last executing test programs: 2m59.476584555s ago: executing program 4 (id=96): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$netlink(0x10, 0x3, 0xa) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x6, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x0) 2m58.375763443s ago: executing program 4 (id=97): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 2m58.214359517s ago: executing program 4 (id=100): syz_clone3(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x1, 0x0, @loopback, @local}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m57.682728541s ago: executing program 4 (id=103): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 2m52.754943248s ago: executing program 4 (id=113): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000), 0x0) msgget$private(0x0, 0x3ac) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x7ffc, 0x8, 0x300, 0xa691}, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0002000000060011004e220000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 2m51.410311582s ago: executing program 4 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff4affff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace35ee8b12c00", 0x48}], 0x1) 2m51.220268207s ago: executing program 32 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff4affff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace35ee8b12c00", 0x48}], 0x1) 8.001648854s ago: executing program 5 (id=631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x3, 0x6, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8164, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.634308294s ago: executing program 1 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84e, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 7.309672492s ago: executing program 5 (id=636): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0xd5}, 0x90) 7.250278953s ago: executing program 2 (id=637): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x296, &(0x7f00000008c0)="$eJzs281OE20YxvGL8vHy8UL7vigKxnhHN7qZQD0BGwKJsYkGqfEjMRnsVJuWlnQaTI0Rdm49DuLSnYnxBNh4BC7csXHJwjiGdoAWB4ImdhT/v83czdNr+kzvZ5pn0dm6+2q5VPCdgltXosfUJw1oW0opoV619ITHRLMeULt1XRnPfjx/+979G5lsdm7BbD6zeDVtZmMX3j19/vri+/rInTdjb//RZurh1uf0p82Jzcmtr4tPir4VfatU6+baUrVad5fKnuWLfskxu1X2XN+zYsX3ah3jhXJ1ZaVhbiU/OrxS83zf3ErDSl7D6lWr1xrmPnaLFXMcx0aHhaP1xz0BdEWtlnFnJU19N5LbiGVCAAAgVhH7//VY9v/XwhOy/++i3MbCgpuJexb4tXb2/w/C+7cT+38AAAAAAAAAAAAAAAAAAAAAAP4E20GQDIIguXvsl5pP+ATh6yFJw5LWwvePShqTlJSUkvSfpP8ljUs6Jem0pAlJZySdlTTZdq6YLxURDut/74H+j0j6l/6fONvB7vN8R9//9P9kOu7vP/0/mdoe3B2Ull+u5lZzrWNrPFNQUWV5mlZSX5q9DLXq+evZuWlrSunc8lqYX1vN9XbmZ5TcWTBR+ZlW3jrziea628unldxZYFH5dGR+UJcvteUdJfXhkaoqK99ck/v5FzNmszezu/m97yYfV1O6yLE9kf1znMPGW/ljrI9gOrI/fZrqi/faIfmNZyW3XPZqXSyG4vhQip8s9HtMg6LbfcdfYL/pcc8EAAAAAAAAAAAAAAAAAPAjuvF3wrivEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAg74FAAD//x58Ufo=") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 6.640535669s ago: executing program 3 (id=639): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000720, 0xee01, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r4 = accept$alg(r1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) 6.558479851s ago: executing program 0 (id=641): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2cf2) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x10, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000010, r1, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) fanotify_mark(r0, 0x7e, 0x40000018, r1, 0x0) 6.558196681s ago: executing program 1 (id=642): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x296, &(0x7f00000008c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 5.913321978s ago: executing program 5 (id=643): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x1) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 5.790969381s ago: executing program 0 (id=645): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 5.790661851s ago: executing program 2 (id=646): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) landlock_restrict_self(r1, 0xa) 5.708114033s ago: executing program 3 (id=647): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.524171778s ago: executing program 1 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x3, 0x6, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8164, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5.353127292s ago: executing program 0 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r5, &(0x7f0000004440)=""/4096, 0x1000) 4.634797741s ago: executing program 3 (id=650): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0xd5}, 0x90) 4.198702102s ago: executing program 1 (id=651): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_open(0x0, 0xc0, 0x11b, 0x0) r1 = open(0x0, 0x109240, 0x145) r2 = creat(0x0, 0x0) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x2b) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000053d2) close(r0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 4.198530892s ago: executing program 5 (id=652): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) listen(0xffffffffffffffff, 0xfffffffd) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0xfff) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4.005082727s ago: executing program 0 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84e, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 3.350794893s ago: executing program 3 (id=654): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x3, 0x48000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0xd5}, 0x90) 2.227073082s ago: executing program 2 (id=655): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x296, &(0x7f00000008c0)="$eJzs281OE20YxvGL8vHy8UL7vigKxnhHN7qZQD0BGwKJsYkGqfEjMRnsVJuWlnQaTI0Rdm49DuLSnYnxBNh4BC7csXHJwjiGdoAWB4ImdhT/v83czdNr+kzvZ5pn0dm6+2q5VPCdgltXosfUJw1oW0opoV619ITHRLMeULt1XRnPfjx/+979G5lsdm7BbD6zeDVtZmMX3j19/vri+/rInTdjb//RZurh1uf0p82Jzcmtr4tPir4VfatU6+baUrVad5fKnuWLfskxu1X2XN+zYsX3ah3jhXJ1ZaVhbiU/OrxS83zf3ErDSl7D6lWr1xrmPnaLFXMcx0aHhaP1xz0BdEWtlnFnJU19N5LbiGVCAAAgVhH7//VY9v/XwhOy/++i3MbCgpuJexb4tXb2/w/C+7cT+38AAAAAAAAAAAAAAAAAAAAAAP4E20GQDIIguXvsl5pP+ATh6yFJw5LWwvePShqTlJSUkvSfpP8ljUs6Jem0pAlJZySdlTTZdq6YLxURDut/74H+j0j6l/6fONvB7vN8R9//9P9kOu7vP/0/mdoe3B2Ull+u5lZzrWNrPFNQUWV5mlZSX5q9DLXq+evZuWlrSunc8lqYX1vN9XbmZ5TcWTBR+ZlW3jrziea628unldxZYFH5dGR+UJcvteUdJfXhkaoqK99ck/v5FzNmszezu/m97yYfV1O6yLE9kf1znMPGW/ljrI9gOrI/fZrqi/faIfmNZyW3XPZqXSyG4vhQip8s9HtMg6LbfcdfYL/pcc8EAAAAAAAAAAAAAAAAAPAjuvF3wrivEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAg74FAAD//x58Ufo=") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 1.663789657s ago: executing program 5 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442da", 0x3a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.290804017s ago: executing program 2 (id=657): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2cf2) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x10, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000010, r1, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) fanotify_mark(r0, 0x7e, 0x40000018, r1, 0x0) 1.290559106s ago: executing program 3 (id=658): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x296, &(0x7f00000008c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 1.289979166s ago: executing program 0 (id=667): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) listen(0xffffffffffffffff, 0xfffffffd) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0xfff) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.289350817s ago: executing program 1 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700), 0x0) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/31, 0x1f) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) 1.012850424s ago: executing program 0 (id=660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 462.758398ms ago: executing program 2 (id=661): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 241.746444ms ago: executing program 1 (id=662): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x1) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 121.526507ms ago: executing program 3 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x3, 0x6, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8164, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 28.393799ms ago: executing program 2 (id=664): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0xd5}, 0x90) 0s ago: executing program 5 (id=665): open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x92, 0x5, r1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): e0: port 2(bridge_slave_1) entered disabled state [ 69.524718][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.559776][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 69.611815][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.621187][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.628629][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.636974][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.651438][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.658631][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.667361][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.688271][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.730110][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.737446][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.746132][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.777290][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.784398][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.793123][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.800613][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.808407][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.816652][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.826099][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.835272][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.842472][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.850618][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.864494][ T4185] team0: Port device team_slave_0 added [ 69.893086][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.915649][ T4185] team0: Port device team_slave_1 added [ 69.929693][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.953363][ T4184] team0: Port device team_slave_0 added [ 69.968670][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.979882][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.991131][ T4184] team0: Port device team_slave_1 added [ 70.017123][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.045489][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.052936][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.061352][ T4189] device bridge_slave_0 entered promiscuous mode [ 70.070013][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.077289][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.103366][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.117348][ T4194] team0: Port device team_slave_0 added [ 70.123592][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.130590][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.156923][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.188110][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.195102][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.221314][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.235281][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.242572][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.251068][ T4189] device bridge_slave_1 entered promiscuous mode [ 70.260306][ T4194] team0: Port device team_slave_1 added [ 70.268865][ T4188] team0: Port device team_slave_0 added [ 70.291917][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.299256][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.325730][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.357310][ T4188] team0: Port device team_slave_1 added [ 70.372063][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.398755][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.409890][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.424962][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.449563][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.463846][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.490377][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.522873][ T4189] team0: Port device team_slave_0 added [ 70.535931][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.542919][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.569225][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.581247][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.588504][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.614648][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.633055][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.640808][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.667311][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.680661][ T4189] team0: Port device team_slave_1 added [ 70.715170][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.722351][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.729491][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.737753][ T4184] Cannot create hsr debugfs directory [ 70.798577][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.809685][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.816426][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.824021][ T4194] Cannot create hsr debugfs directory [ 70.838317][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.845330][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.871451][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.887164][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.894177][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.920483][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.952252][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.959160][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.966068][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.973785][ T4188] Cannot create hsr debugfs directory [ 71.016745][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 71.023547][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 71.033508][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 71.040041][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 71.065770][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 71.102717][ T4189] device hsr_slave_0 entered promiscuous mode [ 71.110373][ T4189] device hsr_slave_1 entered promiscuous mode [ 