last executing test programs: 57.708063834s ago: executing program 4 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 57.287929354s ago: executing program 4 (id=775): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)={0x220000, 0x0, 0x29}, 0x18) 55.764773683s ago: executing program 4 (id=777): mkdir(0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 54.154200594s ago: executing program 4 (id=786): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) unshare(0x22020400) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 54.042403937s ago: executing program 4 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 50.716664101s ago: executing program 4 (id=813): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7ff}}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1}, 0x28) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) 35.487506658s ago: executing program 32 (id=813): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7ff}}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1}, 0x28) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) 4.813015268s ago: executing program 3 (id=1047): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 4.148884914s ago: executing program 1 (id=1052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000821}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2210448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x7c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@bridge_delneigh={0x38, 0x1e, 0x1, 0xf0bd2d, 0x25dfdbff, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}]}, 0x38}}, 0x20000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x60840, 0x8) read$FUSE(r5, &(0x7f0000002680)={0x2020}, 0x2020) 4.110463075s ago: executing program 5 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$session_to_parent(0x12) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 4.037034968s ago: executing program 3 (id=1054): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0xed, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x6d}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044040}, 0x44040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004045}, 0x80) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.716867306s ago: executing program 5 (id=1056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 3.15976679s ago: executing program 5 (id=1059): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.044662923s ago: executing program 3 (id=1060): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x6, 0x0, &(0x7f0000000100)="178d048604bf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x1, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 3.043287933s ago: executing program 1 (id=1061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x1, 0x9, 0x400, 0x4, 0x6, 0x7, 0x0, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.694178682s ago: executing program 3 (id=1063): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r0, r0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) r3 = socket$netlink(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1a8) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x3f6}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x3eb}}, 0x48}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xa2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.555160715s ago: executing program 5 (id=1064): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup2(r2, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 2.405019049s ago: executing program 3 (id=1065): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.399772089s ago: executing program 2 (id=1066): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) eventfd2(0xffffffff, 0x801) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) landlock_create_ruleset(0x0, 0x0, 0x0) 2.399123289s ago: executing program 0 (id=1076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$isdn_base(0x22, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.383529819s ago: executing program 1 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$session_to_parent(0x12) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 2.059662228s ago: executing program 0 (id=1068): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000004a40), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000004cc0)={0xb, @output={0x0, 0x1, {0xfffff000, 0xffffffff}, 0xed8d, 0x8001}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0x7, 0x840) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.059317998s ago: executing program 5 (id=1069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x5, 0x1, 0x80000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.913327071s ago: executing program 1 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 1.912413541s ago: executing program 0 (id=1081): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.814484214s ago: executing program 2 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.400468035s ago: executing program 0 (id=1072): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000340)={[{@debug}, {@lazytime}, {@noblock_validity}, {@delalloc}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1200204, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc64, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(r3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x47, 0xffffffffffffffff, 0x4, 0x9}) 1.249103948s ago: executing program 2 (id=1073): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) syz_open_procfs(0xffffffffffffffff, 0x0) close(r2) 1.248871868s ago: executing program 3 (id=1074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd531", 0x85}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.248682928s ago: executing program 5 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 879.943148ms ago: executing program 1 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x3fe}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)='\r', 0x5dc}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 871.194378ms ago: executing program 2 (id=1078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 383.31637ms ago: executing program 0 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x8010, 0xffffffffffffffff, 0x53b0e000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000380)=')\x80', 0x0) 303.859083ms ago: executing program 1 (id=1080): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0xb, 0xffffffff90a0efc5, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xe, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x4, 0x0, 0x800, 0x200000000003, 0x0, 0x96, {0x6, 0xfffffffffffffffd, 0x5, 0x10000000000008, 0x8000, 0x3, 0x7, 0x9, 0x9, 0x4000, 0x2, 0x0, r2, 0x5, 0x1}}, {0x4, 0x0, 0x2, 0x9, 'fd'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 303.602423ms ago: executing program 2 (id=1082): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$session_to_parent(0x12) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 66.982378ms ago: executing program 0 (id=1083): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x3b) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1b6) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000240)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1f7) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x800, 0x0) 0s ago: executing program 2 (id=1084): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.072214][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.080344][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.121159][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.135181][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.143628][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.159393][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.172890][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.182723][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.192912][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.202850][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.212822][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.222438][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.233411][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.242803][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.262985][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.273386][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.285497][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.294931][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.304178][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.315677][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.325578][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.355753][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.374674][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.384663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.401968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.411916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.424563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.442324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.451631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.460822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.470297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.483359][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.514499][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.526104][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.583195][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.607051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.627915][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.713797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.737533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.764580][ T4189] device veth0_vlan entered promiscuous mode [ 76.773552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.802657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.833145][ T4189] device veth1_vlan entered promiscuous mode [ 76.883748][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.920353][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.937128][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.956748][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.964436][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.032596][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.049923][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.064179][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.074648][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.085863][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.096125][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.119796][ T4189] device veth0_macvtap entered promiscuous mode [ 77.136611][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.151245][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.160426][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.169633][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.177264][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.197785][ T4196] device veth0_vlan entered promiscuous mode [ 77.214330][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.223559][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.238218][ T4189] device veth1_macvtap entered promiscuous mode [ 77.273009][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.282096][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.290965][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.299820][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.309294][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.327702][ T4196] device veth1_vlan entered promiscuous mode [ 77.342352][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.352890][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.384879][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.399112][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.408409][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.417980][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.427305][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.458691][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.471763][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.481046][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.491289][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.500618][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.514285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.523865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.533414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.542134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.555720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.564978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.575659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.584381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.594524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.603885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.614680][ T4190] device veth0_vlan entered promiscuous mode [ 77.638500][ T4187] device veth0_vlan entered promiscuous mode [ 77.660307][ T4188] device veth0_vlan entered promiscuous mode [ 77.698354][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.712961][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.721638][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.733275][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.742242][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.750696][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.767190][ T4188] device veth1_vlan entered promiscuous mode [ 77.786761][ T4196] device veth0_macvtap entered promiscuous mode [ 77.810896][ T4190] device veth1_vlan entered promiscuous mode [ 77.829514][ T4196] device veth1_macvtap entered promiscuous mode [ 77.852159][ T4187] device veth1_vlan entered promiscuous mode [ 77.878558][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.888776][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.898122][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.907053][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.915305][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.924008][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.935239][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.943758][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.952120][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 77.958490][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 77.965558][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.979605][ T4188] device veth0_macvtap entered promiscuous mode [ 77.997286][ T4188] device veth1_macvtap entered promiscuous mode [ 