ T6482] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 148.271166][ T6482] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 148.338155][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.015315][ T6503] tipc: Resetting bearer [ 149.018450][ T4533] tipc: Node number set to 4251336744 [ 149.026930][ T4322] syz-executor: attempt to access beyond end of device [ 149.026930][ T4322] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.038552][ T6492] tipc: Resetting bearer [ 149.064899][ T6509] loop2: detected capacity change from 0 to 256 [ 149.066419][ T6509] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.074427][ T6509] FAT-fs (loop2): Directory bread(block 64) failed [ 149.075468][ T6509] FAT-fs (loop2): Directory bread(block 65) failed [ 149.076488][ T6509] FAT-fs (loop2): Directory bread(block 66) failed [ 149.077573][ T6509] FAT-fs (loop2): Directory bread(block 67) failed [ 149.078706][ T6509] FAT-fs (loop2): Directory bread(block 68) failed [ 149.079826][ T6509] FAT-fs (loop2): Directory bread(block 69) failed [ 149.080974][ T6509] FAT-fs (loop2): Directory bread(block 70) failed [ 149.082062][ T6509] FAT-fs (loop2): Directory bread(block 71) failed [ 149.083245][ T6509] FAT-fs (loop2): Directory bread(block 72) failed [ 149.084340][ T6509] FAT-fs (loop2): Directory bread(block 73) failed [ 149.139629][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 149.193492][ T6512] loop4: detected capacity change from 0 to 1024 [ 149.194942][ T6512] EXT4-fs: Ignoring removed nobh option [ 149.195782][ T6512] EXT4-fs: Ignoring removed bh option [ 149.473345][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.511692][ T6512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 149.520686][ T6492] tipc: Disabling bearer [ 150.281347][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.288088][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 150.932493][ T6541] loop0: detected capacity change from 0 to 8 [ 151.068742][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.120421][ T6538] SQUASHFS error: Failed to read block 0x4de: -5 [ 151.121680][ T6538] SQUASHFS error: Failed to read block 0x4de: -5 [ 151.122859][ T6538] SQUASHFS error: Failed to read block 0x4de: -5 [ 151.124643][ T6538] SQUASHFS error: Failed to read block 0x4de: -5 [ 151.822958][ T6553] loop3: detected capacity change from 0 to 32768 [ 151.849737][ T6553] (syz.3.541,6553,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 151.854857][ T6553] (syz.3.541,6553,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 152.080468][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.223781][ T6553] JBD2: Ignoring recovery information on journal [ 152.392095][ T6553] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 152.723734][ T4322] ocfs2: Unmounting device (7,3) on (node local) [ 152.839957][ T6548] tipc: Enabling of bearer rejected, failed to enable media [ 152.863808][ T6561] device syzkaller0 entered promiscuous mode [ 152.867320][ T6561] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 152.981694][ T6576] tipc: Enabled bearer , priority 0 [ 153.422159][ T6586] input: syz1 as /devices/virtual/input/input2 [ 153.449634][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.467871][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.880392][ T6581] device syzkaller0 entered promiscuous mode [ 154.133260][ T4533] tipc: Node number set to 4023640557 [ 154.257220][ T6576] tipc: Resetting bearer [ 154.684232][ T6575] tipc: Resetting bearer [ 154.706443][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.060481][ T6575] tipc: Disabling bearer [ 155.762104][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.641327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.907875][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.909427][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.912343][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.918430][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.965868][ T6628] tipc: Enabling of bearer rejected, failed to enable media [ 156.971318][ T6627] loop2: detected capacity change from 0 to 1024 [ 156.991253][ T6627] ext4: Unknown parameter 'audit' [ 157.081271][ T4330] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.869364][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 158.187519][ T6660] Illegal XDP return value 4294967274 on prog (id 29) dev N/A, expect packet loss! [ 158.890077][ T4656] net_ratelimit: 1 callbacks suppressed [ 158.890090][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.259235][ T4328] Bluetooth: hci2: command 0x0406 tx timeout [ 159.260373][ T4328] Bluetooth: hci1: command 0x0406 tx timeout [ 159.261316][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 159.379310][ T6671] loop3: detected capacity change from 0 to 64 [ 159.655247][ T6670] syz.3.567: attempt to access beyond end of device [ 159.655247][ T6670] loop3: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 159.657425][ T6670] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 159.658700][ T6670] syz.3.567: attempt to access beyond end of device [ 159.658700][ T6670] loop3: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 159.660882][ T6670] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 159.662262][ T6670] syz.3.567: attempt to access beyond end of device [ 159.662262][ T6670] loop3: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 159.663434][ T6674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.664219][ T6670] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 159.665623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.666759][ T6670] syz.3.567: attempt to access beyond end of device [ 159.666759][ T6670] loop3: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 159.668304][ T6674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.670085][ T6670] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 159.672694][ T6670] syz.3.567: attempt to access beyond end of device [ 159.672694][ T6670] loop3: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 159.674654][ T6670] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 159.674913][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.675995][ T6670] syz.3.567: attempt to access beyond end of device [ 159.675995][ T6670] loop3: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 159.679127][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.680055][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.680546][ T6670] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 159.682271][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.682893][ T6670] syz.3.567: attempt to access beyond end of device [ 159.682893][ T6670] loop3: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 159.684311][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.686132][ T6670] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 159.687419][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.688526][ T6670] syz.3.567: attempt to access beyond end of device [ 159.688526][ T6670] loop3: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 159.691666][ T6670] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 159.695004][ T6670] syz.3.567: attempt to access beyond end of device [ 159.695004][ T6670] loop3: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 159.743123][ T6663] netlink: 'syz.2.570': attribute type 10 has an invalid length. [ 161.994028][ T6707] overlayfs: failed to clone upperpath [ 162.288110][ T6711] tipc: Enabled bearer , priority 0 [ 162.289677][ T6711] device syzkaller0 entered promiscuous mode [ 162.298470][ T6711] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 163.448458][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.450069][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.553692][ T6728] sctp: [Deprecated]: syz.0.584 (pid 6728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.553692][ T6728] Use struct sctp_sack_info instead [ 163.724088][ T6714] tipc: Resetting bearer [ 164.563698][ T4327] net_ratelimit: 21 callbacks suppressed [ 164.563711][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.665926][ T6714] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.667444][ T6714] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.668791][ T6714] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.670384][ T6714] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.821608][ T6718] tipc: Resetting bearer [ 164.868020][ T6709] tipc: Resetting bearer [ 164.869638][ T6741] loop2: detected capacity change from 0 to 736 [ 165.299981][ T6709] tipc: Disabling bearer [ 165.306237][ T6729] tipc: Enabled bearer , priority 0 [ 165.309269][ T6730] device syzkaller0 entered promiscuous mode [ 165.417363][ T6761] loop3: detected capacity change from 0 to 256 [ 165.442168][ T6761] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 165.445845][ T6761] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 165.447771][ T6761] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 165.449008][ T6761] UDF-fs: Scanning with blocksize 512 failed [ 165.451252][ T6761] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 165.453774][ T6761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.476735][ T4328] Bluetooth: hci2: failed to read key size for handle 201 [ 165.502575][ T6734] tipc: Resetting bearer [ 165.600101][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.520076][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.522518][ T4534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.519997][ T4328] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 169.521537][ T4328] Bluetooth: hci2: Injecting HCI hardware error event [ 169.524541][ T4337] Bluetooth: hci2: hardware error 0x00 [ 172.640096][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.642819][ T221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.645331][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.647033][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.680050][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.681542][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.680073][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.479955][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.760195][ T221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.715419][ T4328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.717672][ T4328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.719263][ T4328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.721649][ T4328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.723020][ T4328] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 178.724678][ T4328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.264191][ T4320] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.267022][ T4320] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.269741][ T4320] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.271737][ T4320] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.273113][ T4320] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.274533][ T4320] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 180.275759][ T4320] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.285757][ T4320] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.287624][ T4320] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.289094][ T4320] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.291364][ T4320] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 180.292594][ T4320] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.715727][ T4320] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 180.718156][ T4320] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 