71.117674][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.125268][ T4189] Cannot create hsr debugfs directory [ 71.357386][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.374769][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.384742][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.394925][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.436054][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.456540][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.480842][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.492127][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.537668][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.550134][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.576239][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.594993][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.625094][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.651328][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.668094][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.683685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.693290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.730970][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.746893][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.761236][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.802112][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.809435][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.820745][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.831260][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.838746][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.857708][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.893718][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.903074][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.913208][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.922552][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.931667][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.938838][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.949567][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.960236][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.969639][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.980024][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.989182][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.997940][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.006217][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.028379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.037626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.049345][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.062439][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.079271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.089235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.102688][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.129605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.139338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.174365][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.184281][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.194332][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.201493][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.212668][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.224620][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.233610][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.240875][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.250022][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.260256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.271760][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.308161][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.336264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.351531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.361768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.371558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.384086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.394562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.409533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.421172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.441623][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.455651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.474081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.490910][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.500953][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.511429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.522540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.569155][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.578869][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.595116][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.602318][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.619497][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.633092][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.642918][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.650182][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.666170][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.682376][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.691453][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.727918][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.735364][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.746460][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.754470][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.767183][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.776985][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.784690][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.796829][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.812139][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.837819][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.847813][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.858741][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.870301][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.878823][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.888053][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.897006][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.927364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.936544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.945115][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.952249][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.962975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.972116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.982703][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.989869][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.997710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.006987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.018604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.027205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.036434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.047899][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.060665][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.079686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.089557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.099778][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 73.106980][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 73.113112][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 73.120441][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 73.134512][ T4185] device veth0_vlan entered promiscuous mode [ 73.141194][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 73.150096][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.162885][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.174982][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.182150][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.198542][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.212831][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.223139][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.237831][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.262484][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.281097][ T4185] device veth1_vlan entered promiscuous mode [ 73.295875][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.304929][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.321077][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.332786][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.347168][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.357653][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.366325][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.373418][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.382189][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.391320][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.400816][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.411400][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.428514][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.440050][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.449479][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.482320][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.490509][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.500457][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.509195][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.518078][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.529311][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.538239][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.560065][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.572339][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.584119][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.592541][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.601223][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.611434][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.621809][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.630794][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.658385][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.669329][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.684792][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.708426][ T4185] device veth0_macvtap entered promiscuous mode [ 73.728018][ T4184] device veth0_vlan entered promiscuous mode [ 73.734796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.754452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.764311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.773494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.784811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.799156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.812393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.821744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.830397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.848940][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.878488][ T4185] device veth1_macvtap entered promiscuous mode [ 73.893711][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.918098][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.927860][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.949820][ T4184] device veth1_vlan entered promiscuous mode [ 73.998449][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.012213][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.021587][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.030379][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.039480][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.049662][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.065299][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.077369][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.085384][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.098028][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.108887][ T4194] device veth0_vlan entered promiscuous mode [ 74.127545][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.144898][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.163949][ T4184] device veth0_macvtap entered promiscuous mode [ 74.177923][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.187831][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.204413][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.220021][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.231918][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.243689][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.252815][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.261347][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.269663][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.283658][ T4184] device veth1_macvtap entered promiscuous mode [ 74.320806][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.331783][ T4194] device veth1_vlan entered promiscuous mode [ 74.352207][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.364393][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.377563][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.411924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.427712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.441402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.450266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.459275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.474634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.491192][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.507554][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.523555][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.537826][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.575839][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.584619][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.602841][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.613478][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.652547][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.662495][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.671509][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.681147][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.700768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.712616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.736376][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.744580][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.782772][ T4194] device veth0_macvtap entered promiscuous mode [ 74.798318][ T4188] device veth0_vlan entered promiscuous mode [ 74.829028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.845538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.854172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.870075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.880960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.889183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.904630][ T4194] device veth1_macvtap entered promiscuous mode [ 74.924712][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.936135][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.946987][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.957849][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.969650][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.988743][ T4188] device veth1_vlan entered promiscuous mode [ 75.007639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.028731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.046435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.055376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.077268][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.088162][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.101373][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.110146][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.120446][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.131160][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.142957][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.171137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.176461][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 75.186716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.195462][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 75.202240][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 75.205426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.216945][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 75.217061][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 75.249168][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.260404][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.271176][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.280250][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.316516][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.324390][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.346884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.361081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.371541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.403220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.488941][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.501357][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.522805][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.532207][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.541380][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.550620][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.560849][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.572794][ T4188] device veth0_macvtap entered promiscuous mode [ 75.592904][ T4189] device veth0_vlan entered promiscuous mode [ 75.604746][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.614558][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.623926][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.638104][ T4188] device veth1_macvtap entered promiscuous mode [ 75.673730][ T4189] device veth1_vlan entered promiscuous mode [ 75.677558][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.692720][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.756074][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.781145][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.793478][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.811403][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.825427][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.844581][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.867356][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.902228][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.021801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.039975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.051634][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.065460][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.551796][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.640224][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.653301][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.670472][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.683698][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.700012][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.720426][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.743668][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.755099][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.795121][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.812701][ T4275] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.822100][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.865870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.874648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.883390][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.891237][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.962446][ T4279] loop0: detected capacity change from 0 to 2048 [ 76.963867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.990158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.000580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.017411][ T4189] device veth0_macvtap entered promiscuous mode [ 77.032757][ T4189] device veth1_macvtap entered promiscuous mode [ 77.072047][ T4279] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.227566][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.249814][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.272250][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.286902][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.302448][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.315399][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.335728][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.354732][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.369080][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.387319][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 77.393552][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 77.399939][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 77.406519][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 77.412815][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 77.455991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.466499][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.475462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.485715][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.493389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.556520][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.568174][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.579608][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.590292][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.609367][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.620421][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.644109][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.655640][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.673381][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.686218][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.694810][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.705388][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.720192][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.730699][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.744758][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.753091][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.768835][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.783774][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.888533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.001966][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.025956][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.045935][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.137670][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.198558][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.363701][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.298406][ T4311] capability: warning: `syz.0.13' uses deprecated v2 capabilities in a way that may be insecure [ 79.686008][ T4239] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.852558][ T4330] tipc: Started in network mode [ 79.871637][ T4332] loop0: detected capacity change from 0 to 512 [ 79.872078][ T4330] tipc: Node identity e6413fba714e, cluster identity 4711 [ 79.897856][ T4330] tipc: Enabled bearer , priority 0 [ 79.913796][ T4332] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.945879][ T4239] usb 3-1: Using ep0 maxpacket: 16 [ 79.951491][ T4333] device syzkaller0 entered promiscuous mode [ 80.002902][ T4330] tipc: Resetting bearer [ 80.033301][ T4329] tipc: Resetting bearer [ 80.057101][ T4329] tipc: Disabling bearer [ 80.067465][ T4239] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 80.076899][ T4239] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 80.088785][ T4239] usb 3-1: config 0 has no interface number 0 [ 80.095861][ T4239] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.426152][ T4239] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 80.436125][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.444626][ T4239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.453722][ T4239] usb 3-1: Product: syz [ 81.211133][ T4239] usb 3-1: Manufacturer: syz [ 81.217004][ T4239] usb 3-1: SerialNumber: syz [ 81.226332][ T4239] usb 3-1: config 0 descriptor?? [ 81.525867][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 81.535117][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.874483][ T4239] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 82.160603][ T4239] nokiaca42v2 ttyUSB0: required endpoint is missing [ 82.171094][ T21] usb 1-1: config 0 descriptor?? [ 82.181638][ T4239] usb 3-1: USB disconnect, device number 2 [ 82.194456][ T4239] cypress_m8 3-1:0.35: device disconnected [ 83.245714][ T4264] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 83.276659][ T21] ath6kl: Failed to submit usb control message: -110 [ 83.290324][ T21] ath6kl: unable to send the bmi data to the device: -110 [ 83.315661][ T21] ath6kl: Unable to send get target info: -110 [ 83.450351][ T4375] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.576479][ T4264] usb 4-1: no configurations [ 83.585600][ T4264] usb 4-1: can't read configurations, error -22 [ 83.628040][ T4380] loop2: detected capacity change from 0 to 16 [ 83.702857][ T4380] erofs: (device loop2): mounted with root inode @ nid 36. [ 83.785648][ T4264] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 83.796949][ T4380] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.126260][ T4264] usb 4-1: no configurations [ 84.131979][ T4264] usb 4-1: can't read configurations, error -22 [ 84.265025][ T4264] usb usb4-port1: attempt power cycle [ 84.417730][ T4384] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.465750][ T4380] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 84.493232][ T4384] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 84.514759][ T4385] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.539641][ T4385] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 85.655622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.675628][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.685612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.695613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.705629][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.715619][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.725606][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.735600][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.745608][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.755622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.585889][ T4264] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 86.632277][ T4396] device syzkaller0 entered promiscuous mode [ 86.692697][ T4398] loop3: detected capacity change from 0 to 4096 [ 86.712101][ T4398] EXT4-fs (loop3): Unrecognized mount option "fsname=:" or missing value [ 86.730807][ T4401] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 86.981459][ T4264] usb 4-1: device not accepting address 4, error -71 [ 87.120919][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 87.196494][ T4408] device dummy0 entered promiscuous mode [ 87.202530][ T4408] device macvtap1 entered promiscuous mode [ 87.518115][ T4410] syz.0.42 (4410) used greatest stack depth: 19392 bytes left [ 89.546505][ T4439] loop0: detected capacity change from 0 to 128 [ 89.888949][ T4441] tipc: Started in network mode [ 89.893901][ T4441] tipc: Node identity d6eb885e9b2f, cluster identity 4711 [ 89.966892][ T4441] tipc: Enabled bearer , priority 0 [ 90.478307][ T4439] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 90.603268][ T4443] tipc: Resetting bearer [ 90.636041][ T4441] device syzkaller0 entered promiscuous mode [ 90.642435][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 90.784076][ T4438] tipc: Resetting bearer [ 90.856896][ T4438] tipc: Disabling bearer [ 90.978620][ T154] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 91.427106][ T4468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.434798][ T4468] IPv6: NLM_F_CREATE should be set when creating new route [ 91.532516][ T4485] xt_CONNSECMARK: invalid mode: 0 [ 92.190911][ T4470] device syzkaller0 entered promiscuous mode [ 92.219414][ T2855] cfg80211: failed to load regulatory.db [ 92.248108][ T21] ath6kl: Failed to init ath6kl core: -110 [ 92.324214][ T21] ath6kl_usb: probe of 1-1:0.0 failed with error -110 [ 92.509436][ T4492] netlink: 'syz.0.60': attribute type 2 has an invalid length. [ 92.523401][ T21] usb 1-1: USB disconnect, device number 2 [ 92.994580][ T4502] xt_SECMARK: invalid mode: 2 [ 93.725558][ C0] sched: RT throttling activated [ 94.108258][ T4511] o2cb: This node has not been configured. [ 94.114449][ T4511] o2cb: Cluster check failed. Fix errors before retrying. [ 94.121883][ T4511] (syz.4.63,4511,0):user_dlm_register:675 ERROR: status = -22 [ 94.129474][ T4511] (syz.4.63,4511,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file2" [ 95.264692][ T4531] netlink: 44 bytes leftover after parsing attributes in process `syz.1.68'. [ 95.291647][ T4531] Zero length message leads to an empty skb [ 95.311299][ T4525] device syzkaller0 entered promiscuous mode [ 95.543426][ T4546] MPTCP: addr_signal error, add_addr=1, echo=0 [ 95.564796][ T4546] MPTCP: addr_signal error, rm_addr=1 [ 95.628977][ T4548] netlink: 'syz.3.72': attribute type 10 has an invalid length. [ 95.665029][ T4548] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 95.788916][ T4552] netlink: 'syz.3.72': attribute type 11 has an invalid length. [ 104.638244][ T4626] loop3: detected capacity change from 0 to 64 [ 104.708185][ T4627] tipc: Started in network mode [ 104.713282][ T4627] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 104.721497][ T4627] tipc: Enabled bearer , priority 4 [ 106.002384][ T4230] tipc: Node number set to 8432298 [ 107.142097][ T4651] loop0: detected capacity change from 0 to 32768 [ 107.184722][ T4648] loop4: detected capacity change from 0 to 2048 [ 107.210813][ T4655] loop2: detected capacity change from 0 to 16 [ 107.331008][ T4661] binder_alloc: 4658: pid 4658 spamming oneway? 