78.027451][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 78.036699][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 78.043021][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 78.056094][ T4190] device veth0_macvtap entered promiscuous mode [ 78.063259][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.073535][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.102774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.119116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.129157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.138344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.147113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.155997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.165159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.177233][ T4190] device veth1_macvtap entered promiscuous mode [ 78.186753][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.200819][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.213619][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.222491][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.236944][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.247960][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.258699][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.272636][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.306595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.315778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.325720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.336184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.345413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.360373][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.372294][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.383947][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.393592][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.405560][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.415685][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.427119][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.439059][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.455394][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.465520][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.474721][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.484914][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.502114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.512505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.522914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.532583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.544773][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.557044][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.565904][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.575634][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.592395][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.600195][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.608196][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.622457][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.625299][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.633099][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.633114][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.633131][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.638880][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.711274][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.720367][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.730207][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.742225][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.753286][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.764618][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.776994][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.787407][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.798545][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.810170][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.820749][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.833007][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.843093][ T4187] device veth0_macvtap entered promiscuous mode [ 78.865702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.875626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.884617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.898437][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.909947][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.920725][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.929885][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.953354][ T4187] device veth1_macvtap entered promiscuous mode [ 79.038074][ T3103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.059861][ T3103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.073838][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.093853][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.104520][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.115540][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.126356][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.137310][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.149169][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.159906][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.171994][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.190510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.201380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.210509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.220716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.245825][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.257789][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.268187][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.279400][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.292032][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.303981][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.315337][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.326688][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.339758][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.360874][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.378318][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.400990][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.412282][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.422353][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.436847][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.443290][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.458365][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.490292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.498584][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.514325][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.525834][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.620809][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.658717][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.763369][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.780940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.786481][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.809636][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.819443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.838344][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.854736][ T4281] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 79.854736][ T4281] Ä5¾' [ 79.871874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.884640][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.903551][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.939603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.954371][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 80.028618][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 80.038938][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.047142][ T4285] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 80.053496][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 80.059944][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.093395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.107611][ T1324] Bluetooth: hci3: command 0x0419 tx timeout [ 80.114272][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 80.137639][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 80.315593][ T4291] loop4: detected capacity change from 0 to 164 [ 80.395750][ T4287] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 81.264987][ T4291] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 82.429561][ T4299] Bluetooth: hci5: command 0x1003 tx timeout [ 82.435731][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 83.779971][ T4301] loop0: detected capacity change from 0 to 32768 [ 83.859548][ T4301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.10 (4301) [ 83.908365][ T4326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.925368][ T4324] loop4: detected capacity change from 0 to 4096 [ 83.969462][ T4301] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 83.979072][ T4324] ======================================================= [ 83.979072][ T4324] WARNING: The mand mount option has been deprecated and [ 83.979072][ T4324] and is ignored by this kernel. Remove the mand [ 83.979072][ T4324] option from the mount to silence this warning. [ 83.979072][ T4324] ======================================================= [ 84.034950][ T4301] BTRFS info (device loop0): using free space tree [ 84.056312][ T4301] BTRFS info (device loop0): has skinny extents [ 84.071681][ T4324] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 84.509618][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 84.550095][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 85.400786][ T4301] BTRFS error (device loop0): open_ctree failed: -12 [ 85.786861][ T4332] bond0: (slave bond_slave_1): Releasing backup interface [ 86.011896][ T4187] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 86.025412][ T4187] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 86.064373][ T4187] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 86.586754][ T4232] Bluetooth: hci5: command 0x1009 tx timeout [ 86.839453][ T4370] loop4: detected capacity change from 0 to 512 [ 86.850126][ T4366] binder_alloc: 4365: pid 4365 spamming oneway? 2 buffers allocated for a total size of 5120 [ 86.901873][ T4370] EXT4-fs: Invalid sb specification: sb=0x000000000000000eJdebug,jqfmt=vfsold,nobh,barrier,usrjquota="block_validity,errors=remount-ro,, [ 86.930101][ T4370] EXT4-fs (loop4): Unrecognized mount option "sb=0x000000000000000eJdebug" or missing value [ 86.983614][ T4369] loop3: detected capacity change from 0 to 1024 [ 87.032144][ T4372] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 87.060343][ T4372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.194228][ T4370] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 87.368945][ T4382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'. [ 87.690046][ T4369] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.518493][ T4387] loop4: detected capacity change from 0 to 1024 [ 88.616356][ T4387] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 89.076549][ T1324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.326309][ T1324] usb 1-1: Using ep0 maxpacket: 32 [ 89.447134][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.472411][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.500497][ T1324] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 89.527894][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.579065][ T1324] usb 1-1: config 0 descriptor?? [ 89.737555][ T4402] process 'syz.2.33' launched './file0' with NULL argv: empty string added [ 90.099406][ T1324] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 90.135060][ T1324] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 90.201703][ T1324] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 90.230617][ T4412] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 90.332630][ T4412] bond1 (unregistering): Released all slaves [ 90.356641][ T1324] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 90.475380][ T4414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 90.499620][ T4414] device veth0_to_team entered promiscuous mode [ 90.778994][ T4418] device syzkaller0 entered promiscuous mode [ 90.804523][ T1324] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 90.913682][ T1324] Bluetooth: hci0: command 0x0c3a tx timeout [ 91.069786][ T4418] tipc: Started in network mode [ 91.091509][ T4418] tipc: Node identity 9651658c5875, cluster identity 4711 [ 92.007275][ T4418] tipc: Enabled bearer , priority 0 [ 92.016276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.103543][ T4428] ft260 0003:0403:6030.0001: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 92.116248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 92.156484][ T4417] tipc: Resetting bearer [ 92.191767][ T13] cfg80211: failed to load regulatory.db [ 92.199728][ T4299] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 92.258069][ T4417] tipc: Disabling bearer [ 92.424232][ T4433] device syzkaller0 entered promiscuous mode [ 92.453408][ T4435] device syzkaller0 entered promiscuous mode [ 92.629627][ T4437] device syzkaller0 entered promiscuous mode [ 92.988721][ T1324] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.236431][ T7] usb 1-1: USB disconnect, device number 2 [ 93.332823][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 93.649530][ T4466] loop1: detected capacity change from 0 to 512 [ 93.711216][ T4471] loop0: detected capacity change from 0 to 2048 [ 93.766532][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.784078][ T4473] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 93.851076][ T4466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.870617][ T4471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.888798][ T4466] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.016295][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 94.148371][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.293754][ T4487] xt_hashlimit: size too large, truncated to 1048576 [ 94.384249][ T4487] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 94.422921][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 94.537365][ T4489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.61'. [ 94.729274][ T7] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 94.802628][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.938703][ T7] usb 5-1: Product: syz [ 95.100889][ T7] usb 5-1: Manufacturer: syz [ 95.136657][ T7] usb 5-1: SerialNumber: syz [ 95.156445][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.185778][ T7] usb 5-1: config 0 descriptor?? [ 95.193703][ T4232] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 95.223743][ T4299] Bluetooth: hci0: command 0x0c24 tx timeout [ 95.259102][ T7] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 95.281004][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 95.287924][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 95.332320][ T4232] usb 4-1: can't read configurations, error -71 [ 95.342490][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.360619][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 95.368874][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 95.388952][ T4491] device macsec1 entered promiscuous mode [ 95.412065][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.421473][ T4491] device virt_wifi0 entered promiscuous mode [ 95.478219][ T4473] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 95.514073][ T7] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 95.523967][ T4473] ttusb2: i2c rd len=58 too high [ 95.529686][ T7] usb 5-1: media controller created [ 95.563976][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.619832][ T7] usb 5-1: selecting invalid altsetting 3 [ 95.628876][ T7] ttusb2: set interface to alts=3 failed [ 95.701604][ T7] DVB: Unable to find symbol tda10086_attach() [ 95.708891][ T7] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 95.767878][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 95.773738][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 96.074354][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 96.218943][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 96.413744][ T7] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 96.747700][ T7] usb 5-1: USB disconnect, device number 2 [ 97.506934][ T7] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 99.495748][ T4543] device syz_tun entered promiscuous mode [ 99.515447][ T4543] device vlan2 entered promiscuous mode [ 99.630198][ T4549] loop2: detected capacity change from 0 to 256 [ 100.923971][ T4562] Zero length message leads to an empty skb [ 103.588866][ T4588] netlink: 68 bytes leftover after parsing attributes in process `syz.0.85'. [ 103.603718][ T4587] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.702329][ T4587] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.136640][ T4354] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.192709][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 104.206585][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.302820][ T4607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.382447][ T4610] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.546641][ T4354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.592967][ T4614] device syzkaller0 entered promiscuous mode [ 104.602132][ T4354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.628410][ T4354] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 104.646688][ T4354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.673800][ T4354] usb 3-1: config 0 descriptor?? [ 104.969786][ T4618] Cannot find set identified by id 0 to match [ 105.264468][ T4354] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 105.348837][ T4354] cypress 0003:04B4:07B1.0002: item fetching failed at offset 6/41 [ 105.559644][ T4354] cypress 0003:04B4:07B1.0002: parse failed [ 105.604020][ T4354] cypress: probe of 0003:04B4:07B1.0002 failed with error -22 [ 106.232365][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 106.854340][ T4635] No source specified [ 107.299786][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 107.489642][ T4354] usb 3-1: USB disconnect, device number 2 [ 107.679828][ T4641] netlink: 14 bytes leftover after parsing attributes in process `syz.4.106'. [ 107.709517][ T4649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.427573][ T4641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.469471][ T4641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.513523][ T4641] bond0 (unregistering): Released all slaves [ 110.511293][ T4686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 112.027644][ T4299] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.016431][ T4299] usb 3-1: Using ep0 maxpacket: 32 [ 113.136770][ T4299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.159050][ T4299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.192165][ T4299] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 113.230387][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.248220][ T4712] binder: 4711:4712 ioctl c0306201 200000000080 returned -14 [ 113.266093][ T4299] usb 3-1: config 0 descriptor?? [ 113.276360][ T4712] binder: BINDER_SET_CONTEXT_MGR already set [ 113.291123][ T4712] binder: 4711:4712 ioctl 4018620d 200000000040 returned -16 [ 113.301162][ T4712] binder: 4711:4712 ioctl c0306201 2000000003c0 returned -14 [ 114.275655][ T4299] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 114.337366][ T4726] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 114.365772][ T4726] netlink: 'syz.2.122': attribute type 2 has an invalid length. [ 114.376750][ T4725] netlink: 48 bytes leftover after parsing attributes in process `syz.3.133'. [ 114.387524][ T4725] netlink: 48 bytes leftover after parsing attributes in process `syz.3.133'. [ 114.558415][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 114.600263][ T4235] usb 3-1: USB disconnect, device number 3 [ 114.611737][ T4733] device syzkaller0 entered promiscuous mode [ 114.626061][ T4722] loop1: detected capacity change from 0 to 8192 [ 116.857966][ T4751] sctp: failed to load transform for md5: -2 [ 117.176196][ C1] sched: RT throttling activated [ 118.230356][ T4772] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 118.309653][ T4742] loop0: detected capacity change from 0 to 32768 [ 118.594846][ T4774] syz.1.144 (4774) used greatest stack depth: 20976 bytes left [ 118.877474][ T4785] netlink: 79 bytes leftover after parsing attributes in process `syz.4.145'. [ 118.922618][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 118.934482][ T4777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 118.962504][ T4777] netlink: 'syz.4.145': attribute type 11 has an invalid length. [ 120.746238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 121.306899][ T4795] ODEBUG: Out of memory. ODEBUG disabled [ 121.407592][ T4809] binder_alloc: 4799: binder_alloc_buf size 12224 failed, no address space [ 121.578889][ T4809] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 121.795155][ T4801] syz.1.154 (4801): drop_caches: 2 [ 123.044267][ T26] audit: type=1326 audit(1785767457.409:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4831 comm="syz.3.162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11321b2019 code=0x0 [ 123.281892][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 125.338244][ T4857] xt_CONNSECMARK: invalid mode: 0 [ 125.461666][ T4860] loop3: detected capacity change from 0 to 1024 [ 126.533692][ T4873] loop1: detected capacity change from 0 to 256 [ 128.158558][ T4873] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 129.575920][ T155] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 130.648880][ T4893] MPTCP: addr_signal error, add_addr=1, echo=0 [ 130.659701][ T4892] MPTCP: addr_signal error, add_addr=1, echo=0 [ 132.740213][ T4905] netlink: 'syz.1.184': attribute type 4 has an invalid length. [ 132.763607][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 132.872126][ T4909] netlink: 'syz.1.184': attribute type 4 has an invalid length. [ 133.150409][ T4910] loop2: detected capacity change from 0 to 8192 [ 133.176832][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.183584][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.210702][ T4921] capability: warning: `syz.1.189' uses deprecated v2 capabilities in a way that may be insecure [ 133.281804][ T4910] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.385560][ T4922] loop4: detected capacity change from 0 to 512 [ 134.015379][ T4922] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 134.072557][ T4922] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 134.116022][ T4928] loop3: detected capacity change from 0 to 2048 [ 134.189209][ T4922] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #15: comm syz.4.187: corrupted xattr block 252 [ 134.211835][ T4922] EXT4-fs (loop4): Remounting filesystem read-only [ 134.218469][ T4922] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 134.229234][ T4922] EXT4-fs (loop4): 1 orphan inode deleted [ 134.235543][ T4922] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000002,mblk_io_submit,noquota,nodiscard,nodiscard,usrjquota=,norecovery,init_itable=0x0000000000000000,. Quota mode: none. [ 134.374678][ T4933] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.677826][ T4942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.194'. [ 136.025024][ T4969] loop4: detected capacity change from 0 to 128 [ 136.066319][ T4962] device bond_slave_0 entered promiscuous mode [ 136.084398][ T4962] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.100998][ T4969] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000024,norecovery,,errors=continue. Quota mode: none. [ 136.125326][ T4962] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 136.170152][ T4968] netlink: 'syz.2.201': attribute type 10 has an invalid length. [ 136.186470][ T4969] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.207080][ T4968] device wlan1 entered promiscuous mode [ 136.213753][ T4968] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.222580][ T4974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 136.264567][ T4974] netlink: 17 bytes leftover after parsing attributes in process `syz.0.203'. [ 136.345584][ T4974] tipc: Invalid UDP bearer configuration [ 136.345635][ T4974] tipc: Enabling of bearer rejected, failed to enable media [ 136.437822][ T4983] loop1: detected capacity change from 0 to 1024 [ 136.690747][ T4983] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.804645][ T5003] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.813644][ T5003] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.396236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 143.426205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 143.446205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 143.466227][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 143.476211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 143.486210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 143.496209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 143.847649][ T5003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.005595][ T5003] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.015329][ T5003] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.035348][ T5003] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.045950][ T5003] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.093396][ T5003] device virt_wifi0 left promiscuous mode [ 144.203103][ T5003] syz.0.213 (5003) used greatest stack depth: 20368 bytes left [ 144.226473][ T5062] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.559056][ T5071] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.798908][ T5062] usb 4-1: Using ep0 maxpacket: 8 [ 145.828889][ T5071] bond1: (slave macvlan2): making interface the new active one [ 145.851404][ T5071] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 146.217614][ T5062] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 146.253378][ T5062] usb 4-1: config 179 has no interface number 0 [ 146.339940][ T5062] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 146.829183][ T5062] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 146.841038][ T5062] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.852659][ T5062] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 146.865420][ T5062] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 146.879017][ T5062] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 146.933235][ T5062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.996446][ T5062] usb 4-1: can't set config #179, error -71 [ 147.033369][ T5062] usb 4-1: USB disconnect, device number 4 [ 150.871827][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 150.951560][ T5124] device bridge_slave_1 left promiscuous mode [ 150.980561][ T5128] loop0: detected capacity change from 0 to 256 [ 151.000864][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.107135][ T5124] device bridge_slave_0 left promiscuous mode [ 151.134075][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.156361][ T5062] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.165610][ T5128] FAT-fs (loop0): Directory bread(block 64) failed [ 151.192781][ T5128] FAT-fs (loop0): Directory bread(block 65) failed [ 151.252630][ T5128] FAT-fs (loop0): Directory bread(block 66) failed [ 151.278465][ T5128] FAT-fs (loop0): Directory bread(block 67) failed [ 151.310687][ T5128] FAT-fs (loop0): Directory bread(block 68) failed [ 151.386553][ T5128] FAT-fs (loop0): Directory bread(block 69) failed [ 151.394525][ T5128] FAT-fs (loop0): Directory bread(block 70) failed [ 151.412471][ T5128] FAT-fs (loop0): Directory bread(block 71) failed [ 151.435221][ T5128] FAT-fs (loop0): Directory bread(block 72) failed [ 151.460395][ T5128] FAT-fs (loop0): Directory bread(block 73) failed [ 151.566696][ T5062] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 151.586628][ T5133] loop2: detected capacity change from 0 to 32768 [ 151.595064][ T5062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.631776][ T5133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.249 (5133) [ 151.703958][ T5133] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 151.713470][ T5133] BTRFS info (device loop2): use zlib compression, level 3 [ 151.721325][ T5133] BTRFS info (device loop2): turning on sync discard [ 151.728107][ T5133] BTRFS info (device loop2): using free space tree [ 151.734655][ T5133] BTRFS info (device loop2): has skinny extents [ 151.916982][ T5062] cxacru 4-1:1.0: invalid response length to cm 0x90: 0 [ 152.020678][ T5150] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 152.061381][ T5133] BTRFS info (device loop2): enabling ssd optimizations [ 152.323492][ T5150] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 153.804600][ T26] audit: type=1800 audit(1785767488.239:3): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.249" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 153.908151][ T1110] usb 4-1: USB disconnect, device number 5 [ 155.775082][ T5180] loop1: detected capacity change from 0 to 8192 [ 156.053058][ T5194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.259'. [ 156.740134][ T5197] loop0: detected capacity change from 0 to 512 [ 156.925847][ T5197] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.010739][ T5197] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.079068][ T5195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.437474][ T5213] ceph: No mds server is up or the cluster is laggy [ 157.496550][ T5219] loop0: detected capacity change from 0 to 512 [ 157.641237][ T5219] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 157.669207][ T5219] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.040471][ T5224] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.265: iget: bad i_size value: 2533274857506816 [ 160.033147][ T5233] device syzkaller0 entered promiscuous mode [ 160.280995][ T5235] loop1: detected capacity change from 0 to 2048 [ 160.304416][ T5242] device syzkaller0 entered promiscuous mode [ 160.514618][ T5235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.451988][ T5256] loop4: detected capacity change from 0 to 512 [ 161.466365][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.589663][ T5256] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 161.599248][ T5256] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.277: corrupted in-inode xattr [ 161.665197][ T5256] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.277: couldn't read orphan inode 15 (err -117) [ 161.684612][ T5263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 161.735181][ T5256] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,abort,,errors=continue. Quota mode: writeback. [ 161.872186][ T5265] bridge0: port 3(syz_tun) entered blocking state [ 161.881031][ T5265] bridge0: port 3(syz_tun) entered disabled state [ 161.889454][ T5265] bridge0: port 3(syz_tun) entered blocking state [ 161.895977][ T5265] bridge0: port 3(syz_tun) entered forwarding state [ 162.086597][ T5267] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 162.096028][ T5267] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 164.614073][ T5290] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 165.568632][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.578281][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.586006][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.802883][ T5307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.808715][ T5295] team0: Port device team_slave_0 removed [ 166.859975][ T5295] team0: Port device team_slave_1 removed [ 166.927112][ T5295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.994733][ T5295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.164988][ T5295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.238887][ T5295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.582542][ T5320] loop4: detected capacity change from 0 to 1024 [ 169.988029][ T5320] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 170.031127][ T5320] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.073904][ T5320] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.091678][ T5320] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.294: Freeing blocks not in datazone - block = 0, count = 4096 [ 170.116261][ T5320] EXT4-fs (loop4): Remounting filesystem read-only [ 170.124060][ T5320] EXT4-fs (loop4): 1 orphan inode deleted [ 170.135299][ T5320] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback. [ 170.272388][ T5320] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 16: comm syz.4.294: lblock 0 mapped to illegal pblock 16 (length 1) [ 170.594735][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 170.626282][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 170.695407][ T5349] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.705132][ T5349] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.714045][ T5349] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.723005][ T5349] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.789249][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 170.822114][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 170.907781][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.102104][ T5361] using random self ethernet address [ 171.130727][ T5361] using random host ethernet address [ 175.321734][ T5062] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 175.566362][ T5062] usb 2-1: Using ep0 maxpacket: 8 [ 175.935893][ T5062] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 175.952707][ T5062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.135457][ T5062] usb 2-1: can't set config #252, error -71 [ 176.191974][ T5062] usb 2-1: USB disconnect, device number 2 [ 178.174992][ T5441] device syzkaller0 entered promiscuous mode [ 180.010844][ T5454] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.283324][ T5461] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 181.182579][ T5466] netlink: 'syz.4.335': attribute type 25 has an invalid length. [ 184.715491][ T5504] device syzkaller0 entered promiscuous mode [ 186.103305][ T5520] xt_ipcomp: unknown flags 1D [ 186.182549][ T5524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.231605][ T5528] smc: net device lo applied user defined pnetid SYZ0 [ 186.346793][ T5525] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 186.392417][ T5532] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 187.570160][ T5544] netlink: 'syz.3.355': attribute type 40 has an invalid length. [ 187.717950][ T5548] loop4: detected capacity change from 0 to 16 [ 188.569536][ T5548] erofs: (device loop4): erofs_read_superblock: blkszbits 10 isn't supported on this platform [ 189.005808][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.469098][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.598118][ T5564] device syzkaller0 entered promiscuous mode [ 190.846430][ T4250] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 191.612177][ T4250] usb 2-1: Using ep0 maxpacket: 32 [ 192.055406][ T4250] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.129606][ T4250] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 192.148608][ T5595] tipc: Failed to remove unknown binding: 66,0,0/0:3453313636/3453313637 [ 192.321685][ T4250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.366586][ T4250] usb 2-1: config 0 descriptor?? [ 192.384750][ T5599] MPTCP: addr_signal error, add_addr=1, echo=0 [ 192.400356][ T5599] MPTCP: addr_signal error, add_addr=1, echo=0 [ 192.407070][ T5599] MPTCP: addr_signal error, add_addr=1, echo=0 [ 192.419350][ T4250] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 193.441019][ T5611] loop0: detected capacity change from 0 to 256 [ 194.254940][ T4230] usb 2-1: USB disconnect, device number 3 [ 195.218655][ T5621] infiniband syz0: set down [ 195.252279][ T5621] infiniband syz0: added ipvlan1 [ 195.289133][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.300201][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.340825][ T5621] infiniband syz0: Couldn't open port 1 [ 195.423527][ T5621] RDS/IB: syz0: added [ 195.434826][ T5621] smc: adding ib device syz0 with port count 1 [ 195.467760][ T5621] smc: ib device syz0 port 1 has pnetid [ 195.879566][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 196.090081][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.523912][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.701888][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 196.733053][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 196.740488][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 197.306949][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 197.318396][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 201.224347][ T5684] device syzkaller0 entered promiscuous mode [ 203.114036][ T5708] loop3: detected capacity change from 0 to 512 [ 203.366848][ T5708] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.386317][ T5708] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.615590][ T5747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.414'. [ 206.715118][ T5750] loop3: detected capacity change from 0 to 4096 [ 206.748242][ T5757] netlink: 'syz.0.413': attribute type 11 has an invalid length. [ 206.798064][ T5750] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 206.833187][ T5750] ntfs3: loop3: Failed to load $Extend. [ 208.794979][ T4190] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 210.230732][ T4230] Bluetooth: hci4: command 0x0405 tx timeout [ 211.007957][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'. [ 211.807218][ T5800] netlink: 276 bytes leftover after parsing attributes in process `syz.0.429'. [ 212.631538][ T5800] tipc: Enabling of bearer rejected, failed to enable media [ 212.932645][ T5819] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 213.487962][ T5819] device bond2 entered promiscuous mode [ 213.495347][ T5819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.520891][ T5825] bond2: (slave erspan1): making interface the new active one [ 213.531710][ T5825] device erspan1 entered promiscuous mode [ 213.544578][ T5825] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 213.576194][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 213.817107][ T5835] autofs4:pid:5835:autofs_fill_super: called with bogus options [ 215.125694][ T5150] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 215.473444][ T5825] syz.0.433 (5825) used greatest stack depth: 18576 bytes left [ 215.594514][ T5846] loop0: detected capacity change from 0 to 512 [ 215.642164][ T5846] EXT4-fs (loop0): Unrecognized mount option "appraise_type=imasig" or missing value [ 216.095791][ T5842] team0: Device xfrm0 is of different type [ 216.187907][ T5844] tipc: Enabled bearer , priority 0 [ 217.487138][ T4351] tipc: Node number set to 3458491788 [ 217.589924][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 217.821472][ T4250] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 217.852335][ T5868] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.862184][ T5868] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.871358][ T5868] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.880144][ T5868] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.298234][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 218.405244][ T5880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'. [ 218.603774][ T5884] device syzkaller0 entered promiscuous mode [ 218.626662][ T4250] usb 1-1: config 127 has an invalid interface number: 138 but max is 0 [ 218.638952][ T4250] usb 1-1: config 127 has no interface number 0 [ 218.645618][ T4250] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 218.659179][ T4250] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 218.836544][ T4250] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 218.845663][ T4250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.864674][ T4250] usb 1-1: Product: syz [ 218.869664][ T4250] usb 1-1: Manufacturer: syz [ 218.874337][ T4250] usb 1-1: SerialNumber: syz [ 218.920265][ T5861] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 218.934023][ T5861] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 218.966283][ T4230] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 219.222231][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 219.446520][ T4250] usb 1-1: probing VID:PID(0424:012C) [ 219.455466][ T4250] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0F [ 219.466426][ T4230] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 219.643375][ T4230] usb 4-1: config 0 has no interface number 0 [ 220.252723][ T4230] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 220.264301][ T4250] usb 1-1: vub300 testing BULK OUT EndPoint(1) 09 [ 220.271258][ T4250] usb 1-1: vub300 testing BULK OUT EndPoint(2) 0C [ 220.278277][ T4230] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 220.289671][ T4250] usb 1-1: ignoring unexpected bulk_out endpoint [ 220.296066][ T4250] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 220.315622][ T5909] trusted_key: encrypted_key: key user:syz not found [ 220.330707][ T4250] vub300: probe of 1-1:127.138 failed with error -22 [ 220.361540][ T4250] usb 1-1: USB disconnect, device number 3 [ 220.476507][ T4230] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 220.490055][ T4230] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 220.506026][ T4230] usb 4-1: Product: syz [ 220.514162][ T4230] usb 4-1: Manufacturer: syz [ 220.522969][ T4230] usb 4-1: SerialNumber: syz [ 220.541169][ T4230] usb 4-1: config 0 descriptor?? [ 220.588065][ T4230] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 220.597244][ T4230] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 220.612082][ T4230] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 220.630174][ T4230] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 220.651793][ T4230] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 220.675834][ T4230] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 220.700498][ T4230] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 220.727927][ T4230] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 220.763242][ T4230] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 220.798226][ T4230] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 221.043513][ T4230] usb 4-1: USB disconnect, device number 6 [ 221.055844][ T4230] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 221.070620][ T4230] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 221.093071][ T5922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.109971][ T4230] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 221.129432][ T4230] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 221.141020][ T4230] keyspan 4-1:0.107: device disconnected [ 222.365122][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.471'. [ 222.481920][ T5937] device syzkaller0 entered promiscuous mode [ 222.496080][ T5937] tipc: Started in network mode [ 222.514355][ T5937] tipc: Node identity f210ecd6c0b1, cluster identity 4711 [ 222.553478][ T5937] tipc: Enabled bearer , priority 0 [ 222.628449][ T5936] tipc: Resetting bearer [ 222.708920][ T5936] tipc: Disabling bearer [ 224.640908][ T5957] sctp: [Deprecated]: syz.4.480 (pid 5957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.640908][ T5957] Use struct sctp_sack_info instead [ 224.782026][ T5962] sctp: [Deprecated]: syz.4.480 (pid 5962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.782026][ T5962] Use struct sctp_sack_info instead [ 224.826419][ T5961] device syzkaller0 entered promiscuous mode [ 226.327612][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.544702][ T5977] device syzkaller0 entered promiscuous mode [ 227.993063][ T6000] loop4: detected capacity change from 0 to 2048 [ 228.021261][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.044166][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.064940][ T5998] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.366731][ T6009] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.084911][ T6000] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=11586, location=11586 [ 229.166524][ T6000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.211760][ T5998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.527052][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.786649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.194050][ T6021] xt_hashlimit: max too large, truncated to 1048576 [ 230.402214][ T6028] netlink: 'syz.4.502': attribute type 1 has an invalid length. [ 230.486313][ T4351] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 230.716807][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.246679][ T4351] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 232.255824][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.358528][ T4351] usb 1-1: config 0 descriptor?? [ 232.432189][ T4351] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 232.998289][ T4351] gspca_sunplus: reg_w_riv err -110 [ 233.004385][ T4351] sunplus: probe of 1-1:0.0 failed with error -110 [ 233.056766][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.967536][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.039570][ T6062] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.049619][ T6062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.079335][ T5195] usb 1-1: USB disconnect, device number 4 [ 235.208423][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 236.972746][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.504053][ T6099] device syzkaller0 entered promiscuous mode [ 239.226480][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.381563][ T6106] tipc: Failed to obtain node identity [ 239.416544][ T6106] tipc: Enabling of bearer rejected, failed to enable media [ 241.116472][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.187301][ T6132] binder_alloc: 6131: pid 6131 spamming oneway? 