180.720486][ T4320] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 180.721923][ T4320] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 180.723745][ T4320] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 180.724856][ T4320] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 182.212488][ T4320] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 182.214833][ T4320] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 182.216528][ T4320] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 182.217995][ T4320] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 182.219407][ T4320] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 182.221045][ T4320] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 183.520074][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.521877][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.559968][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.561312][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.361355][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.362485][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.280196][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.560095][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.119845][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz.4.583:6734] [ 192.121191][ C0] Modules linked in: [ 192.121814][ C0] irq event stamp: 1259863 [ 192.122538][ C0] hardirqs last enabled at (1259862): [] timekeeping_get_ns+0x124/0x3b8 [ 192.124300][ C0] hardirqs last disabled at (1259863): [] el1_interrupt+0x24/0x54 [ 192.125850][ C0] softirqs last enabled at (1342): [] tipc_disc_reset+0x1dc/0x2f8 [ 192.127431][ C0] softirqs last disabled at (1344): [] local_bh_disable+0x10/0x34 [ 192.129006][ C0] CPU: 0 PID: 6734 Comm: syz.4.583 Not tainted 6.1.147-syzkaller #0 [ 192.130371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 192.132069][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 192.133358][ C0] pc : cake_heapify+0xe8/0x530 [ 192.134149][ C0] lr : cake_heapify+0x5c/0x530 [ 192.134906][ C0] sp : ffff8000218a6a50 [ 192.135589][ C0] x29: ffff8000218a6a60 x28: 1fffe0001a5a385b x27: ffff0000faf00000 [ 192.137002][ C0] x26: 000000000004c6bd x25: ffff0000d2d1c2d8 x24: 0000000000000fdb [ 192.138338][ C0] x23: dfff800000000000 x22: ffff0000faf00000 x21: ffff0000faf6125c [ 192.139667][ C0] x20: ffff0000d2d182d0 x19: 0000000000000fdb x18: 00000000a6c8d5fe SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 192.141037][ C0] x17: ffff8000181e7000 x16: ffff8000082d2374 x15: ffff800017cc7fc0 [ 192.142423][ C0] x14: ffff0000ddfba658 x13: 1ffff00002a160b1 x12: 0000000000ff0100 [ 192.143783][ C0] x11: ff0080000ffb9894 x10: 00000000000198d0 x9 : 0000000000000007 [ 192.145131][ C0] x8 : 0000000000000000 x7 : ffff8000083b9874 x6 : 0000000000000000 [ 192.146452][ C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 192.147760][ C0] x2 : 0000000000000002 x1 : 0000000000000fdb x0 : 0000000000002000 [ 192.149106][ C0] Call trace: [ 192.149644][ C0] cake_heapify+0xe8/0x530 [ 192.150389][ C0] cake_enqueue+0x333c/0x6880 [ 192.151171][ C0] netem_dequeue+0xa74/0x107c [ 192.151911][ C0] __qdisc_run+0x1c4/0x1368 [ 192.152618][ C0] __dev_queue_xmit+0xc18/0x309c [ 192.153458][ C0] tipc_l2_send_msg+0x29c/0x35c [ 192.154212][ C0] tipc_bearer_xmit_skb+0x244/0x384 [ 192.154990][ C0] tipc_disc_reset+0x200/0x2f8 [ 192.155756][ C0] tipc_reset_bearer+0x5c/0x84 [ 192.156491][ C0] tipc_l2_device_event+0x498/0x778 [ 192.157367][ C0] raw_notifier_call_chain+0xd4/0x164 [ 192.158269][ C0] call_netdevice_notifiers_mtu+0x118/0x19c [ 192.159257][ C0] dev_set_mtu_ext+0x350/0x514 [ 192.159998][ C0] dev_set_mtu+0x50/0xe8 [ 192.160685][ C0] dev_ifsioc+0x250/0xed0 [ 192.161357][ C0] dev_ioctl+0x4c8/0xc8c [ 192.162069][ C0] sock_do_ioctl+0x18c/0x240 [ 192.162842][ C0] sock_ioctl+0x5c4/0x840 [ 192.163621][ C0] __arm64_sys_ioctl+0x14c/0x1c8 [ 192.164453][ C0] invoke_syscall+0x98/0x2bc [ 192.165238][ C0] el0_svc_common+0x138/0x258 [ 192.166003][ C0] do_el0_svc+0x58/0x13c [ 192.166711][ C0] el0_svc+0x58/0x138 [ 192.167375][ C0] el0t_64_sync_handler+0x84/0xf0 [ 192.168181][ C0] el0t_64_sync+0x18c/0x190 [ 192.168938][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 192.169948][ C0] CPU: 0 PID: 6734 Comm: syz.4.583 Tainted: G L 6.1.147-syzkaller #0 [ 192.171515][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 192.173187][ C0] Call trace: [ 192.173696][ C0] dump_backtrace+0x1c8/0x1f4 [ 192.174434][ C0] show_stack+0x2c/0x3c [ 192.175125][ C0] __dump_stack+0x30/0x40 [ 192.175819][ C0] dump_stack_lvl+0xf8/0x160 [ 192.176504][ C0] dump_stack+0x1c/0x5c [ 192.177197][ C0] panic+0x2e0/0x79c [ 192.177880][ C0] softlockup_fn+0x0/0x120 [ 192.178655][ C0] __hrtimer_run_queues+0x420/0xc64 [ 192.179533][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 192.180344][ C0] arch_timer_handler_virt+0x74/0x88 [ 192.181171][ C0] handle_percpu_devid_irq+0x174/0x34c [ 192.182083][ C0] generic_handle_domain_irq+0xe0/0x140 [ 192.182994][ C0] gic_handle_irq+0x70/0x1e4 [ 192.183717][ C0] call_on_irq_stack+0x24/0x30 [ 192.184475][ C0] do_interrupt_handler+0xd4/0x138 [ 192.185269][ C0] el1_interrupt+0x34/0x54 [ 192.185953][ C0] el1h_64_irq_handler+0x18/0x24 [ 192.186740][ C0] el1h_64_irq+0x64/0x68 [ 192.187405][ C0] cake_heapify+0xe8/0x530 [ 192.188136][ C0] cake_enqueue+0x333c/0x6880 [ 192.188924][ C0] netem_dequeue+0xa74/0x107c [ 192.189692][ C0] __qdisc_run+0x1c4/0x1368 [ 192.190441][ C0] __dev_queue_xmit+0xc18/0x309c [ 192.191283][ C0] tipc_l2_send_msg+0x29c/0x35c [ 192.192075][ C0] tipc_bearer_xmit_skb+0x244/0x384 [ 192.192909][ C0] tipc_disc_reset+0x200/0x2f8 [ 192.193653][ C0] tipc_reset_bearer+0x5c/0x84 [ 192.194411][ C0] tipc_l2_device_event+0x498/0x778 [ 192.195273][ C0] raw_notifier_call_chain+0xd4/0x164 [ 192.196147][ C0] call_netdevice_notifiers_mtu+0x118/0x19c [ 192.197188][ C0] dev_set_mtu_ext+0x350/0x514 [ 192.197983][ C0] dev_set_mtu+0x50/0xe8 [ 192.198636][ C0] dev_ifsioc+0x250/0xed0 [ 192.199347][ C0] dev_ioctl+0x4c8/0xc8c [ 192.200035][ C0] sock_do_ioctl+0x18c/0x240 [ 192.200780][ C0] sock_ioctl+0x5c4/0x840 [ 192.201457][ C0] __arm64_sys_ioctl+0x14c/0x1c8 [ 192.202307][ C0] invoke_syscall+0x98/0x2bc [ 192.203057][ C0] el0_svc_common+0x138/0x258 [ 192.203800][ C0] do_el0_svc+0x58/0x13c [ 192.204483][ C0] el0_svc+0x58/0x138 [ 192.205165][ C0] el0t_64_sync_handler+0x84/0xf0 [ 192.205996][ C0] el0t_64_sync+0x18c/0x190 [ 192.206737][ C0] SMP: stopping secondary CPUs [ 192.207549][ C0] Kernel Offset: disabled [ 192.208278][ C0] CPU features: 0x080000,000f0097,a65bfea7 [ 192.209226][ C0] Memory Limit: none [ 192.220359][ C0] [ 192.220698][ C0] ================================ [ 192.221449][ C0] WARNING: inconsistent lock state [ 192.222193][ C0] 6.1.147-syzkaller #0 Tainted: G L [ 192.223130][ C0] -------------------------------- [ 192.223869][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 192.224897][ C0] syz.4.583/6734 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 192.225832][ C0] ffff8000150f13d8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 192.227363][ C0] {HARDIRQ-ON-W} state was registered at: [ 192.228235][ C0] lock_acquire+0x20c/0x644 [ 192.228957][ C0] _raw_spin_lock+0x54/0x6c [ 192.229657][ C0] efi_call_rts+0x260/0x9f4 [ 192.230336][ C0] process_one_work+0x7f4/0x13a8 [ 192.231152][ C0] worker_thread+0x8c8/0xfbc [ 192.231932][ C0] kthread+0x250/0x2d8 [ 192.232645][ C0] ret_from_fork+0x10/0x20 [ 192.233380][ C0] irq event stamp: 1259863 [ 192.234079][ C0] hardirqs last enabled at (1259862): [] timekeeping_get_ns+0x124/0x3b8 [ 192.235627][ C0] hardirqs last disabled at (1259863): [] el1_interrupt+0x24/0x54 [ 192.236997][ C0] softirqs last enabled at (1342): [] tipc_disc_reset+0x1dc/0x2f8 [ 192.238485][ C0] softirqs last disabled at (1344): [] local_bh_disable+0x10/0x34 [ 192.239876][ C0] [ 192.239876][ C0] other info that might help us debug this: [ 192.241095][ C0] Possible unsafe locking scenario: [ 192.241095][ C0] [ 192.242194][ C0] CPU0 [ 192.242667][ C0] ---- [ 192.243162][ C0] lock(efi_rt_lock); [ 192.243756][ C0] [ 192.244271][ C0] lock(efi_rt_lock); [ 192.244889][ C0] [ 192.244889][ C0] *** DEADLOCK *** [ 192.244889][ C0] [ 192.246060][ C0] 6 locks held by syz.4.583/6734: [ 192.246805][ C0] #0: ffff80001771f548 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 192.248271][ C0] #1: ffff800015286e00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 192.249854][ C0] #2: ffff800015286e60 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 192.251445][ C0] #3: ffff0000f4c1a108 (&sch->root_lock_key#371){+...}-{2:2}, at: __dev_queue_xmit+0x974/0x309c [ 192.253133][ C0] #4: ffff800015286e00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 192.254615][ C0] #5: ffff8000171528a8 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x728 [ 192.256244][ C0] [ 192.256244][ C0] stack backtrace: [ 192.257233][ C0] CPU: 0 PID: 6734 Comm: syz.4.583 Tainted: G L 6.1.147-syzkaller #0 [ 192.258802][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 192.260457][ C0] Call trace: [ 192.260990][ C0] dump_backtrace+0x1c8/0x1f4 [ 192.261759][ C0] show_stack+0x2c/0x3c [ 192.262420][ C0] __dump_stack+0x30/0x40 [ 192.263117][ C0] dump_stack_lvl+0xf8/0x160 [ 192.263866][ C0] dump_stack+0x1c/0x5c [ 192.264568][ C0] print_usage_bug+0x4c0/0x6d8 [ 192.265331][ C0] mark_lock_irq+0x788/0x9e4 [ 192.266095][ C0] mark_lock+0x224/0x320 [ 192.266768][ C0] __lock_acquire+0xd2c/0x6544 [ 192.267569][ C0] lock_acquire+0x20c/0x644 [ 192.268335][ C0] _raw_spin_lock+0x54/0x6c [ 192.269121][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 192.270182][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 192.271094][ C0] efi_pstore_write+0x26c/0x358 [ 192.271942][ C0] pstore_dump+0x504/0x728 [ 192.272695][ C0] kmsg_dump+0x170/0x260 [ 192.273390][ C0] panic+0x36c/0x79c [ 192.274046][ C0] softlockup_fn+0x0/0x120 [ 192.274776][ C0] __hrtimer_run_queues+0x420/0xc64 [ 192.275672][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 192.276440][ C0] arch_timer_handler_virt+0x74/0x88 [ 192.277299][ C0] handle_percpu_devid_irq+0x174/0x34c [ 192.278219][ C0] generic_handle_domain_irq+0xe0/0x140 [ 192.279157][ C0] gic_handle_irq+0x70/0x1e4 [ 192.279941][ C0] call_on_irq_stack+0x24/0x30 [ 192.280758][ C0] do_interrupt_handler+0xd4/0x138 [ 192.281605][ C0] el1_interrupt+0x34/0x54 [ 192.282326][ C0] el1h_64_irq_handler+0x18/0x24 [ 192.283091][ C0] el1h_64_irq+0x64/0x68 [ 192.283720][ C0] cake_heapify+0xe8/0x530 [ 192.284418][ C0] cake_enqueue+0x333c/0x6880 [ 192.285211][ C0] netem_dequeue+0xa74/0x107c [ 192.286017][ C0] __qdisc_run+0x1c4/0x1368 [ 192.286742][ C0] __dev_queue_xmit+0xc18/0x309c [ 192.287525][ C0] tipc_l2_send_msg+0x29c/0x35c [ 192.288295][ C0] tipc_bearer_xmit_skb+0x244/0x384 [ 192.289136][ C0] tipc_disc_reset+0x200/0x2f8 [ 192.289885][ C0] tipc_reset_bearer+0x5c/0x84 [ 192.290658][ C0] tipc_l2_device_event+0x498/0x778 [ 192.291477][ C0] raw_notifier_call_chain+0xd4/0x164 [ 192.292342][ C0] call_netdevice_notifiers_mtu+0x118/0x19c [ 192.293369][ C0] dev_set_mtu_ext+0x350/0x514 [ 192.294128][ C0] dev_set_mtu+0x50/0xe8 [ 192.294814][ C0] dev_ifsioc+0x250/0xed0 [ 192.295514][ C0] dev_ioctl+0x4c8/0xc8c [ 192.296187][ C0] sock_do_ioctl+0x18c/0x240 [ 192.296917][ C0] sock_ioctl+0x5c4/0x840 [ 192.297587][ C0] __arm64_sys_ioctl+0x14c/0x1c8 [ 192.298386][ C0] invoke_syscall+0x98/0x2bc [ 192.299131][ C0] el0_svc_common+0x138/0x258 [ 192.299880][ C0] do_el0_svc+0x58/0x13c [ 192.300531][ C0] el0_svc+0x58/0x138 [ 192.301178][ C0] el0t_64_sync_handler+0x84/0xf0 [ 192.302042][ C0] el0t_64_sync+0x18c/0x190 [ 192.544391][ C0] Rebooting in 86400 seconds..