2 buffers allocated for a total size of 5120 [ 107.368131][ T4655] ======================================================= [ 107.368131][ T4655] WARNING: The mand mount option has been deprecated and [ 107.368131][ T4655] and is ignored by this kernel. Remove the mand [ 107.368131][ T4655] option from the mount to silence this warning. [ 107.368131][ T4655] ======================================================= [ 107.406438][ T4648] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 107.730983][ T4648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.881416][ T4655] erofs: (device loop2): mounted with root inode @ nid 36. [ 108.017625][ T4651] device-mapper: table: 248:0: thi: unknown target type [ 108.033592][ T4651] device-mapper: ioctl: error adding target to table [ 108.116832][ T4230] kernel write not supported for file /63/net/ip6_tables_matches (pid: 4230 comm: kworker/1:5) [ 108.202033][ T26] audit: type=1800 audit(1785910299.355:2): pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.106" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 111.065593][ T4691] No source specified [ 111.266669][ T4189] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 111.574374][ T4189] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 112.044959][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 112.056058][ T4710] device bridge_slave_1 left promiscuous mode [ 112.063955][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.066161][ T2855] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.092583][ T4710] device bridge_slave_0 left promiscuous mode [ 112.099777][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.200168][ T4709] device syzkaller0 entered promiscuous mode [ 112.330882][ T2855] usb 2-1: Using ep0 maxpacket: 32 [ 112.353230][ T4365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.456087][ T2855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.478610][ T2855] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 112.514249][ T2855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.526467][ T2855] usb 2-1: config 0 descriptor?? [ 112.546613][ T4365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.568013][ T2855] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 112.648012][ T4365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.731634][ T4365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.883760][ T4365] tipc: Disabling bearer [ 113.930388][ T4365] tipc: Left network mode [ 114.260351][ T4727] chnl_net:caif_netlink_parms(): no params data found [ 114.499271][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.513110][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.528575][ T4727] device bridge_slave_0 entered promiscuous mode [ 114.538957][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.550462][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.559207][ T4727] device bridge_slave_1 entered promiscuous mode [ 114.606943][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.620121][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.676324][ T4727] team0: Port device team_slave_0 added [ 114.698604][ T4727] team0: Port device team_slave_1 added [ 114.760925][ T1108] usb 2-1: USB disconnect, device number 2 [ 114.849160][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.860163][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.888872][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.905085][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.920393][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.948877][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.991074][ T4759] device syzkaller0 entered promiscuous mode [ 115.150208][ T4761] loop0: detected capacity change from 0 to 4096 [ 115.223933][ T4767] device syzkaller0 entered promiscuous mode [ 115.288749][ T4761] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.362576][ T4727] device hsr_slave_0 entered promiscuous mode [ 115.370468][ T4727] device hsr_slave_1 entered promiscuous mode [ 115.388835][ T4727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.404841][ T4761] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,noauto_da_alloc,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 115.409515][ T4727] Cannot create hsr debugfs directory [ 115.437051][ T4247] Bluetooth: hci3: command 0x0409 tx timeout [ 116.670572][ T4776] netlink: 79 bytes leftover after parsing attributes in process `syz.1.131'. [ 116.700092][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 116.751909][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 116.763643][ T4782] netlink: 'syz.1.131': attribute type 11 has an invalid length. [ 117.025274][ T4798] device syzkaller0 entered promiscuous mode [ 117.495892][ T4247] Bluetooth: hci3: command 0x041b tx timeout [ 117.763937][ T4760] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 118.580003][ T4365] device hsr_slave_0 left promiscuous mode [ 118.628177][ T4822] loop2: detected capacity change from 0 to 40427 [ 118.649685][ T4365] device hsr_slave_1 left promiscuous mode [ 118.663912][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.684323][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.710297][ T4822] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 118.718641][ T4822] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.732305][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.742145][ T4822] F2FS-fs (loop2): invalid crc value [ 118.767689][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.776793][ T4365] device bridge_slave_1 left promiscuous mode [ 118.784639][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.816801][ T4822] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.885150][ T4365] device bridge_slave_0 left promiscuous mode [ 118.899544][ T4822] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.906967][ T4822] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.912003][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.010119][ T4365] device veth1_macvtap left promiscuous mode [ 119.031197][ T4365] device veth0_macvtap left promiscuous mode [ 119.124710][ T4365] device veth1_vlan left promiscuous mode [ 119.156886][ T4365] device veth0_vlan left promiscuous mode [ 119.216267][ T4239] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.178896][ T4247] Bluetooth: hci3: command 0x040f tx timeout [ 120.566056][ T4239] usb 1-1: config 127 has an invalid interface number: 138 but max is 0 [ 120.666763][ T4239] usb 1-1: config 127 has no interface number 0 [ 120.673366][ T4239] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 120.730690][ T4239] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 120.926006][ T4239] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 120.956041][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.964134][ T4239] usb 1-1: Product: syz [ 120.991977][ T4239] usb 1-1: Manufacturer: syz [ 121.010275][ T4239] usb 1-1: SerialNumber: syz [ 121.077079][ T4834] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.088717][ T4834] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.187002][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 121.261666][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 122.734984][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 122.842467][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.996426][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.025796][ T4239] usb 1-1: probing VID:PID(0424:012C) [ 123.066945][ T4239] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0F [ 123.088838][ T4856] hub 8-0:1.0: USB hub found [ 123.096768][ T4856] hub 8-0:1.0: 1 port detected [ 123.185816][ T4239] usb 1-1: vub300 testing BULK OUT EndPoint(1) 09 [ 123.193534][ T4239] usb 1-1: vub300 testing BULK OUT EndPoint(2) 0C [ 123.202396][ T4239] usb 1-1: ignoring unexpected bulk_out endpoint [ 123.213015][ T4239] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 123.420898][ T4239] vub300: probe of 1-1:127.138 failed with error -22 [ 123.759922][ T4239] usb 1-1: USB disconnect, device number 3 [ 124.052987][ T4365] bond0 (unregistering): Released all slaves [ 124.128898][ T4819] device syzkaller0 entered promiscuous mode [ 125.807100][ T4727] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.009544][ T4727] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.061152][ T4727] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.084378][ T4727] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.186739][ T4878] device syzkaller0 entered promiscuous mode [ 127.460757][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.479201][ T4896] device syzkaller0 entered promiscuous mode [ 128.077359][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.136967][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.201795][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.007597][ T4917] IPVS: lc: FWM 3 0x00000003 - no destination available [ 129.294723][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.311123][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.456374][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.463723][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.534965][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.549562][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.564341][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.571702][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.588088][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.603774][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.617619][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.700503][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.731916][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.764262][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.775428][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.797772][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.812058][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.822482][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.849665][ T4727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.919946][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.956457][ T4924] device syzkaller0 entered promiscuous mode [ 129.972052][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.998007][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.394507][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.410948][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.597951][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.776393][ T4965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.168'. [ 131.873388][ T4968] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 131.908024][ T4970] loop0: detected capacity change from 0 to 512 [ 131.926266][ T4968] qfq: no options [ 132.130431][ T4970] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 134.770364][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.781748][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.811202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.842782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.910037][ T4997] xt_HMARK: spi-set and port-set can't be combined [ 134.945202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.106995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.562387][ T4727] device veth0_vlan entered promiscuous mode [ 135.659677][ T4727] device veth1_vlan entered promiscuous mode [ 135.795060][ T4727] device veth0_macvtap entered promiscuous mode [ 135.831682][ T4727] device veth1_macvtap entered promiscuous mode [ 135.918651][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.025585][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.884364][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.163883][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.174717][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.189700][ T5015] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 137.216124][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.614221][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.709722][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.979667][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.025988][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.045881][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.080332][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.127296][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.249674][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.298990][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.312742][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.319221][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.336814][ T5032] binder: BINDER_SET_CONTEXT_MGR already set [ 138.343244][ T5032] binder: 5031:5032 ioctl 4018620d 200000004a80 returned -16 [ 138.355232][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.400295][ T5036] binder: 5031:5036 ioctl c0306201 0 returned -14 [ 