2 buffers allocated for a total size of 5120 [ 241.297749][ T6132] binder_alloc: 6131: pid 6131 spamming oneway? 3 buffers allocated for a total size of 5128 [ 243.086957][ T4789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.117656][ T6143] device syzkaller0 entered promiscuous mode [ 243.373481][ T6150] loop0: detected capacity change from 0 to 16 [ 243.586093][ T6150] erofs: (device loop0): mounted with root inode @ nid 36. [ 244.546008][ T6159] attempt to access beyond end of device [ 244.546008][ T6159] loop0: rw=0, want=34359738368, limit=16 [ 244.962736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.977002][ T5048] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 245.945003][ T6162] device syzkaller0 entered promiscuous mode [ 247.200356][ T5048] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.210212][ T5048] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 247.237967][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.406524][ T5048] usb 4-1: string descriptor 0 read error: -71 [ 247.420200][ T5048] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 247.568667][ T5048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.787028][ T5048] usb 4-1: can't set config #1, error -71 [ 247.876315][ T4308] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 247.922959][ T5048] usb 4-1: USB disconnect, device number 7 [ 248.166404][ T4308] usb 2-1: Using ep0 maxpacket: 16 [ 248.326563][ T4308] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 248.383295][ T4308] usb 2-1: config 0 has no interface number 0 [ 248.436542][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.475993][ T4308] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 248.611213][ T4308] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 248.926369][ T4308] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 249.098303][ T4308] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 249.136343][ T4308] usb 2-1: Product: syz [ 249.141221][ T4308] usb 2-1: Manufacturer: syz [ 249.147200][ T4308] usb 2-1: SerialNumber: syz [ 249.161909][ T4308] usb 2-1: config 0 descriptor?? [ 249.208082][ T4308] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 249.215968][ T4308] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 249.273007][ T4308] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 249.315307][ T4308] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 249.364319][ T4308] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 249.411994][ T4308] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 249.469046][ T4308] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 249.525607][ T4308] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 249.526894][ T5195] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 249.542168][ T4308] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 249.562869][ T4308] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 249.863947][ T4308] usb 2-1: USB disconnect, device number 4 [ 249.890209][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.962625][ T4308] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 250.156234][ T5195] usb 5-1: Using ep0 maxpacket: 16 [ 250.291934][ T4308] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 250.309637][ T4308] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 250.330167][ T4308] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 250.387509][ T4308] keyspan 2-1:0.107: device disconnected [ 250.441636][ T5195] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 250.466274][ T5195] usb 5-1: config 0 has no interface number 0 [ 250.482924][ T5195] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 252.290995][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 252.406510][ T5195] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 252.436268][ T5195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.468103][ T5195] usb 5-1: Product: syz [ 252.495996][ T5195] usb 5-1: config 0 descriptor?? [ 252.550497][ T5195] usb 5-1: can't set config #0, error -71 [ 252.673976][ T5195] usb 5-1: USB disconnect, device number 3 [ 252.706572][ T4789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.637844][ T6242] VFS: file-max limit 0 reached [ 253.707851][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 253.836477][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.400280][ T6272] xt_connbytes: Forcing CT accounting to be enabled [ 254.407560][ T6272] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 254.663551][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 255.176510][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.472020][ T6285] device syzkaller0 entered promiscuous mode [ 255.770428][ T6293] CacheFiles: No cache directory specified [ 256.066612][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.073165][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.386519][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.523503][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 256.558441][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 256.585055][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 256.604722][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 256.627303][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 256.643049][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 256.665448][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 257.237724][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 257.265212][ T6347] device syzkaller0 entered promiscuous mode [ 257.704157][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.970261][ T6376] cgroup: Name too long [ 258.253555][ T6384] 9pnet_virtio: no channels available for device syz [ 258.265341][ T6383] device syzkaller0 entered promiscuous mode [ 258.318104][ T6387] device syzkaller0 entered promiscuous mode [ 258.494662][ T6397] futex_wake_op: syz.2.605 tries to shift op by 144; fix this program [ 258.623984][ T6363] tipc: Failed to remove unknown binding: 66,0,0/3458491788:3458434740/3458434742 [ 258.670618][ T6363] tipc: Failed to remove unknown binding: 66,0,0/3458491788:3458434740/3458434741 [ 258.704655][ T6363] tipc: Failed to remove unknown binding: 66,0,0/3458491788:3458434740/3458434742 [ 258.723860][ T6363] tipc: Failed to remove unknown binding: 66,0,0/3458491788:3458434740/3458434741 [ 258.937683][ T4789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.063970][ T6411] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 259.082449][ T6411] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 259.638806][ T6431] device syzkaller0 entered promiscuous mode [ 259.865307][ T6439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.875006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.891044][ T6439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.903603][ T6439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.912649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.966040][ T6441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.033615][ T6444] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 260.045017][ T6444] netlink: 76 bytes leftover after parsing attributes in process `syz.4.619'. [ 260.167631][ T4789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.284509][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 260.299150][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 260.893670][ T6460] tipc: Cannot configure node identity twice [ 261.297780][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.355081][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.631'. [ 262.536446][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.126821][ T6505] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 263.176326][ C1] Unknown status report in ack skb [ 264.045722][ T4789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.451200][ T26] audit: type=1800 audit(1785767855.605:4): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.633" name="bus" dev="ramfs" ino=40512 res=0 errno=0 [ 264.678048][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.648'. [ 265.475217][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.568101][ T6549] tipc: Failed to remove unknown binding: 66,1,1/0:1084848078/1084848080 [ 267.258526][ T6576] device syzkaller0 entered promiscuous mode [ 267.587331][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.084298][ T6603] device ipip1 entered promiscuous mode [ 268.523787][ T6621] No such timeout policy "syz1" [ 268.886379][ T4789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.091181][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.154632][ T6650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.694'. [ 271.396623][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.620284][ T6641] loop1: detected capacity change from 0 to 32768 [ 271.795996][ T6641] XFS (loop1): Mounting V5 Filesystem [ 272.258019][ T6641] XFS (loop1): Ending clean mount [ 272.549030][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.826806][ T4188] XFS (loop1): Unmounting Filesystem [ 272.887819][ T6663] loop4: detected capacity change from 0 to 32768 [ 272.934350][ T6663] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.698 (6663) [ 272.985366][ T6663] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 272.995232][ T6663] BTRFS info (device loop4): turning on sync discard [ 273.004202][ T6663] BTRFS info (device loop4): use zlib compression, level 3 [ 273.016663][ T6663] BTRFS info (device loop4): turning off barriers [ 273.023496][ T6663] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 273.074781][ T6663] BTRFS info (device loop4): trying to use backup root at mount time [ 273.106721][ T6663] BTRFS info (device loop4): enabling auto defrag [ 273.125438][ T6663] BTRFS info (device loop4): max_inline at 0 [ 273.142237][ T6663] BTRFS info (device loop4): using free space tree [ 273.158092][ T6663] BTRFS info (device loop4): has skinny extents [ 273.358805][ T9] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 273.396445][ T6663] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 273.407946][ T4319] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 273.421630][ T6663] BTRFS warning (device loop4): couldn't read tree root [ 273.439078][ T6663] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 273.453373][ T6663] BTRFS warning (device loop4): couldn't read tree root [ 273.462779][ T6716] loop0: detected capacity change from 0 to 1024 [ 273.506636][ T6663] BTRFS info (device loop4): enabling ssd optimizations [ 273.524129][ T6663] BTRFS info (device loop4): clearing free space tree [ 273.543587][ T6663] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 273.575117][ T6663] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 273.727301][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.739127][ T6663] BTRFS info (device loop4): creating free space tree [ 273.823419][ T6663] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 273.846575][ T6663] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 274.037504][ T26] audit: type=1800 audit(1785767865.175:5): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.698" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 274.421590][ T6732] ISOFS: Unable to identify CD-ROM format. [ 274.435831][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.463316][ T6732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.597877][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.611496][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.622073][ T5058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.930234][ T6738] Cannot find add_set index 0 as target [ 274.956733][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.329094][ T6748] loop3: detected capacity change from 0 to 16 [ 275.403675][ T6748] erofs: (device loop3): mounted with root inode @ nid 36. [ 275.481313][ T6741] device veth1_vlan left promiscuous mode [ 275.582035][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.591255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.640761][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.651077][ T5058] kernel write not supported for file /470/net/ip6_tables_matches (pid: 5058 comm: kworker/0:9) [ 275.726435][ T6747] netlink: 56 bytes leftover after parsing attributes in process `syz.3.715'. [ 275.866444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.529964][ T4789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.562741][ T6769] Set syz0 is full, maxelem 0 reached [ 276.796401][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.149457][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.165888][ T5058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.258359][ T5058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.503523][ T6777] device bond_slave_0 entered promiscuous mode [ 277.509851][ T6777] device bond_slave_1 entered promiscuous mode [ 277.834410][ T6777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.849994][ T6777] bond1: (slave macvlan2): making interface the new active one [ 277.896549][ T6777] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 278.108995][ T6799] loop1: detected capacity change from 0 to 64 [ 278.443135][ T6807] program syz.3.736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.496216][ T26] audit: type=1800 audit(1785767869.635:6): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.735" name="scan_secs" dev="configfs" ino=42042 res=0 errno=0 [ 278.571813][ T6809] device vlan0 entered promiscuous mode [ 278.965675][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.742'. [ 279.070138][ T6827] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 279.110261][ T6827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.542610][ T6837] device vcan1 entered promiscuous mode [ 279.568343][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 279.752964][ T6844] ip6t_srh: unknown srh invflags 4000 [ 279.767685][ T6841] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 280.047635][ T6857] loop4: detected capacity change from 0 to 164 [ 280.099574][ T6857] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 280.451445][ T6875] netlink: 64 bytes leftover after parsing attributes in process `syz.3.755'. [ 280.611199][ T1110] net_ratelimit: 18 callbacks suppressed [ 280.611219][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.175647][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.640856][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.601505][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.747838][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.959594][ T6894] loop1: detected capacity change from 0 to 512 [ 283.238564][ T6896] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by ""[6896] [ 283.388589][ T6894] EXT4-fs (loop1): Ignoring removed oldalloc option [ 283.447121][ T6894] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.594868][ T6894] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,dioread_nolock,noinit_itable,,errors=continue. Quota mode: writeback. [ 283.613211][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.641653][ T6894] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.717893][ T6903] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 283.796712][ T6751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.827513][ T6903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.835557][ T6888] loop4: detected capacity change from 0 to 32768 [ 283.866855][ T6888] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.760 (6888) [ 283.900302][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 283.921390][ T6888] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 283.947539][ T6888] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 283.978199][ T6888] BTRFS info (device loop4): max_inline at 4096 [ 283.985162][ T6888] BTRFS info (device loop4): turning on flush-on-commit [ 284.012107][ T6888] BTRFS info (device loop4): using free space tree [ 284.037046][ T6888] BTRFS info (device loop4): has skinny extents [ 284.135911][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.563387][ T6926] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.572514][ T6926] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.581351][ T6926] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.590176][ T6926] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.748200][ T6926] device vxlan0 entered promiscuous mode [ 284.754406][ T6926] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 285.046537][ T6942] netlink: 'syz.1.771': attribute type 12 has an invalid length. [ 285.075869][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 285.123877][ T4353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.134502][ T6888] BTRFS error (device loop4): open_ctree failed: -12 [ 285.191788][ T6898] loop3: detected capacity change from 0 to 40427 [ 285.244969][ T4180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4180) [ 285.327099][ T6898] F2FS-fs (loop3): invalid crc value [ 285.388169][ T6898] F2FS-fs (loop3): Found nat_bits in checkpoint [ 285.566504][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.673256][ T6898] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 285.782634][ T6898] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 287.276897][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.285075][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.637507][ T4190] attempt to access beyond end of device [ 287.637507][ T4190] loop3: rw=2051, want=45064, limit=40427 [ 287.673835][ T4190] attempt to access beyond end of device [ 287.673835][ T4190] loop3: rw=2051, want=131072, limit=40427 [ 287.690319][ T4190] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 287.690369][ T4190] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 287.799546][ T6966] loop1: detected capacity change from 0 to 512 [ 287.869196][ T6966] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 288.227565][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.377247][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.629463][ T6975] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 288.648007][ T6975] retu-mfd: probe of 0-0002 failed with error -5 [ 288.656980][ T6975] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 288.665408][ T6978] device syzkaller0 entered promiscuous mode [ 288.675814][ T6749] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 288.714520][ T6975] i2c i2c-0: Failed to register i2c client tahvo at 0x02 (-16) [ 289.020362][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 289.367242][ T6749] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 289.377063][ T6749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.422513][ T6749] usb 2-1: config 0 descriptor?? [ 289.552393][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.650237][ T7007] loop0: detected capacity change from 0 to 8192 [ 289.830260][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.788'. [ 289.846278][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.943848][ T7008] netlink: 'syz.4.788': attribute type 10 has an invalid length. [ 289.987222][ T5058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.228016][ T6749] ath6kl: Failed to submit usb control message: -71 [ 290.234685][ T6749] ath6kl: unable to send the bmi data to the device: -71 [ 290.241858][ T6749] ath6kl: Unable to send get target info: -71 [ 290.325595][ T7021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.347858][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.432945][ T7023] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 290.475631][ T7023] device bond1 entered promiscuous mode [ 290.481899][ T7023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.496628][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.597161][ T7028] VFS: Mount too revealing [ 290.663539][ T7031] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 290.700748][ T7031] device bond4 entered promiscuous mode [ 290.706874][ T7031] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.747952][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.750304][ T6749] ath6kl: Failed to init ath6kl core: -71 [ 290.798846][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.809068][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.819561][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.829725][ T7031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.842207][ T7031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.852853][ T6749] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 290.863218][ T7031] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.907410][ T6749] usb 2-1: USB disconnect, device number 5 [ 290.945588][ T7031] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 290.968512][ T7031] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 291.004410][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.019585][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.053348][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.069592][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.082917][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.106546][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.123739][ T7033] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 291.142831][ T7033] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 291.907851][ T7062] gfs2: gfs2 mount does not exist [ 292.166935][ T7065] loop0: detected capacity change from 0 to 32768 [ 292.179786][ T7065] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.811 (7065) [ 292.204774][ T7065] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 292.213784][ T7065] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 292.223883][ T7065] BTRFS info (device loop0): use zstd compression, level 3 [ 292.231356][ T7065] BTRFS info (device loop0): force clearing of disk cache [ 292.238596][ T7065] BTRFS info (device loop0): enabling disk space caching [ 292.245632][ T7065] BTRFS info (device loop0): disk space caching is enabled [ 292.252991][ T7065] BTRFS info (device loop0): has skinny extents [ 292.695753][ T4319] net_ratelimit: 10 callbacks suppressed [ 292.695771][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.740159][ T7083] loop1: detected capacity change from 0 to 256 [ 292.908353][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.007230][ T7083] exfat: Deprecated parameter 'utf8' [ 293.178160][ T7099] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 293.187844][ T7099] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 293.245263][ T7099] loop3: detected capacity change from 0 to 128 [ 293.344508][ T7083] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 294.339009][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.347571][ T7065] BTRFS info (device loop0): enabling ssd optimizations [ 294.362758][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.375926][ T7065] BTRFS info (device loop0): clearing free space tree [ 294.382958][ T7065] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 294.392862][ T7065] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 294.594910][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.440580][ T7131] loop0: detected capacity change from 0 to 1024 [ 295.500991][ T7133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.627534][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.773975][ T7137] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 295.784127][ T5195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.520103][ T7131] EXT4-fs (loop0): Test dummy encryption mode enabled [ 296.549315][ T7131] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 296.693352][ T7131] ipt_REJECT: TCP_RESET invalid for non-tcp [ 296.810632][ T7151] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 296.823217][ T7151] hfsplus: unable to find HFS+ superblock [ 296.914295][ T5195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.398149][ T7165] MPTCP: addr_signal error, rm_addr=1 [ 297.398323][ T7165] MPTCP: addr_signal error, rm_addr=1 [ 297.797619][ T7173] loop0: detected capacity change from 0 to 256 [ 297.956359][ T4351] net_ratelimit: 2 callbacks suppressed [ 297.956375][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.655172][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.965142][ T7173] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 298.975948][ T7173] FAT-fs (loop0): Filesystem has been set read-only [ 298.982771][ T7173] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 298.992913][ T7173] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 299.003564][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.006934][ T26] audit: type=1800 audit(1785767890.165:7): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.838" name="file1" dev="loop0" ino=1048599 res=0 errno=0 [ 299.135321][ T7185] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 299.150145][ T7185] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 299.160799][ T7185] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 299.647331][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.670543][ T7180] loop3: detected capacity change from 0 to 1764 [ 300.036449][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.160346][ T7199] tipc: Started in network mode [ 300.165303][ T7199] tipc: Node identity 080211000001, cluster identity 4711 [ 300.173126][ T7199] tipc: Enabled bearer , priority 0 [ 300.182514][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 300.428665][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.441487][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.094335][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.135027][ T7220] loop1: detected capacity change from 0 to 256 [ 301.191032][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 301.244741][ T7222] device macvtap1 entered promiscuous mode [ 301.266275][ T7222] device bond0 entered promiscuous mode [ 301.271886][ T7222] device bond_slave_0 entered promiscuous mode [ 301.292221][ T7220] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 301.426752][ T7222] device bond_slave_1 entered promiscuous mode [ 301.503542][ T7222] device wlan1 entered promiscuous mode [ 301.513973][ T7222] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 301.525251][ T4233] tipc: Node number set to 134418688 [ 301.544201][ T7220] attempt to access beyond end of device [ 301.544201][ T7220] loop1: rw=524288, want=34359738496, limit=256 [ 301.615504][ T7220] attempt to access beyond end of device [ 301.615504][ T7220] loop1: rw=0, want=34359738496, limit=256 [ 301.654864][ T26] audit: type=1800 audit(1785767892.805:8): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.853" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 301.701528][ T7231] device syzkaller0 entered promiscuous mode [ 301.740110][ T7220] exFAT-fs (loop1): hint_cluster is invalid (1) [ 301.758852][ T7236] binder: 7233:7236 ioctl c0306201 200000002580 returned -14 [ 301.769215][ T7220] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 301.786219][ T7220] exFAT-fs (loop1): Filesystem has been set read-only [ 301.794048][ T7220] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805b9b0160 iblock : 9, err : -5) [ 301.847927][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.850965][ T7220] attempt to access beyond end of device [ 301.850965][ T7220] loop1: rw=2049, want=34359738496, limit=256 [ 302.106267][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.131119][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.293094][ T7220] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 302.323770][ T7220] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805b9b0160 iblock : 9, err : -5) [ 