138.433840][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.494836][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.543458][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.575678][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.618874][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.657709][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.704621][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.749716][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.800544][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.838238][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.868326][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.898903][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.022456][ T4727] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.083154][ T4727] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.154823][ T4727] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.195630][ T4727] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.255450][ T5043] syz.3.187 sent an empty control message without MSG_MORE. [ 142.303150][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.327328][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.827308][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.908663][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.924298][ T5075] jffs2: notice: (5075) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.962019][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.000795][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.243874][ T5099] device syzkaller0 entered promiscuous mode [ 144.291672][ T5099] 0: reclassify loop, rule prio 0, protocol 700 [ 144.482584][ T5107] ODEBUG: Out of memory. ODEBUG disabled [ 144.931967][ T5115] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 145.280910][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 145.301101][ T5127] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.310690][ T5127] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.319489][ T5127] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.328274][ T5127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.116798][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 148.300127][ T5158] process 'syz.2.204' launched './file0' with NULL argv: empty string added [ 148.830108][ T5172] Cannot find del_set index 0 as target [ 152.092863][ T5212] cgroup: Invalid name [ 152.345329][ T5217] Cannot find set identified by id 0 to match [ 152.555794][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.885678][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 153.025874][ T13] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 153.063944][ T13] usb 4-1: config 0 has no interface number 0 [ 153.107490][ T13] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 153.717573][ T13] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 153.786669][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.816254][ T13] usb 4-1: Product: syz [ 153.820480][ T13] usb 4-1: Manufacturer: syz [ 153.842390][ T13] usb 4-1: SerialNumber: syz [ 153.905127][ T13] usb 4-1: config 0 descriptor?? [ 153.965875][ T5213] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.096185][ T5245] UBIFS error (pid: 5245): cannot open "./file0", error -22 [ 154.117124][ T5245] loop2: detected capacity change from 0 to 256 [ 154.209296][ T5213] loop3: detected capacity change from 0 to 512 [ 154.321088][ T5257] loop1: detected capacity change from 0 to 256 [ 154.419964][ T5257] FAT-fs (loop1): bogus sectors per cluster 0 [ 154.441323][ T5257] FAT-fs (loop1): Can't find a valid FAT filesystem [ 154.454852][ T5251] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 154.540928][ T13] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 154.551370][ T5251] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 154.598950][ T5251] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 154.616848][ T13] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 154.632662][ T5267] device ip6_vti0 entered promiscuous mode [ 154.651385][ T13] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 154.661357][ T5269] loop5: detected capacity change from 0 to 64 [ 154.661857][ T5251] pit: kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 154.691693][ T13] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 154.698500][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 154.722363][ T5251] pit: kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 154.738399][ T5271] loop1: detected capacity change from 0 to 1024 [ 154.756531][ T13] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 154.796292][ T13] usb 4-1: USB disconnect, device number 6 [ 154.862736][ T13] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 155.092331][ T13] keyspan 4-1:0.133: device disconnected [ 155.818538][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.167159][ T5283] tipc: Started in network mode [ 156.237589][ T5283] tipc: Node identity 080211, cluster identity 4711 [ 156.244382][ T5283] tipc: Enabled bearer , priority 0 [ 156.289462][ T9] hfsplus: b-tree write err: -5, ino 25 [ 156.335039][ T9] hfsplus: b-tree write err: -5, ino 4 [ 156.395686][ T5289] device syzkaller0 entered promiscuous mode [ 156.402178][ T5289] tipc: Resetting bearer [ 156.422285][ T5290] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 156.466897][ T9] hfsplus: b-tree write err: -5, ino 2 [ 156.782903][ T9] hfsplus: b-tree write err: -5, ino 26 [ 157.217335][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.233058][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.267003][ T4228] tipc: Node number set to 134353152 [ 158.300178][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.325233][ T5301] crypto_alloc_aead failed rc=-2 [ 158.684965][ T5336] device syzkaller0 entered promiscuous mode [ 159.038764][ T5354] netlink: 'syz.3.250': attribute type 11 has an invalid length. [ 159.366633][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.491371][ T5362] tipc: Cannot configure node identity twice [ 160.308769][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.427980][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.605046][ T5378] cgroup: Name too long [ 161.595744][ T5396] loop1: detected capacity change from 0 to 512 [ 161.841681][ T5396] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 162.011293][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.064725][ T5396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 162.196830][ T5396] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.203292][ T5396] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.261: bad orphan inode 267 [ 162.215663][ T5396] EXT4-fs (loop1): Remounting filesystem read-only [ 162.222272][ T5396] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 162.344699][ T5393] ip6t_srh: unknown srh invflags 4000 [ 162.411540][ T5396] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.261: dx entry: limit 0 != root limit 125 [ 162.432551][ T5406] netlink: 'syz.2.264': attribute type 1 has an invalid length. [ 162.480945][ T5396] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.261: Corrupt directory, running e2fsck is recommended [ 162.626219][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.015946][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.186487][ T5413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.294682][ T5406] device bond1 entered promiscuous mode [ 163.336435][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.388830][ T5406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.541813][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.615681][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.689222][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.715855][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.728801][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.740099][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.750021][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.760595][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.771399][ T5409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.783234][ T5409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.799821][ T5409] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.833451][ T5409] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 163.869744][ T5409] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 163.929339][ T5419] sctp: [Deprecated]: syz.1.265 (pid 5419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.929339][ T5419] Use struct sctp_sack_info instead [ 163.948893][ T5419] sctp: [Deprecated]: syz.1.265 (pid 5419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.948893][ T5419] Use struct sctp_sack_info instead [ 164.264072][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.300098][ T5427] netlink: 'syz.1.269': attribute type 11 has an invalid length. [ 165.271931][ T5441] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.354878][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.385765][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.609152][ T5455] loop3: detected capacity change from 0 to 512 [ 166.690639][ T5455] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 167.064208][ T5455] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 167.092224][ T5455] EXT4-fs (loop3): orphan cleanup on readonly fs [ 167.163270][ T5455] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.276: bad orphan inode 267 [ 167.203484][ T5455] EXT4-fs (loop3): Remounting filesystem read-only [ 167.213267][ T5455] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 167.258617][ T5453] ip6t_srh: unknown srh invflags 4000 [ 167.328561][ T5455] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.276: dx entry: limit 0 != root limit 125 [ 167.699661][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.433311][ T5455] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.276: Corrupt directory, running e2fsck is recommended [ 168.650689][ T5479] tipc: Started in network mode [ 168.670522][ T5479] tipc: Node identity 84e, cluster identity 4711 [ 168.689276][ T5479] tipc: Node number set to 2126 [ 168.734872][ T5482] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 168.781396][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.810642][ T5482] device bond1 entered promiscuous mode [ 168.866189][ T5482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.204915][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.260534][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.271751][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.426983][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.492635][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.001265][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.015445][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.082152][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.092151][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.104241][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.127479][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.140102][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.157747][ T5484] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 170.201543][ T5484] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 170.214414][ T5484] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 170.297014][ T5501] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.568528][ T5491] netlink: 'syz.0.283': attribute type 11 has an invalid length. [ 170.822515][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.121092][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.131542][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.143708][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.156124][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.166610][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.176892][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.187377][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.204084][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.216271][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.242348][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.266371][ T5482] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.316459][ T5482] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 171.542437][ T5510] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 171.705226][ T5513] device syzkaller0 entered promiscuous mode [ 172.257092][ T5524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.295966][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.454626][ T5523] loop2: detected capacity change from 0 to 512 [ 172.666951][ T5523] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 172.726468][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.735263][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.765823][ T5523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 172.774904][ T5523] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.793554][ T5523] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.291: bad orphan inode 267 [ 172.805579][ T5523] EXT4-fs (loop2): Remounting filesystem read-only [ 172.812202][ T5523] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 172.841925][ T5521] ip6t_srh: unknown srh invflags 4000 [ 172.907553][ T5523] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.291: dx entry: limit 0 != root limit 125 [ 172.921534][ T5523] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.291: Corrupt directory, running e2fsck is recommended [ 173.032283][ T5534] cgroup: Name too long [ 173.336018][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.341148][ T5542] loop2: detected capacity change from 0 to 64 [ 173.437781][ T5547] loop3: detected capacity change from 0 to 256 [ 173.718286][ T5547] FAT-fs (loop3): bogus sectors per cluster 0 [ 173.724440][ T5547] FAT-fs (loop3): Can't find a valid FAT filesystem [ 174.741537][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.342047][ T5566] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 175.419180][ T5566] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 175.447022][ T5576] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 175.462843][ T5566] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 175.536582][ T5566] pit: kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 175.566519][ T5576] device bond1 entered promiscuous mode [ 175.576305][ T5566] pit: kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 175.635656][ T5576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.718651][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.739939][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.763810][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.823666][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.854884][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.902406][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.923553][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.951211][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.999808][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.050391][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.067873][ T5592] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 176.118121][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.129056][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.139888][ T5578] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.153209][ T5578] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 176.164332][ T5578] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 176.204684][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.223771][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.234120][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.251245][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.263546][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.280875][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.293232][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.313558][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.331422][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.342347][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.360579][ T5580] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.383267][ T5580] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 176.545004][ T5606] loop0: detected capacity change from 0 to 512 [ 176.709097][ T5606] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 176.857348][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.942907][ T5606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 177.398608][ T5606] EXT4-fs (loop0): orphan cleanup on readonly fs [ 177.479302][ T5620] cgroup: Name too long [ 177.505344][ T5606] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.307: bad orphan inode 267 [ 177.507930][ T5606] EXT4-fs (loop0): Remounting filesystem read-only [ 177.507957][ T5606] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 177.543323][ T5606] ip6t_srh: unknown srh invflags 4000 [ 177.612455][ T5627] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.307: dx entry: limit 0 != root limit 125 [ 177.612531][ T5627] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.307: Corrupt directory, running e2fsck is recommended [ 178.319882][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.823804][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.841531][ T5641] loop0: detected capacity change from 0 to 64 [ 178.902952][ T5643] loop2: detected capacity change from 0 to 256 [ 179.035436][ T5646] cgroup: Name too long [ 179.103060][ T5643] FAT-fs (loop2): bogus sectors per cluster 0 [ 179.103108][ T5643] FAT-fs (loop2): Can't find a valid FAT filesystem [ 179.855841][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.068906][ T5661] tipc: Enabled bearer , priority 0 [ 180.094869][ T5661] device syzkaller0 entered promiscuous mode [ 180.357733][ T5667] netlink: 'syz.5.321': attribute type 1 has an invalid length. [ 181.020001][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.141234][ T5667] device bond1 entered promiscuous mode [ 181.193811][ T5667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.313530][ T5669] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 181.334674][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.355192][ T5681] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 181.453587][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.567485][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.713420][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.916838][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.999590][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.008760][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.030936][ T5681] pit: kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 182.055638][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.067040][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.072209][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.110340][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.131014][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.191679][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.211645][ T5693] UBIFS error (pid: 5693): cannot open "./file0", error -22 [ 182.215992][ T5693] loop1: detected capacity change from 0 to 256 [ 182.269691][ T5661] tipc: Resetting bearer [ 182.292519][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.323274][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.347916][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.360242][ T5689] set match dimension is over the limit! [ 182.378521][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.401934][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.416193][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.453897][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.475653][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.492182][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.503039][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.534376][ T5660] tipc: Resetting bearer [ 182.646489][ T5660] tipc: Disabling bearer [ 182.861946][ T5711] loop5: detected capacity change from 0 to 512 [ 183.024850][ T5711] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 183.125668][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.366713][ T5711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 183.617358][ T5711] EXT4-fs (loop5): orphan cleanup on readonly fs [ 183.632068][ T5726] loop3: detected capacity change from 0 to 64 [ 183.821785][ T5711] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.326: bad orphan inode 267 [ 183.876448][ T5711] EXT4-fs (loop5): Remounting filesystem read-only [ 183.883131][ T5711] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 183.986512][ T5711] ip6t_srh: unknown srh invflags 4000 [ 184.131341][ T5734] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.326: dx entry: limit 0 != root limit 125 [ 184.144017][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.212498][ T5734] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.326: Corrupt directory, running e2fsck is recommended [ 184.448425][ T5738] loop0: detected capacity change from 0 to 256 [ 185.029753][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.159989][ T5738] FAT-fs (loop0): bogus sectors per cluster 0 [ 185.171300][ T5738] FAT-fs (loop0): Can't find a valid FAT filesystem [ 185.180167][ T4239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.074889][ T5752] jffs2: notice: (5752) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.165316][ T5738] loop0: detected capacity change from 0 to 1024 [ 186.212128][ T5758] UBIFS error (pid: 5758): cannot open "./file0", error -22 [ 186.225913][ T5758] loop5: detected capacity change from 0 to 256 [ 186.428658][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.512719][ T5768] SET target dimension over the limit! [ 186.636207][ T144] hfsplus: b-tree write err: -5, ino 25 [ 187.022076][ T144] hfsplus: b-tree write err: -5, ino 4 [ 187.029293][ T144] hfsplus: b-tree write err: -5, ino 2 [ 187.034952][ T144] hfsplus: b-tree write err: -5, ino 26 [ 187.166430][ T5763] device syzkaller0 entered promiscuous mode [ 187.590812][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.666302][ T5783] cgroup: Invalid name [ 187.732112][ T5780] Cannot find set identified by id 0 to match [ 188.258496][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.616550][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.871164][ T5804] device syzkaller0 left promiscuous mode [ 189.442048][ T5815] device syzkaller0 entered promiscuous mode [ 189.459852][ T5826] jffs2: notice: (5826) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 189.702612][ T4239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.818874][ T5840] device syzkaller0 entered promiscuous mode [ 190.448447][ T5861] set match dimension is over the limit! [ 190.780533][ T4239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.347839][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.508761][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.585890][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 191.634895][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 191.822472][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 192.303501][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 192.314150][ T4239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.537169][ T5891] MTD: Couldn't look up './dev/mtdblock0': -2 [ 193.395906][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.618308][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.626877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.268246][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.285722][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.503275][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.594623][ T5946] jffs2: notice: (5946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 198.268449][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.417773][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.482019][ T5984] device bridge1 entered promiscuous mode [ 198.524554][ T5984] team0: Port device bridge1 added [ 199.233427][ T5989] bridge0: port 3(team0) entered blocking state [ 199.252363][ T5989] bridge0: port 3(team0) entered disabled state [ 199.265640][ T5989] device team0 entered promiscuous mode [ 199.271291][ T5989] device team_slave_0 entered promiscuous mode [ 199.280473][ T5989] device team_slave_1 entered promiscuous mode [ 199.289922][ T5989] bridge0: port 3(team0) entered blocking state [ 199.296616][ T5989] bridge0: port 3(team0) entered forwarding state [ 199.336259][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.714158][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.720566][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.808566][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.025771][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.735917][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.816234][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.536719][ T6026] loop0: detected capacity change from 0 to 2048 [ 203.729305][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.309085][ T6026] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 204.792565][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.887347][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.580372][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.603304][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.614027][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.791547][ T4184] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 205.857091][ T4196] net_ratelimit: 1 callbacks suppressed [ 205.857107][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.007586][ T6059] loop2: detected capacity change from 0 to 2048 [ 206.205934][ T6059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.505090][ T4239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.538364][ T4239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.833083][ T6087] loop1: detected capacity change from 0 to 2048 [ 208.857458][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.967848][ T6087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.688679][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.526297][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.535914][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.656410][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.803035][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.812205][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.904715][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.952278][ T6109] tipc: Enabled bearer , priority 0 [ 210.967041][ T6109] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 211.092375][ T6109] tipc: Resetting bearer [ 211.355073][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.399970][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.001103][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.009818][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.370700][ T4239] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 213.026523][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.145741][ T4239] usb 4-1: Using ep0 maxpacket: 16 [ 213.265777][ T4239] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 213.281101][ T4239] usb 4-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 213.468652][ T4239] usb 4-1: config 0 has no interface number 0 [ 213.475302][ T4239] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.789334][ T6161] loop2: detected capacity change from 0 to 512 [ 214.181975][ T6161] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.297723][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.585734][ T4239] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 214.594880][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.054386][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 215.062239][ T4239] usb 4-1: Product: syz [ 215.080552][ T4239] usb 4-1: config 0 descriptor?? [ 215.135997][ T4239] usb 4-1: can't set config #0, error -71 [ 215.160180][ T4239] usb 4-1: USB disconnect, device number 7 [ 215.374685][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.385307][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.412197][ T6181] tipc: Enabling of bearer rejected, already enabled [ 216.128902][ T6190] loop1: detected capacity change from 0 to 8 [ 216.220182][ T6190] SQUASHFS error: Unable to read inode 0x11f [ 216.276951][ T4232] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 216.300019][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.304198][ T6196] device syzkaller0 left promiscuous mode [ 216.337745][ T6196] tipc: Resetting bearer [ 216.362019][ T6190] Non-string source [ 216.537609][ T4232] usb 3-1: config 0 descriptor?? [ 216.579548][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.605741][ T4232] usb 3-1: can't set config #0, error -71 [ 216.780021][ T6206] device syzkaller0 entered promiscuous mode [ 217.022424][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.242205][ T4232] usb 3-1: USB disconnect, device number 3 [ 217.253430][ T4239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.262646][ T4239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.374557][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 217.416811][ T6212] device dummy0 entered promiscuous mode [ 217.433015][ T6212] device macvtap1 entered promiscuous mode [ 218.926422][ T6219] befs: (nullb0): invalid magic header [ 218.936939][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.980650][ T6221] loop3: detected capacity change from 0 to 16 [ 219.005875][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 219.032174][ T6221] erofs: (device loop3): mounted with root inode @ nid 36. [ 219.210368][ T6221] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 219.261354][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 219.977940][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.020640][ T6221] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 220.029059][ T6223] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 220.040911][ T6223] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 220.050344][ T6225] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 220.075908][ T4232] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 220.088638][ T4232] usb 2-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 220.092198][ T6225] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 220.249816][ T4232] usb 2-1: config 0 has no interface number 0 [ 220.257639][ T4232] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.307870][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.321656][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.077062][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.335729][ T4232] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 221.355966][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.373872][ T6235] md: could not open device unknown-block(1,0). [ 221.373990][ T4232] usb 2-1: config 0 descriptor?? [ 221.493892][ T6237] md: could not open device unknown-block(1,1). [ 222.205823][ T4232] usb 2-1: can't set config #0, error -71 [ 222.225720][ T4232] usb 2-1: USB disconnect, device number 3 [ 222.346011][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.679979][ T6257] tipc: Enabling of bearer rejected, already enabled [ 222.760570][ T6258] loop2: detected capacity change from 0 to 4096 [ 222.807102][ T6262] loop0: detected capacity change from 0 to 16 [ 222.864894][ T6258] EXT4-fs (loop2): Unrecognized mount option "fsname=:" or missing value [ 222.943228][ T6262] erofs: (device loop0): mounted with root inode @ nid 36. [ 223.539033][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.567131][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.581614][ T6262] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.603113][ T6262] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 223.688889][ T6262] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.775899][ T6262] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 223.797691][ T6266] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.816848][ T6266] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 224.865417][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.002954][ T6285] md: could not open device unknown-block(1,0). [ 225.019085][ T6285] md: could not open device unknown-block(1,1). [ 227.434256][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.465278][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.507190][ T6301] loop5: detected capacity change from 0 to 512 [ 227.597146][ T6301] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback. [ 227.672357][ T6301] EXT4-fs error (device loop5): ext4_readdir:223: inode #12: comm syz.5.476: path /51/file0/file0: directory fails checksum at offset 0 [ 228.506947][ T6318] tipc: Enabling of bearer rejected, already enabled [ 228.657383][ T6319] device syzkaller0 entered promiscuous mode [ 228.666332][ T6319] tipc: Resetting bearer [ 228.708857][ T6318] tipc: Resetting bearer [ 228.730512][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.741909][ T4232] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 229.056674][ T6326] loop0: detected capacity change from 0 to 4096 [ 229.859545][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.040193][ T4232] usb 2-1: no configurations [ 230.044873][ T4232] usb 2-1: can't read configurations, error -22 [ 230.080474][ T6326] EXT4-fs (loop0): Unrecognized mount option "fsname=:" or missing value [ 230.369171][ T6336] netlink: 'syz.5.487': attribute type 2 has an invalid length. [ 230.378931][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.415582][ T4232] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 230.572462][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.756289][ T4232] usb 2-1: device descriptor read/all, error -71 [ 231.054298][ T4232] usb usb2-port1: attempt power cycle [ 231.189767][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.748125][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.258098][ T6382] tipc: Started in network mode [ 233.263326][ T6382] tipc: Node identity 080211, cluster identity 4711 [ 233.270744][ T6382] tipc: Enabled bearer , priority 0 [ 233.546283][ T6382] device syzkaller0 entered promiscuous mode [ 233.584309][ T6382] tipc: Resetting bearer [ 233.591215][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.628037][ T6384] netlink: 'syz.2.500': attribute type 10 has an invalid length. [ 233.902835][ T6384] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 233.905188][ T6386] tipc: Resetting bearer [ 234.500197][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.709528][ T4228] tipc: Node number set to 134353152 [ 235.587728][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.755652][ T4228] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 235.854639][ T6416] kvm [6411]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 236.106655][ T4228] usb 3-1: no configurations [ 236.112090][ T4228] usb 3-1: can't read configurations, error -22 [ 236.615746][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.623909][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.675683][ T4228] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 237.753760][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 238.225695][ T4228] usb 3-1: device descriptor read/all, error -71 [ 238.232518][ T4228] usb usb3-port1: attempt power cycle [ 238.322352][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.415892][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.449648][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.542543][ T6465] netlink: 'syz.5.523': attribute type 10 has an invalid length. [ 239.610258][ T6465] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 239.697353][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.439928][ T6465] netlink: 'syz.5.523': attribute type 11 has an invalid length. [ 240.719452][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.380989][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.420845][ T6498] loop2: detected capacity change from 0 to 128 [ 243.727399][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.220827][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.230107][ T6498] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 244.867857][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.426074][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.174982][ T6550] tipc: Enabled bearer , priority 4 [ 247.723045][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.744034][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.636278][ T4228] tipc: Node number set to 2534358970 [ 248.923310][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.745096][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.756099][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.774797][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.002318][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.618300][ T4196] Bluetooth: hci3: command 0x0405 tx timeout [ 250.962506][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.015751][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.062178][ T6595] netlink: 'syz.5.560': attribute type 10 has an invalid length. [ 251.110010][ T6596] netlink: 'syz.2.561': attribute type 10 has an invalid length. [ 251.990330][ T6610] tipc: Enabled bearer , priority 4 [ 252.543445][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.838240][ T6631] jffs2: notice: (6631) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 253.643875][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.680442][ T6639] loop0: detected capacity change from 0 to 128 [ 253.700401][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 253.760182][ T6641] device bridge_slave_1 left promiscuous mode [ 253.773690][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.789808][ T6639] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 253.850426][ T6641] device bridge_slave_0 left promiscuous mode [ 253.867897][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.999849][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.028688][ T4365] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 254.170125][ T6659] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 254.180186][ T6660] netlink: 'syz.0.576': attribute type 11 has an invalid length. [ 254.214498][ T6659] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 254.743313][ T6676] o2cb: Local heartbeat has not been started. [ 254.749603][ T6676] o2cb: Cluster check failed. Fix errors before retrying. [ 254.756997][ T6676] (syz.2.579,6676,1):user_dlm_register:675 ERROR: status = -22 [ 254.764645][ T6676] (syz.2.579,6676,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file2" [ 255.023901][ T6678] tipc: Enabled bearer , priority 4 [ 255.370092][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.479378][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.490576][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.499592][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.606318][ T6688] loop2: detected capacity change from 0 to 512 [ 256.600801][ T6688] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 257.754890][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.786828][ T6688] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 257.852348][ T6688] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.898773][ T6704] loop5: detected capacity change from 0 to 128 [ 257.923689][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.940970][ T6704] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 258.093702][ T6706] netlink: 'syz.3.592': attribute type 11 has an invalid length. [ 258.167962][ T6708] loop0: detected capacity change from 0 to 128 [ 258.741502][ T6708] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 258.795834][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.886220][ T6717] loop1: detected capacity change from 0 to 128 [ 259.047236][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 261.549642][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.566467][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.586069][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.592452][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.636292][ T6717] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 261.944262][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.953600][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.962347][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.372356][ T6741] o2cb: Local heartbeat has not been started. [ 262.378630][ T6741] o2cb: Cluster check failed. Fix errors before retrying. [ 262.385980][ T6741] (syz.5.597,6741,0):user_dlm_register:675 ERROR: status = -22 [ 262.393694][ T6741] (syz.5.597,6741,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file2" [ 262.468422][ T6733] netlink: 'syz.0.606': attribute type 11 has an invalid length. [ 262.834710][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.080449][ T161] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 264.725956][ T2855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.177821][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.537974][ T6761] loop3: detected capacity change from 0 to 40427 [ 265.593583][ T6767] loop1: detected capacity change from 0 to 128 [ 265.723293][ T6767] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 265.794377][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.815612][ T6761] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 265.823398][ T6761] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 266.233913][ T6761] F2FS-fs (loop3): invalid crc value [ 266.432479][ T6777] netlink: 14 bytes leftover after parsing attributes in process `syz.0.609'. [ 266.447416][ T6761] F2FS-fs (loop3): Found nat_bits in checkpoint [ 266.516915][ T6761] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 266.524053][ T6761] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 266.879968][ T6782] loop1: detected capacity change from 0 to 1024 [ 267.648041][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.691850][ T6777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.721856][ T6782] EXT4-fs (loop1): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 267.872449][ T6777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.987280][ T6777] bond0 (unregistering): Released all slaves [ 268.283803][ T6798] binder_alloc: 6797: pid 6797 spamming oneway? 2 buffers allocated for a total size of 5120 [ 268.372973][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.730049][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.339787][ T4264] Bluetooth: hci0: command 0x0c3a tx timeout [ 270.679358][ T6819] loop3: detected capacity change from 0 to 128 [ 271.102128][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.140063][ T6819] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 271.489224][ T6834] loop0: detected capacity change from 0 to 128 [ 271.500211][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.508800][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.584633][ T6827] loop1: detected capacity change from 0 to 40427 [ 272.136310][ T4196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.831141][ T6834] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 272.858884][ T6827] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 272.866878][ T6827] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 272.890558][ T6833] smpboot: CPU 1 is now offline [ 272.911921][ T6827] F2FS-fs (loop1): invalid crc value [ 272.928761][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.150709][ T6827] F2FS-fs (loop1): Found nat_bits in checkpoint [ 273.505014][ T6827] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 273.512413][ T6827] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 273.762588][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.970936][ T4816] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 274.983862][ T5232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.995155][ T4233] Bluetooth: hci0: command 0x0c24 tx timeout [ 275.002014][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.846930][ T6863] binder: BINDER_SET_CONTEXT_MGR already set [ 275.861765][ T6862] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 275.886408][ T6863] binder: 6860:6863 ioctl 4018620d 200000000300 returned -16 [ 275.895176][ T6865] netlink: 'syz.1.640': attribute type 11 has an invalid length. [ 276.236861][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.295884][ T6882] device syzkaller0 entered promiscuous mode [ 276.322205][ T6881] tipc: Enabling of bearer rejected, already enabled [ 276.444193][ T6885] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 276.686083][ T6885] tipc: Resetting bearer [ 276.977879][ T6889] loop2: detected capacity change from 0 to 128 [ 277.052174][ T6889] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 277.265231][ T6897] loop1: detected capacity change from 0 to 128 [ 277.313150][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.879163][ T6897] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 277.903874][ T4212] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 278.060274][ T6905] loop5: detected capacity change from 0 to 2048 [ 278.105588][ T6907] binder: BINDER_SET_CONTEXT_MGR already set [ 278.138636][ T6907] binder: 6906:6907 ioctl 4018620d 200000000300 returned -16 [ 278.155732][ T6911] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 278.211554][ T6914] netlink: 'syz.3.647': attribute type 11 has an invalid length. [ 278.222468][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.242502][ T4212] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 278.293835][ T6905] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 278.412014][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.516068][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.469518][ T6935] tipc: Enabling of bearer rejected, already enabled [ 281.690315][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.698641][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.707739][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.725447][ T6944] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 282.000012][ T6947] loop2: detected capacity change from 0 to 128 [ 282.110093][ T6947] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 282.231480][ T6935] tipc: Resetting bearer [ 282.467954][ T4816] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 282.540041][ T6957] loop3: detected capacity change from 0 to 128 [ 282.568876][ T6958] jffs2: notice: (6958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 282.679219][ T6957] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 282.932993][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.549666][ T6975] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 283.623922][ T4212] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 283.800586][ T6981] loop1: detected capacity change from 0 to 2048 [ 284.002765][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.089994][ T6981] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 389.105429][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 389.112475][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P161/1:b..l P154/1:b..l [ 389.121890][ C0] (detected by 0, t=10502 jiffies, g=20897, q=44) [ 389.128392][ C0] task:kworker/u4:2 state:R running task stack:22096 pid: 154 ppid: 2 flags:0x00004000 [ 389.140274][ C0] Workqueue: netns cleanup_net [ 389.145072][ C0] Call Trace: [ 389.148359][ C0] [ 389.151296][ C0] __schedule+0x11c3/0x4350 [ 389.155807][ C0] ? mark_lock+0x94/0x320 [ 389.160156][ C0] ? release_firmware_map_entry+0x190/0x190 [ 389.166053][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 389.171954][ C0] ? _raw_spin_unlock+0x40/0x40 [ 389.176808][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 389.182097][ C0] preempt_schedule_irq+0xbb/0x160 [ 389.187222][ C0] ? __cond_resched+0xd0/0xd0 [ 389.191900][ C0] ? rcu_is_watching+0x11/0xa0 [ 389.196667][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 389.202477][ C0] irqentry_exit+0x63/0x70 [ 389.206910][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 389.213032][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 389.218331][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 389.237943][ C0] RSP: 0018:ffffc90001eb7920 EFLAGS: 00000206 [ 389.244013][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 805023c846988900 [ 389.251981][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4200 [ 389.259954][ C0] RBP: ffffc90001eb7a40 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 389.267923][ C0] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffffffff8c31ef60 [ 389.275894][ C0] R13: 1ffff920003d6f30 R14: 0000000000000246 R15: dffffc0000000000 [ 389.283882][ C0] ? rcu_lock_release+0x5/0x20 [ 389.288665][ C0] ? read_lock_is_recursive+0x10/0x10 [ 389.294035][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 389.299081][ C0] rcu_lock_acquire+0x2a/0x30 [ 389.303760][ C0] ? rcu_lock_acquire+0x5/0x30 [ 389.308518][ C0] inet_twsk_purge+0x10d/0x820 [ 389.313289][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 389.318660][ C0] ? iput+0x6ea/0x880 [ 389.322642][ C0] ? dccp_v6_exit_net+0x80/0x80 [ 389.327495][ C0] cleanup_net+0x78e/0xba0 [ 389.331914][ C0] ? ops_free_list+0x330/0x330 [ 389.336688][ C0] ? __schedule+0x11cb/0x4350 [ 389.341362][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 389.346576][ C0] process_one_work+0x867/0xff0 [ 389.351453][ C0] ? worker_detach_from_pool+0x240/0x240 [ 389.357088][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 389.362376][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 389.367416][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 389.372959][ C0] ? wq_worker_running+0x97/0x170 [ 389.377983][ C0] worker_thread+0xad7/0x12a0 [ 389.382677][ C0] kthread+0x42e/0x520 [ 389.386745][ C0] ? rcu_lock_release+0x20/0x20 [ 389.391612][ C0] ? kthread_blkcg+0xd0/0xd0 [ 389.396216][ C0] ret_from_fork+0x1f/0x30 [ 389.400644][ C0] [ 389.403664][ C0] task:kworker/u4:3 state:R running task stack:22736 pid: 161 ppid: 2 flags:0x00004000 [ 389.414433][ C0] Workqueue: bat_events batadv_nc_worker [ 389.420071][ C0] Call Trace: [ 389.423348][ C0] [ 389.426281][ C0] __schedule+0x11c3/0x4350 [ 389.430797][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 389.435823][ C0] ? release_firmware_map_entry+0x190/0x190 [ 389.441715][ C0] ? mark_lock+0x94/0x320 [ 389.446051][ C0] ? verify_lock_unused+0x140/0x140 [ 389.451248][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 389.456539][ C0] preempt_schedule_irq+0xbb/0x160 [ 389.461652][ C0] ? __cond_resched+0xd0/0xd0 [ 389.466348][ C0] ? rcu_is_watching+0x11/0xa0 [ 389.471114][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 389.476921][ C0] irqentry_exit+0x63/0x70 [ 389.481358][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 389.487339][ C0] RIP: 0010:__rcu_read_unlock+0x25/0xd0 [ 389.492884][ C0] Code: d0 58 00 eb d9 41 57 41 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d 25 21 9d 7e 48 8d 9f 3c 04 00 00 49 89 dc <49> c1 ec 03 43 0f b6 04 3c 84 c0 75 48 ff 0b 75 1d 4c 8d b7 40 04 [ 389.512493][ C0] RSP: 0018:ffffc90001ec7bb0 EFLAGS: 00000293 [ 389.518561][ C0] RAX: ffffffff8994ae3f RBX: ffff88801d8c3fbc RCX: ffff88801d8c3b80 [ 389.526532][ C0] RDX: 0000000000000000 RSI: ffffffff8a7a41e0 RDI: ffff88801d8c3b80 [ 389.534590][ C0] RBP: ffff88807d551340 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 389.542561][ C0] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffff88801d8c3fbc [ 389.550532][ C0] R13: 0000000000000000 R14: ffff88807c2acc80 R15: dffffc0000000000 [ 389.558510][ C0] ? batadv_nc_worker+0x1df/0x5c0 [ 389.563544][ C0] batadv_nc_worker+0x250/0x5c0 [ 389.568400][ C0] process_one_work+0x867/0xff0 [ 389.573261][ C0] ? worker_detach_from_pool+0x240/0x240 [ 389.578912][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 389.584214][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 389.589251][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 389.594798][ C0] ? wq_worker_running+0x97/0x170 [ 389.599820][ C0] worker_thread+0xad7/0x12a0 [ 389.604517][ C0] kthread+0x42e/0x520 [ 389.608583][ C0] ? rcu_lock_release+0x20/0x20 [ 389.613432][ C0] ? kthread_blkcg+0xd0/0xd0 [ 389.618023][ C0] ret_from_fork+0x1f/0x30 [ 389.622468][ C0] [ 389.625487][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g20897 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 389.636673][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 389.646635][ C0] rcu: RCU grace-period kthread stack dump: [ 389.652514][ C0] task:rcu_preempt state:R running task stack:27440 pid: 15 ppid: 2 flags:0x00004000 [ 389.663282][ C0] Call Trace: [ 389.666561][ C0] [ 389.669496][ C0] __schedule+0x11c3/0x4350 [ 389.674002][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 389.679466][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 389.684665][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 389.690554][ C0] ? _raw_spin_unlock+0x40/0x40 [ 389.695406][ C0] ? rcu_is_watching+0x11/0xa0 [ 389.700167][ C0] ? release_firmware_map_entry+0x190/0x190 [ 389.706267][ C0] schedule+0x11b/0x1e0 [ 389.710444][ C0] schedule_timeout+0x184/0x2d0 [ 389.715341][ C0] ? console_conditional_schedule+0x40/0x40 [ 389.721247][ C0] ? update_process_times+0x200/0x200 [ 389.726786][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 389.732348][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 389.737204][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 389.742417][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 389.747099][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 389.751866][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 389.757066][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 389.762269][ C0] rcu_gp_kthread+0x9a/0x370 [ 389.766867][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 389.771993][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 389.777896][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 389.782928][ C0] kthread+0x42e/0x520 [ 389.787029][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 389.792158][ C0] ? kthread_blkcg+0xd0/0xd0 [ 389.796751][ C0] ret_from_fork+0x1f/0x30 [ 389.801180][ C0] [ 389.804197][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 389.810529][ C0] NMI backtrace for cpu 0 [ 389.814853][ C0] CPU: 0 PID: 6987 Comm: syz.5.665 Tainted: G S syzkaller #0 [ 389.823847][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.833925][ C0] Call Trace: [ 389.837228][ C0] [ 389.840082][ C0] dump_stack_lvl+0x188/0x250 [ 389.844773][ C0] ? show_regs_print_info+0x20/0x20 [ 389.849986][ C0] ? load_image+0x410/0x410 [ 389.854514][ C0] ? irq_work_queue+0xbf/0x140 [ 389.859475][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 389.864581][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 389.870752][ C0] ? _printk+0xda/0x130 [ 389.874926][ C0] ? cpu_online+0x1d/0x30 [ 389.879270][ C0] ? load_image+0x410/0x410 [ 389.883812][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 389.889887][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 389.896286][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 389.902466][ C0] print_other_cpu_stall+0x1110/0x1270 [ 389.907942][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 389.912894][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 389.918358][ C0] rcu_sched_clock_irq+0x845/0x1120 [ 389.923574][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 389.928456][ C0] ? hrtimer_run_queues+0x162/0x400 [ 389.933668][ C0] ? account_process_tick+0x22a/0x3a0 [ 389.939053][ C0] update_process_times+0x193/0x200 [ 389.944259][ C0] tick_sched_timer+0x37d/0x560 [ 389.949109][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 389.954669][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 389.959874][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 389.965879][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 389.971015][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 389.977089][ C0] hrtimer_interrupt+0x397/0x8b0 [ 389.982051][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 389.988050][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 389.993687][ C0] [ 389.996634][ C0] [ 389.999564][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 390.005545][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 390.011371][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7e d3 93 f7 48 89 df e8 b6 aa 94 f7 e8 31 9b b5 f7 fb bf 01 00 00 00 96 c0 88 f7 65 8b 05 07 e8 38 76 85 c0 74 02 5b c3 e8 44 f5 36 [ 390.030987][ C0] RSP: 0018:ffffc9000406fbc0 EFLAGS: 00000282 [ 390.037074][ C0] RAX: 74e2ff544c1a9b00 RBX: ffff8880244fae40 RCX: 74e2ff544c1a9b00 [ 390.045062][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 390.053251][ C0] RBP: 0000000000000000 R08: ffff8880244fae43 R09: 1ffff1100489f5c8 [ 390.061404][ C0] R10: dffffc0000000000 R11: ffffed100489f5c9 R12: dffffc0000000000 [ 390.069398][ C0] R13: ffff8880244fae40 R14: 0000000000000021 R15: 000000001c000004 [ 390.077425][ C0] get_signal+0x11f2/0x12e0 [ 390.082153][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 390.087823][ C0] ? __ia32_sys_rt_sigreturn+0x624/0x750 [ 390.093496][ C0] ? load_gs_index+0x130/0x130 [ 390.098272][ C0] ? get_sigframe_size+0x10/0x10 [ 390.103230][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 390.108694][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 390.113986][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 390.119534][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 390.124993][ C0] do_syscall_64+0x58/0xa0 [ 390.129421][ C0] ? clear_bhb_loop+0x30/0x80 [ 390.134119][ C0] ? clear_bhb_loop+0x30/0x80 [ 390.138795][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.144690][ C0] RIP: 0033:0x7f84c76b0017 [ 390.149129][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 390.168743][ C0] RSP: 002b:00007f84c5908028 EFLAGS: 00000246 [ 390.174811][ C0] RAX: 0000000000000048 RBX: 00007f84c7937fa0 RCX: 00007f84c76b0019 [ 390.182780][ C0] RDX: 0000200000000280 RSI: 0000000000000026 RDI: 0000000000000005 [ 390.190758][ C0] RBP: 00007f84c774700c R08: 0000000000000000 R09: 0000000000000000 [ 390.198731][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.206726][ C0] R13: 00007f84c7938038 R14: 00007f84c7937fa0 R15: 00007ffc5668a698 [ 390.214721][ C0]