302.459149][ T7255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.865'. [ 302.491482][ T7255] netlink: 'syz.3.865': attribute type 10 has an invalid length. [ 302.525415][ T7255] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 302.997578][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.080325][ T7264] futex_wake_op: syz.2.870 tries to shift op by 144; fix this program [ 303.235242][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.907031][ T5064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.156451][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.388097][ T7272] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 304.865519][ T5195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.061199][ T7287] MPTCP: addr_signal error, add_addr=1, echo=0 [ 305.457297][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.103298][ T5195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.896587][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.987383][ T7127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.086482][ T7319] loop0: detected capacity change from 0 to 128 [ 307.162819][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 307.181896][ T7319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.192645][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.617843][ T7324] loop0: detected capacity change from 0 to 128 [ 307.677940][ T7324] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 307.878447][ T7333] netlink: 'syz.2.895': attribute type 9 has an invalid length. [ 307.886536][ T7333] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.895'. [ 308.099389][ T7327] loop1: detected capacity change from 0 to 1764 [ 308.129662][ T3037] net_ratelimit: 14 callbacks suppressed [ 308.129682][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.214447][ T3037] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 308.269190][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.702183][ T7355] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 308.735687][ T7355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 309.114916][ T4319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.146903][ T7127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.233058][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.905'. [ 309.303673][ T7369] device vxlan0 entered promiscuous mode [ 309.310278][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.356330][ T5195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.371517][ T7370] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 309.513680][ T4319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.622430][ T4319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.775998][ T4319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.135506][ T7127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.503048][ T5195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.510252][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.791616][ T5064] Bluetooth: hci5: command 0x0409 tx timeout [ 311.585445][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.662563][ T7348] chnl_net:caif_netlink_parms(): no params data found [ 311.765507][ T4319] tipc: Left network mode [ 311.780706][ T7391] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.224567][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.276610][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.297509][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.306009][ T7348] device bridge_slave_0 entered promiscuous mode [ 312.314886][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.322694][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.331486][ T7348] device bridge_slave_1 entered promiscuous mode [ 312.520115][ T7348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.588002][ T7348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.903562][ T7127] Bluetooth: hci5: command 0x041b tx timeout [ 312.918552][ T7348] team0: Port device team_slave_0 added [ 312.929545][ T7348] team0: Port device team_slave_1 added [ 313.415665][ T7439] futex_wake_op: syz.1.923 tries to shift op by 144; fix this program [ 314.237920][ T4282] net_ratelimit: 1 callbacks suppressed [ 314.237939][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.530570][ T7445] xt_SECMARK: invalid mode: 2 [ 314.837975][ T7127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.850555][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.924053][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.933774][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.986208][ T4233] Bluetooth: hci5: command 0x040f tx timeout [ 315.033387][ T7348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.132048][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.179271][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.205496][ T7348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.320749][ T7459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.349010][ T7459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.389941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.402458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.413459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.427670][ T7468] binder: 7465:7468 ioctl c0306201 200000002580 returned -14 [ 315.449821][ T7348] device hsr_slave_0 entered promiscuous mode [ 315.483597][ T7459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.494616][ T7459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.514285][ T7348] device hsr_slave_1 entered promiscuous mode [ 315.524762][ T7348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.551108][ T7348] Cannot create hsr debugfs directory [ 316.103927][ T7348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 316.142512][ T7348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 316.199715][ T7348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 316.316992][ T7348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 316.333280][ T7478] device syzkaller0 left promiscuous mode [ 316.348149][ T7478] tipc: Resetting bearer [ 316.417113][ T4789] tipc: Resetting bearer [ 316.534311][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 316.680374][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.756788][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.795069][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.842953][ T7348] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.889003][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.907198][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.083316][ T5063] Bluetooth: hci5: command 0x0419 tx timeout [ 317.192717][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.199895][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.294095][ T7508] i2c i2c-0: Failed to register i2c client tahvo at 0x02 (-16) [ 317.320038][ T7508] i2c i2c-0: Failed to register i2c client tahvo at 0x02 (-16) [ 317.358083][ T7514] cgroup: Name too long [ 317.428468][ T4319] device hsr_slave_0 left promiscuous mode [ 317.446346][ T4319] device hsr_slave_1 left promiscuous mode [ 317.470273][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.476634][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.485538][ T4319] device veth1_macvtap left promiscuous mode [ 317.525735][ T4319] device veth0_macvtap left promiscuous mode [ 317.560345][ T4319] device veth1_vlan left promiscuous mode [ 317.592624][ T4319] device veth0_vlan left promiscuous mode [ 318.426704][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.436704][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.457551][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.468516][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.475744][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.494292][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.530360][ T7527] netlink: 'syz.0.956': attribute type 10 has an invalid length. [ 318.548363][ T7527] device netdevsim0 entered promiscuous mode [ 318.559919][ T7527] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 318.603977][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.627428][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.659076][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.685580][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.719003][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.729414][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.768097][ T7540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.776156][ T7540] IPv6: NLM_F_CREATE should be set when creating new route [ 318.825842][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.848365][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.867006][ T7348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.878732][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.887337][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.897161][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.425265][ T7561] net_ratelimit: 10 callbacks suppressed [ 319.425286][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.440095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.494164][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.529551][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.592374][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.607838][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.623055][ T7348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.624819][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.639765][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.716534][ T7561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.925665][ T7571] Cannot find map_set index 135 as target [ 320.028600][ T7574] UBIFS error (pid: 7574): cannot open "./file0", error -22 [ 320.040551][ T7574] loop0: detected capacity change from 0 to 256 [ 320.189733][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.650160][ T7599] device syzkaller0 entered promiscuous mode [ 320.767269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.790519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.299667][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.309876][ T5064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.465081][ T7348] device veth0_vlan entered promiscuous mode [ 322.506986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.522336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.550458][ T7348] device veth1_vlan entered promiscuous mode [ 322.612738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.623195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.675698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.787971][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 322.805063][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.823004][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.850976][ T7348] device veth0_macvtap entered promiscuous mode [ 322.887037][ T7348] device veth1_macvtap entered promiscuous mode [ 322.983910][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.036160][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.046042][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.501216][ T4351] net_ratelimit: 3 callbacks suppressed [ 324.501235][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.596146][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.626401][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.676237][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.709160][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.753138][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.767129][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.797149][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.841769][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.876552][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.898606][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.928963][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.966134][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.986140][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.007513][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.031488][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.067025][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.124676][ T7348] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.146293][ T7348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.178130][ T7635] loop1: detected capacity change from 0 to 128 [ 325.186713][ T7348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.195487][ T7348] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.452769][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.582190][ T5195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.026644][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.034551][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.100485][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 327.031244][ T4316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.051271][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.289859][ T7659] netlink: 'syz.0.979': attribute type 10 has an invalid length. [ 327.338628][ T7647] device syzkaller0 entered promiscuous mode [ 327.480365][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.513635][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.614936][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.771678][ T7124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.106732][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.297006][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.981'. [ 328.351958][ T7686] netlink: 144 bytes leftover after parsing attributes in process `syz.3.981'. [ 328.365996][ T7686] netlink: 144 bytes leftover after parsing attributes in process `syz.3.981'. [ 328.378994][ T7686] device syzkaller0 entered promiscuous mode [ 328.396579][ T4789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.506962][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.877164][ T7699] capability: warning: `syz.3.986' uses 32-bit capabilities (legacy support in use) [ 328.922761][ T7695] device syzkaller0 entered promiscuous mode [ 329.616649][ T4789] net_ratelimit: 1 callbacks suppressed [ 329.616669][ T4789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.975019][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.128502][ T7723] loop5: detected capacity change from 0 to 256 [ 330.377288][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.532829][ T7689] syz.1.983 (7689): drop_caches: 2 [ 330.563078][ T7723] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.603514][ T7723] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 330.689282][ T7723] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 330.753805][ T7729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.763760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.773779][ T7729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.784242][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.794073][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.908345][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.081293][ T7737] MPTCP: addr_signal error, add_addr=1, echo=0 [ 331.081456][ T7737] MPTCP: addr_signal error, add_addr=1, echo=0 [ 331.122178][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'. [ 331.252711][ T7744] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 331.413598][ T7737] MPTCP: addr_signal error, rm_addr=1 [ 331.416912][ T7737] MPTCP: addr_signal error, rm_addr=1 [ 331.550291][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.734375][ T7744] [U] J"—E:ÀÆ" [ 332.645096][ T7776] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 332.678907][ T26] audit: type=1800 audit(2000000000.120:9): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1008" name="cluster_name" dev="configfs" ino=47316 res=0 errno=0 [ 332.726901][ T7776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 332.980756][ T26] audit: type=1800 audit(2000000000.120:10): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1008" name="toss_secs" dev="configfs" ino=47317 res=0 errno=0 [ 333.686158][ T26] audit: type=1800 audit(2000000000.150:11): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1008" name="scan_secs" dev="configfs" ino=47321 res=0 errno=0 [ 334.178404][ T7797] device syzkaller0 entered promiscuous mode [ 334.217909][ T7795] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1012'. [ 334.259650][ T7797] tipc: Started in network mode [ 334.264628][ T7797] tipc: Node identity , cluster identity 4711 [ 334.306269][ T7797] tipc: Failed to obtain node identity [ 334.322770][ T7797] tipc: Enabling of bearer rejected, failed to enable media [ 334.568574][ T7809] tipc: Enabling of bearer rejected, already enabled [ 334.690333][ T4351] net_ratelimit: 6 callbacks suppressed [ 334.690353][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.796518][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.838365][ T7827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.863111][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.887179][ T7827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.352680][ T7844] configfs-gadget gadget: afunc_bind:1164 Error! [ 335.364951][ T7844] udc dummy_udc.0: failed to start g1: -19 [ 335.566626][ T7846] o2cb: This node has not been configured. [ 335.578956][ T7846] o2cb: Cluster check failed. Fix errors before retrying. [ 335.586310][ T7846] (syz.2.1028,7846,0):user_dlm_register:675 ERROR: status = -22 [ 335.594006][ T7846] (syz.2.1028,7846,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file2" [ 335.706639][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.956944][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.400116][ T7868] loop0: detected capacity change from 0 to 64 [ 336.627009][ T7873] SET target dimension over the limit! [ 336.746549][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.577837][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.876174][ T7124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.145596][ T7902] netlink: 'syz.1.1046': attribute type 2 has an invalid length. [ 338.485267][ T7911] tipc: Enabled bearer , priority 4 [ 338.727594][ T7916] SET target dimension over the limit! [ 339.166602][ T7923] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1052'. [ 339.188324][ T7925] loop1: detected capacity change from 0 to 16 [ 339.323941][ T7925] erofs: (device loop1): mounted with root inode @ nid 36. [ 339.405074][ T4233] kernel write not supported for file /597/net/ip6_tables_matches (pid: 4233 comm: kworker/0:5) [ 339.647373][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'. [ 339.766066][ T26] audit: type=1800 audit(2000000007.190:12): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1052" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 339.801884][ T7941] overlayfs: failed to clone upperpath [ 339.815149][ T7937] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1057'. [ 339.907392][ T7942] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1057'. [ 339.970428][ T7942] device syzkaller0 entered promiscuous mode [ 340.025715][ T7937] net_ratelimit: 7 callbacks suppressed [ 340.025729][ T7937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.043415][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.473405][ T7956] tipc: Enabling of bearer rejected, already enabled [ 340.555727][ T7972] device syzkaller0 entered promiscuous mode [ 340.898765][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.001014][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.085481][ T7995] device syzkaller0 entered promiscuous mode [ 341.107736][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.746515][ T8011] loop0: detected capacity change from 0 to 2048 [ 341.919704][ T8011] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c029, mo2=0003] [ 341.970255][ T8011] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,lazytime,noblock_validity,delalloc,nombcache,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 341.999126][ T8020] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1075'. [ 342.186569][ T5195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.233791][ T8020] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1075'. [ 342.285042][ T8030] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1075'. [ 342.339221][ T8020] device syzkaller0 entered promiscuous mode [ 342.503483][ T8034] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.1072: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 342.545295][ T8011] EXT4-fs error (device loop0): ext4_ext_precache:626: inode #2: comm syz.0.1072: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 342.582879][ T8011] EXT4-fs (loop0): Remounting filesystem read-only [ 342.596168][ T8034] EXT4-fs (loop0): Remounting filesystem read-only [ 342.806371][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.123969][ T8043] [ 343.126551][ T8043] ====================================================== [ 343.133598][ T8043] WARNING: possible circular locking dependency detected [ 343.140929][ T8043] syzkaller #0 Not tainted [ 343.145540][ T8043] ------------------------------------------------------ [ 343.152662][ T8043] syz.0.1083/8043 is trying to acquire lock: [ 343.158668][ T8043] ffff88801d1f2ee0 (&sb->s_type->i_mutex_key#30){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 343.170184][ T8043] [ 343.170184][ T8043] but task is already holding lock: [ 343.177708][ T8043] ffff88805f5ebd20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 343.186940][ T8043] [ 343.186940][ T8043] which lock already depends on the new lock. [ 343.186940][ T8043] [ 343.197360][ T8043] [ 343.197360][ T8043] the existing dependency chain (in reverse order) is: [ 343.206394][ T8043] [ 343.206394][ T8043] -> #3 (&opts->dep_lock){+.+.}-{3:3}: [ 343.214195][ T8043] __mutex_lock_common+0x1e5/0x2400 [ 343.219988][ T8043] mutex_lock_nested+0x17/0x20 [ 343.225326][ T8043] tcm_set_name+0x26/0x90 [ 343.230410][ T8043] function_make+0x195/0x350 [ 343.235566][ T8043] configfs_mkdir+0x511/0x9e0 [ 343.240855][ T8043] vfs_mkdir+0x386/0x570 [ 343.245637][ T8043] do_mkdirat+0x1dd/0x5c0 [ 343.250502][ T8043] __x64_sys_mkdir+0x6a/0x80 [ 343.255639][ T8043] do_syscall_64+0x4c/0xa0 [ 343.260738][ T8043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.267241][ T8043] [ 343.267241][ T8043] -> #2 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 343.275879][ T8043] __mutex_lock_common+0x1e5/0x2400 [ 343.281647][ T8043] mutex_lock_nested+0x17/0x20 [ 343.287039][ T8043] uvcg_frame_w_width_store+0x110/0x370 [ 343.293121][ T8043] configfs_write_iter+0x30b/0x400 [ 343.298865][ T8043] vfs_write+0x748/0xd70 [ 343.304029][ T8043] ksys_write+0x153/0x260 [ 343.310177][ T8043] do_syscall_64+0x4c/0xa0 [ 343.315486][ T8043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.322360][ T8043] [ 343.322360][ T8043] -> #1 (&p->frag_sem){++++}-{3:3}: [ 343.329935][ T8043] down_write_killable+0x46/0x90 [ 343.335455][ T8043] configfs_rmdir+0x3e0/0x980 [ 343.340964][ T8043] vfs_rmdir+0x19d/0x410 [ 343.345745][ T8043] do_rmdir+0x27f/0x710 [ 343.350520][ T8043] __x64_sys_rmdir+0x45/0x50 [ 343.355653][ T8043] do_syscall_64+0x4c/0xa0 [ 343.360602][ T8043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.367028][ T8043] [ 343.367028][ T8043] -> #0 (&sb->s_type->i_mutex_key#30){++++}-{3:3}: [ 343.375863][ T8043] __lock_acquire+0x2c66/0x7b50 [ 343.381341][ T8043] lock_acquire+0x19e/0x400 [ 343.386387][ T8043] down_write+0x38/0x60 [ 343.391099][ T8043] configfs_depend_item_unlocked+0x14f/0x430 [ 343.397834][ T8043] usbg_make_tpg+0x1f3/0x580 [ 343.402991][ T8043] target_fabric_make_tpg+0xa0/0x6d0 [ 343.408813][ T8043] configfs_mkdir+0x511/0x9e0 [ 343.414065][ T8043] vfs_mkdir+0x386/0x570 [ 343.418838][ T8043] do_mkdirat+0x1dd/0x5c0 [ 343.423798][ T8043] __x64_sys_mkdir+0x6a/0x80 [ 343.428917][ T8043] do_syscall_64+0x4c/0xa0 [ 343.433869][ T8043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.440500][ T8043] [ 343.440500][ T8043] other info that might help us debug this: [ 343.440500][ T8043] [ 343.450984][ T8043] Chain exists of: [ 343.450984][ T8043] &sb->s_type->i_mutex_key#30 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 343.450984][ T8043] [ 343.465959][ T8043] Possible unsafe locking scenario: [ 343.465959][ T8043] [ 343.473415][ T8043] CPU0 CPU1 [ 343.478783][ T8043] ---- ---- [ 343.484294][ T8043] lock(&opts->dep_lock); [ 343.488732][ T8043] lock(gadget_subsys.su_mutex); [ 343.496314][ T8043] lock(&opts->dep_lock); [ 343.503368][ T8043] lock(&sb->s_type->i_mutex_key#30); [ 343.508839][ T8043] [ 343.508839][ T8043] *** DEADLOCK *** [ 343.508839][ T8043] [ 343.517606][ T8043] 5 locks held by syz.0.1083/8043: [ 343.523750][ T8043] #0: ffff88801ddc4460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 343.533208][ T8043] #1: ffff88802a2f5aa0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 343.544607][ T8043] #2: ffffffff8cc23e70 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 343.555389][ T8043] #3: ffffffff8cf21328 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 343.565166][ T8043] #4: ffff88805f5ebd20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 343.574770][ T8043] [ 343.574770][ T8043] stack backtrace: [ 343.580756][ T8043] CPU: 0 PID: 8043 Comm: syz.0.1083 Not tainted syzkaller #0 [ 343.588137][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.598591][ T8043] Call Trace: [ 343.601880][ T8043] [ 343.604816][ T8043] dump_stack_lvl+0x188/0x250 [ 343.609506][ T8043] ? load_image+0x410/0x410 [ 343.614040][ T8043] ? show_regs_print_info+0x20/0x20 [ 343.619260][ T8043] ? print_circular_bug+0x12b/0x1a0 [ 343.624477][ T8043] check_noncircular+0x296/0x330 [ 343.629432][ T8043] ? add_chain_block+0x9b0/0x9b0 [ 343.634377][ T8043] ? lockdep_lock+0xf1/0x1f0 [ 343.639004][ T8043] ? mark_lock+0x94/0x320 [ 343.643354][ T8043] ? mark_lock+0x94/0x320 [ 343.647687][ T8043] ? _find_first_zero_bit+0xd1/0xf0 [ 343.652939][ T8043] __lock_acquire+0x2c66/0x7b50 [ 343.657814][ T8043] ? verify_lock_unused+0x140/0x140 [ 343.663225][ T8043] ? __mutex_trylock_common+0x15c/0x260 [ 343.668783][ T8043] ? rcu_lock_release+0x20/0x20 [ 343.673716][ T8043] lock_acquire+0x19e/0x400 [ 343.678257][ T8043] ? configfs_depend_item_unlocked+0x14f/0x430 [ 343.684441][ T8043] ? __might_sleep+0xf0/0xf0 [ 343.689133][ T8043] ? __kasan_kmalloc+0xc6/0xe0 [ 343.694017][ T8043] ? read_lock_is_recursive+0x10/0x10 [ 343.699414][ T8043] ? mutex_lock_io_nested+0x60/0x60 [ 343.705183][ T8043] down_write+0x38/0x60 [ 343.709546][ T8043] ? configfs_depend_item_unlocked+0x14f/0x430 [ 343.715948][ T8043] configfs_depend_item_unlocked+0x14f/0x430 [ 343.721965][ T8043] usbg_make_tpg+0x1f3/0x580 [ 343.726674][ T8043] ? mutex_lock_io_nested+0x60/0x60 [ 343.732027][ T8043] ? usbg_drop_tport+0x20/0x20 [ 343.737315][ T8043] ? vscnprintf+0x80/0x80 [ 343.741754][ T8043] target_fabric_make_tpg+0xa0/0x6d0 [ 343.747241][ T8043] ? target_fabric_release_wwn+0xa0/0xa0 [ 343.752900][ T8043] configfs_mkdir+0x511/0x9e0 [ 343.757597][ T8043] vfs_mkdir+0x386/0x570 [ 343.761860][ T8043] do_mkdirat+0x1dd/0x5c0 [ 343.766435][ T8043] ? vfs_mkdir+0x570/0x570 [ 343.770875][ T8043] ? getname_flags+0x1f9/0x4f0 [ 343.775755][ T8043] __x64_sys_mkdir+0x6a/0x80 [ 343.780390][ T8043] do_syscall_64+0x4c/0xa0 [ 343.785084][ T8043] ? clear_bhb_loop+0x30/0x80 [ 343.789787][ T8043] ? clear_bhb_loop+0x30/0x80 [ 343.794798][ T8043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.801014][ T8043] RIP: 0033:0x7f854bce1019 [ 343.805807][ T8043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.825579][ T8043] RSP: 002b:00007f8549f39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 343.834117][ T8043] RAX: ffffffffffffffda RBX: 00007f854bf68fa0 RCX: 00007f854bce1019 [ 343.842118][ T8043] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 343.850099][ T8043] RBP: 00007f854bd7800c R08: 0000000000000000 R09: 0000000000000000 [ 343.858080][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.866073][ T8043] R13: 00007f854bf69038 R14: 00007f854bf68fa0 R15: 00007ffc0336f4b8 [ 343.874209][ T8043] [ 343.877346][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.895345][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.052858][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.071992][ T26] audit: type=1800 audit(2000000011.510:13): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1083" name="alua_tg_pt_offline" dev="configfs" ino=46838 res=0 errno=0 [ 344.656980][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.757137][ T4282] net_ratelimit: 1 callbacks suppressed [ 345.757154][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.946521][ T4351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.866537][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.996732][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.068935][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.547168][ T5063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.976492][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.027584][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.186755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.197385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.146574][ T4230] net_ratelimit: 5 callbacks suppressed [ 351.146680][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.346450][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.186474][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.456412][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog