last executing test programs: 4m58.006018128s ago: executing program 2 (id=192): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xfbff, 0x3}, 0x6) 4m57.8691394s ago: executing program 2 (id=194): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000800730122000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m57.613951553s ago: executing program 2 (id=195): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 4m56.884212171s ago: executing program 2 (id=197): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@fat=@sys_immutable}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@fat=@errors_continue}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}, {@shortname_lower}, {@shortname_winnt}, {@numtail}, {@utf8}, {@rodir}]}, 0x0, 0x2a7, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswqY2p5v+DMqfnnHfmJGcmvDOQk53rT+8V84GTd6uKxE0RaVO7Umqv1DbW3kaa5Ul12tS56c/v/r164+alTDa7uGy2lFk5nzaz2f9ePXj07P831elrz2dfxrSdurXzKf1++6/tv3e+roR7L0uurZbLVXfV92ytEBQdsyu+5waeFUqBV6laR3veL6+v180trc0k1iteEJhbqlvRq1u1bNVK3dw7bqFkjuPYTEKjJtp3RG5rednNDGQwGIapbpWVSsaNdW3Mbf2KQQEAgNNlWPn/3UJghcBK5QP5fZj/S2H+H1Ef+b800vl//8j/R8Fe/p9oX78Hkf8DAAAAAAAAAAAAAAAAAAAAAPA72G00ko1GIxluw7+YpLik8P9hjxODwfyPto4v7sUl/0ktV8u1tq32TF4F+fI0PyF9aZ4Pba3y0sXs4rw1pfTa32jHb9RyUcXC+FCqe/xCK9464zc0oUTn8dNKaq57fLpLfC03qbNnGrH2kT05SurtbZXla615Xu/HP14wu3A5eyh+qtkPAAAAAIA/gWPfHbl/b7Y7Fi4bcqi9Vbn/fEDJHzwfOHR/Pa5/xo+uSAIAAAAAAE5eUH9YdH3fq4xAIfz9gxPZ4fDfunivnccltWtenJa56KUQkXTc8OjPzfJHSQdq5oY+3SdR+HC/dQX00nmYn0oAAAAABiFM+sf6CYoNbjwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyiXhcPC/sfZ+2xjsNFh/MqAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPhWwAAAP//vsUWxg==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x310f848, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 4m55.443259287s ago: executing program 2 (id=201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup(r4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) close_range(r0, 0xffffffffffffffff, 0x0) 4m54.886593283s ago: executing program 2 (id=205): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x7d, 0x0, 0x0) 4m54.001582253s ago: executing program 32 (id=205): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x7d, 0x0, 0x0) 2m39.692088554s ago: executing program 1 (id=794): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x178, 0xc, 0x1c0, 0x178, 0x2b8, 0x258, 0x258, 0x2b8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x10, 0x8}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7ff, 0x4, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000000200000000000000000003000000000100000002"], 0x0, 0x66}, 0x20) 2m39.464203307s ago: executing program 1 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x80, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10006}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 2m38.668162386s ago: executing program 1 (id=801): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 2m36.604123119s ago: executing program 1 (id=819): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x10fff9, 0x10fff9) 2m36.274644493s ago: executing program 1 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x80000000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m33.666550522s ago: executing program 1 (id=842): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000009240)={{{@in6=@private1, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0xb, 0x2, 0x20, 0x80, 0x29}, {0x0, 0x3, 0x7, 0x6, 0x10000, 0x60000000, 0xe04d, 0x2}, {0x6, 0x1, 0x8}, 0x3ff, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0xd, @in=@local, 0x3505, 0x0, 0x1, 0xff, 0x1, 0x8, 0x10001}}, 0xe8) 2m33.541001393s ago: executing program 33 (id=842): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000009240)={{{@in6=@private1, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0xb, 0x2, 0x20, 0x80, 0x29}, {0x0, 0x3, 0x7, 0x6, 0x10000, 0x60000000, 0xe04d, 0x2}, {0x6, 0x1, 0x8}, 0x3ff, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0xd, @in=@local, 0x3505, 0x0, 0x1, 0xff, 0x1, 0x8, 0x10001}}, 0xe8) 2m0.256090218s ago: executing program 3 (id=1043): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m59.735531964s ago: executing program 3 (id=1048): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x38, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) 1m57.829629855s ago: executing program 3 (id=1055): io_uring_setup(0x1965, &(0x7f0000000180)={0x0, 0x1f8a, 0x0, 0x2, 0x28c}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1m57.473676849s ago: executing program 3 (id=1058): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc5c, &(0x7f0000000380)={[{@test_dummy_encryption}, {@errors_remount}]}, 0x3, 0x459, &(0x7f0000000540)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2009850, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m55.866945837s ago: executing program 3 (id=1061): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)=r0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$khugepaged_scan(r5, &(0x7f00000000c0), 0x8) 1m55.352205783s ago: executing program 3 (id=1064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) 1m55.162182475s ago: executing program 34 (id=1064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) 1m31.889999707s ago: executing program 7 (id=1154): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) recvmmsg$unix(r3, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f000000f840), 0xffffffffffffffff) 1m30.74864502s ago: executing program 7 (id=1161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0xfa, 0x1, 0x9, 0xfc, 0x100, 0x2, 0x3, 0xc, 0x58, 0x40, 0xfe, 0x0, 0x7fff, 0x38, 0x1, 0x1, 0x9, 0x1}, [{0x2, 0x6, 0x5, 0x9, 0x6, 0x8, 0x4, 0xffffffffffff2a2d}]}, 0x78) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) 1m30.537445632s ago: executing program 7 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m29.436191584s ago: executing program 7 (id=1167): syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 1m28.203577269s ago: executing program 7 (id=1174): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodiscard}, {@noblock_validity}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nogrpid}, {@noinit_itable}, {@jqfmt_vfsv0}, {@mb_optimize_scan}, {@sb={'sb', 0x3d, 0x1}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") 1m26.513280347s ago: executing program 7 (id=1184): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x1, 'j'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001600)={0x0, 0x6}, 0x8) 1m26.374749439s ago: executing program 35 (id=1184): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x1, 'j'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001600)={0x0, 0x6}, 0x8) 11.59763901s ago: executing program 4 (id=1588): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 11.015612057s ago: executing program 4 (id=1591): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 10.476238623s ago: executing program 4 (id=1595): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.949591829s ago: executing program 4 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r5, &(0x7f00000001c0), 0x10) dup3(r3, r4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc000200060000ec05"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r6}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 7.347952498s ago: executing program 5 (id=1609): setxattr(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32], 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @local}) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x19) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x52142, 0x80) 6.22820277s ago: executing program 5 (id=1614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() r4 = fsopen(&(0x7f00000001c0)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r6, @ANYBLOB="0100040000000100000009000000280003800800030000000000140002007663616e3000000000000000000000000800010001000000e6c3628372cce68cbb4c173a66362e9bc107f304c171ced7ed47403118a2665e82294291c8b397d2c0a925bb890376795399c003716ae0effe8838c159fcf97651b378bc16dab2a012dfde8324bf906f7cafda339898d91f8dc69057dc5f3cccdf1599710073e1f3f0bfd7834fa35fe186592e3b7b5494143694040e7525e53ff80e3816c0da6a2d9bd8c2864ae2a25775bf0e4ba92f4485b8d164a38352c725478ffc3a8fd98780fbe5fe336d33038f5275adc80771db7f603b75dc0d7e66b5"], 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 5.461924219s ago: executing program 0 (id=1618): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000240)={[{@orlov}, {@sysvgroups}]}, 0x43, 0x4e0, &(0x7f0000000300)="$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") 5.034568484s ago: executing program 0 (id=1620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="02"]}]}, 0x1c}}, 0x0) 4.876204166s ago: executing program 0 (id=1622): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4c20, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x80, 0x0}, 0xe07e872420dfefca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, r5, 0x0) 3.528238631s ago: executing program 0 (id=1625): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac00000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000000000000000000e340980e5f1fac141400000000ac1414aa000000000000010000000000ffffffff0000000000000000000000003c04000005"], 0xac}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 2.74975983s ago: executing program 5 (id=1626): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x40, 0x4, 0x0, 0x24, 0x2, 0x60}, &(0x7f0000001140)=0x9c) 2.477776863s ago: executing program 0 (id=1629): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20008030) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0xff, 0x0, 0xfffff038}, {0x28, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.133423507s ago: executing program 6 (id=1630): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) setuid(0xee01) fchown(r0, 0xffffffffffffffff, 0x0) 2.061542107s ago: executing program 6 (id=1631): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x1, 0x40000867, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d3142, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x5}}, 0x20) 1.991457268s ago: executing program 8 (id=1632): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x8000, 0x162) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet(0xa, 0x801, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8431", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.900296059s ago: executing program 6 (id=1633): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) 1.899583739s ago: executing program 4 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8000008, r3, 0x0) fanotify_mark(0xffffffffffffffff, 0x7e, 0x800003a, r3, 0x0) 1.84328808s ago: executing program 8 (id=1635): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4c20, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x80, 0x0}, 0xe07e872420dfefca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, r5, 0x0) 819.785992ms ago: executing program 4 (id=1636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() r4 = fsopen(&(0x7f00000001c0)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r6, @ANYBLOB="0100040000000100000009000000280003800800030000000000140002007663616e3000000000000000000000000800010001000000e6c3628372cce68cbb4c173a66362e9bc107f304c171ced7ed47403118a2665e82294291c8b397d2c0a925bb890376795399c003716ae0effe8838c159fcf97651b378bc16dab2a012dfde8324bf906f7cafda339898d91f8dc69057dc5f3cccdf1599710073e1f3f0bfd7834fa35fe186592e3b7b5494143694040e7525e53ff80e3816c0da6a2d9bd8c2864ae2a25775bf0e4ba92f4485b8d164a38352c725478ffc3a8fd98780fbe5fe336d33038f5275adc80771db7f603b75dc0d7e66b5"], 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 819.579381ms ago: executing program 6 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 819.261972ms ago: executing program 8 (id=1638): unshare(0x26020480) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 768.140432ms ago: executing program 5 (id=1639): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac00000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000000000000000000e340980e5f1fac141400000000ac1414aa000000000000010000000000ffffffff0000000000000000000000003c04000005"], 0xac}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 695.070133ms ago: executing program 8 (id=1640): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c91c, &(0x7f0000000440), 0x1e, 0x4e0, &(0x7f0000001a40)="$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") 465.299165ms ago: executing program 0 (id=1641): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0x1, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @sack={0x5, 0x12, [0x9, 0x8001, 0x8, 0x6]}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 311.765007ms ago: executing program 6 (id=1642): r0 = syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x2b, &(0x7f0000000040)={0x29, 0x6, 0xfff00000}) ptrace$peeksig(0x4209, r0, &(0x7f0000000200)={0x0, 0x1, 0x1}, &(0x7f0000000240)=[{}]) 216.262298ms ago: executing program 8 (id=1643): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 167.699799ms ago: executing program 5 (id=1644): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short={0x2, 0xffabb3c358968248}}, 0x14) 53.34291ms ago: executing program 6 (id=1645): socket$packet(0x11, 0x3, 0x300) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2600, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)="03e0f83cc482a77c7c0860e45fb0900e1d086fdc2ed8ffa1ba40e31f3f516a071f9ab39933", 0x25) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x7, @remote, 'vcan0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010"], 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r1, 0x0, 0xfffffffffffffd03, 0x40000100, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 200.98µs ago: executing program 8 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8000008, r3, 0x0) fanotify_mark(0xffffffffffffffff, 0x7e, 0x800003a, r3, 0x0) 0s ago: executing program 5 (id=1647): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): 136.519264][ T5100] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 136.578419][ T5104] device syzkaller0 entered promiscuous mode [ 137.017961][ T4960] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.068693][ T4960] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.090529][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 137.130814][ T4960] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.143718][ T5123] loop3: detected capacity change from 0 to 128 [ 137.174963][ T4960] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.301142][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.340546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.349991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.404901][ T5123] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 137.586159][ T4960] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.655683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.680020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.756312][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.763511][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.835896][ T4603] udevd[4603]: incorrect ext4 checksum on /dev/loop3 [ 137.895928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.912611][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.945553][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.068438][ T390] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.075645][ T390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.175960][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.319638][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.350592][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.026600][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.122938][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.129359][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.137341][ T5165] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 140.172884][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.212522][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.261615][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.291014][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.328058][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.358056][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.402872][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.476061][ T5175] device syzkaller0 entered promiscuous mode [ 141.072904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.103104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.143532][ T4960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.471772][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.511354][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.631032][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.656989][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.720696][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.736107][ T5250] loop1: detected capacity change from 0 to 128 [ 143.765118][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.809297][ T4960] device veth0_vlan entered promiscuous mode [ 143.851934][ T5247] device syzkaller0 entered promiscuous mode [ 143.866319][ T4960] device veth1_vlan entered promiscuous mode [ 143.968674][ T5250] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.010314][ T5250] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.107068][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.121735][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.151333][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.202122][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.240977][ T4960] device veth0_macvtap entered promiscuous mode [ 144.266972][ T4960] device veth1_macvtap entered promiscuous mode [ 144.378337][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.391343][ T5265] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.422087][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.464191][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.482628][ T5267] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.518123][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.551953][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.776510][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.359464][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.376513][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.402002][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.409829][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.447982][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.466660][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.515611][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.634748][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.685515][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.833160][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.171072][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.171677][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.171889][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.172615][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.172861][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.350239][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.357066][ T4960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.357125][ T4960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.357155][ T4960] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.357184][ T4960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.581662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.582375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.725643][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.725661][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.751069][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.802220][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.802245][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.803698][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.307986][ T5355] loop3: detected capacity change from 0 to 512 [ 148.383962][ T5355] EXT4-fs (loop3): Ignoring removed nobh option [ 148.526573][ T5355] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 148.540438][ T5355] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.287: attempt to clear invalid blocks 1 len 1 [ 148.560315][ T5355] EXT4-fs (loop3): Remounting filesystem read-only [ 148.573057][ T5355] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 148.987437][ T5355] EXT4-fs (loop3): Remounting filesystem read-only [ 149.262267][ T5355] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.287: invalid indirect mapped block 1819239214 (level 0) [ 149.355900][ T5355] EXT4-fs (loop3): Remounting filesystem read-only [ 149.399848][ T5355] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.287: invalid indirect mapped block 1819239214 (level 1) [ 149.428543][ T5355] EXT4-fs (loop3): Remounting filesystem read-only [ 149.456438][ T5355] EXT4-fs (loop3): 1 truncate cleaned up [ 149.472224][ T5355] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 150.504356][ T5400] netlink: 'syz.5.296': attribute type 10 has an invalid length. [ 151.199550][ T5400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.213617][ T5400] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 151.386412][ T5400] syz.5.296 (5400) used greatest stack depth: 19728 bytes left [ 153.364908][ T5447] netlink: 'syz.3.309': attribute type 10 has an invalid length. [ 153.860296][ T5446] loop4: detected capacity change from 0 to 256 [ 154.342435][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.354047][ T5447] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.934265][ T5505] netlink: 'syz.5.326': attribute type 10 has an invalid length. [ 159.450372][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 159.908125][ T5561] loop5: detected capacity change from 0 to 128 [ 160.116894][ T5561] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.182253][ T5561] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.234556][ T5569] loop0: detected capacity change from 0 to 256 [ 160.447101][ T5569] FAT-fs (loop0): Directory bread(block 64) failed [ 160.470843][ T5569] FAT-fs (loop0): Directory bread(block 65) failed [ 160.486104][ T5569] FAT-fs (loop0): Directory bread(block 66) failed [ 160.566955][ T5569] FAT-fs (loop0): Directory bread(block 67) failed [ 160.600273][ T5569] FAT-fs (loop0): Directory bread(block 68) failed [ 160.606873][ T5569] FAT-fs (loop0): Directory bread(block 69) failed [ 160.635321][ T5569] FAT-fs (loop0): Directory bread(block 70) failed [ 160.706714][ T5569] FAT-fs (loop0): Directory bread(block 71) failed [ 160.723007][ T5569] FAT-fs (loop0): Directory bread(block 72) failed [ 160.746671][ T5569] FAT-fs (loop0): Directory bread(block 73) failed [ 160.845944][ T5592] loop3: detected capacity change from 0 to 256 [ 160.955815][ T5592] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 161.005177][ T5592] FAT-fs (loop3): Filesystem has been set read-only [ 161.050233][ T5592] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 161.092778][ T5592] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 161.257776][ T25] audit: type=1800 audit(1778106895.706:5): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.351" name="file1" dev="loop3" ino=1048599 res=0 errno=0 [ 162.317703][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 164.246740][ T5677] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 165.605569][ T5702] loop0: detected capacity change from 0 to 512 [ 165.807202][ T5702] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 165.913477][ T5702] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.375: bg 0: block 104: invalid block bitmap [ 167.069120][ T5702] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 167.174434][ T5702] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.375: invalid indirect mapped block 1 (level 1) [ 167.331330][ T5702] EXT4-fs (loop0): 1 truncate cleaned up [ 167.337041][ T5702] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.191127][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.920966][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.622418][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.631027][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.706434][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.419518][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.490480][ T5768] netlink: 'syz.1.391': attribute type 12 has an invalid length. [ 170.747989][ T5772] device syzkaller0 entered promiscuous mode [ 170.760584][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.044184][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 172.120215][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.120415][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 172.158253][ T5786] netlink: 'syz.1.396': attribute type 14 has an invalid length. [ 172.183781][ T5786] netlink: 'syz.1.396': attribute type 13 has an invalid length. [ 172.680811][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.715251][ T5813] netlink: 'syz.5.395': attribute type 10 has an invalid length. [ 173.160731][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.401025][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.600993][ T5835] netlink: 'syz.3.406': attribute type 12 has an invalid length. [ 173.856360][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 173.969244][ T5847] bond0: (slave batadv0): Error: Slave device does not support XDP [ 174.052052][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.636444][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.891939][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.640530][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.054471][ T5877] device syzkaller0 entered promiscuous mode [ 176.087614][ T5879] device syzkaller0 entered promiscuous mode [ 176.610388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.680579][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.777732][ T5896] loop5: detected capacity change from 0 to 8 [ 177.732848][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.983315][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.779439][ T2257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.141033][ T5930] device syzkaller0 entered promiscuous mode [ 179.296811][ T5935] device syzkaller0 entered promiscuous mode [ 179.652951][ T5949] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 179.763572][ T5952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.803319][ T2257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.832137][ T5952] bond0: (slave batadv0): Releasing backup interface [ 179.895586][ T5952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.925224][ T5952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.977366][ T5952] device bridge_slave_0 left promiscuous mode [ 180.026405][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.106737][ T5952] device bridge_slave_1 left promiscuous mode [ 180.129772][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.204544][ T5952] bond0: (slave bond_slave_0): Releasing backup interface [ 180.229828][ T5952] bond0: (slave bond_slave_1): Releasing backup interface [ 180.984849][ T5952] team0: Port device team_slave_0 removed [ 181.045066][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.121835][ T5952] team0: Port device team_slave_1 removed [ 181.283008][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.301273][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.308733][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.944344][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.100346][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.120360][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.217356][ T5953] team0: Mode changed to "broadcast" [ 182.246193][ T5957] device vlan0 entered promiscuous mode [ 182.323617][ T5957] team0: Port device vlan0 added [ 182.418535][ T5974] bond0: (slave batadv0): Error: Slave device does not support XDP [ 182.761365][ T5983] device syzkaller0 entered promiscuous mode [ 183.633457][ T2257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.864778][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.601312][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.610186][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.631000][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.639345][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.789346][ T2257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.957069][ T2257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.143185][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.632548][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.412635][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.041294][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.843181][ T6088] device syzkaller0 entered promiscuous mode [ 193.080537][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.092721][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.211238][ T6096] device syzkaller1 entered promiscuous mode [ 193.352267][ T6101] device syzkaller0 entered promiscuous mode [ 193.514204][ T6111] netlink: 'syz.5.461': attribute type 10 has an invalid length. [ 194.236540][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.356237][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.457550][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.662499][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.671112][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.794164][ T6145] device syzkaller0 entered promiscuous mode [ 198.116127][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.389188][ T6172] device syzkaller0 entered promiscuous mode [ 199.631473][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.769152][ T6192] device syzkaller0 entered promiscuous mode [ 199.843741][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.755969][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.784943][ T6203] loop4: detected capacity change from 0 to 512 [ 200.997770][ T6203] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: writeback. [ 201.092218][ T6203] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.156074][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 201.564249][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.574580][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.375845][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.650270][ T4178] Bluetooth: hci0: command 0x0406 tx timeout [ 203.660568][ T4178] Bluetooth: hci3: command 0x0406 tx timeout [ 203.684254][ T4178] Bluetooth: hci1: command 0x0406 tx timeout [ 203.721119][ T4178] Bluetooth: hci2: command 0x0406 tx timeout [ 203.760046][ T6230] device syzkaller0 entered promiscuous mode [ 204.293996][ T6233] loop3: detected capacity change from 0 to 512 [ 204.378305][ T6233] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 204.418508][ T6233] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.591324][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.776247][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.786240][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.821712][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.857994][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.872102][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.910645][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.918361][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.966203][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.252094][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 205.315451][ T6252] binder: 6251:6252 ioctl c0306201 2000000003c0 returned -14 [ 205.596578][ T6260] netlink: 'syz.4.505': attribute type 10 has an invalid length. [ 205.607060][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.617499][ T6260] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 205.798392][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.512'. [ 206.041419][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.238027][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.440752][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.330525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.425628][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.062005][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.112204][ T6279] device syzkaller1 entered promiscuous mode [ 208.336943][ T6289] sctp: [Deprecated]: syz.4.524 (pid 6289) Use of int in max_burst socket option deprecated. [ 208.336943][ T6289] Use struct sctp_assoc_value instead [ 208.393024][ T6291] loop1: detected capacity change from 0 to 512 [ 208.440729][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.442451][ T6291] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 208.561740][ T6291] EXT4-fs (loop1): 1 truncate cleaned up [ 208.567552][ T6291] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=remount-ro,acl,noblock_validity,. Quota mode: none. [ 208.683347][ T6300] loop4: detected capacity change from 0 to 512 [ 209.007323][ T6300] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 209.820397][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.871564][ T6315] loop1: detected capacity change from 0 to 512 [ 209.965518][ T6317] netlink: 'syz.0.528': attribute type 10 has an invalid length. [ 210.270039][ T6315] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 210.310434][ T6315] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.886297][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.417140][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.611245][ T6339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.646091][ T6339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.978127][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 212.705045][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.032553][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 213.648724][ T6371] netlink: 'syz.0.551': attribute type 13 has an invalid length. [ 213.664591][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.675007][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.683695][ T6371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.987327][ T6377] netlink: 'syz.5.548': attribute type 10 has an invalid length. [ 214.003033][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.461371][ T6371] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 214.541815][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.115749][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.556'. [ 215.305772][ T6397] device syzkaller1 entered promiscuous mode [ 215.701968][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.742061][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.859178][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.621393][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.629755][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.880726][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.908653][ T6426] loop0: detected capacity change from 0 to 1024 [ 218.021657][ T6426] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 218.040699][ T6426] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.142510][ T6435] tmpfs: Unknown parameter '' [ 218.200723][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.868457][ T6441] loop1: detected capacity change from 0 to 512 [ 218.940232][ T6433] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 218.977754][ T6441] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.292452][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 219.631783][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.051889][ T6441] EXT4-fs (loop1): 1 orphan inode deleted [ 220.057771][ T6441] EXT4-fs (loop1): 1 truncate cleaned up [ 220.115952][ T6450] loop3: detected capacity change from 0 to 128 [ 220.140164][ T6441] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 220.195865][ T6450] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 220.342637][ T6441] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 255: comm syz.1.571: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 220.495859][ T6441] EXT4-fs (loop1): Remounting filesystem read-only [ 220.821557][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.526928][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.887340][ T6465] netlink: 'syz.3.577': attribute type 10 has an invalid length. [ 222.441379][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.527167][ T6468] device syzkaller1 entered promiscuous mode [ 224.012287][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.765518][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.180263][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.246673][ T6511] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 226.274291][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.533622][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.594463][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.638136][ T6518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.767368][ T6512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.799083][ T6512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.004961][ T26] net_ratelimit: 1 callbacks suppressed [ 228.004981][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.122520][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.543279][ T6557] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 228.545021][ T6559] loop5: detected capacity change from 0 to 128 [ 228.651979][ T6559] FAT-fs (loop5): bogus sectors per cluster 0 [ 228.658216][ T6559] FAT-fs (loop5): Can't find a valid FAT filesystem [ 229.098634][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 229.108132][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.120552][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.383012][ T6593] loop4: detected capacity change from 0 to 128 [ 230.487141][ T6593] EXT4-fs (loop4): Test dummy encryption mode enabled [ 230.516450][ T6593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 230.530338][ T6593] System zones: 1-3, 19-19, 35-36 [ 230.547475][ T6593] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 230.582828][ T6595] netlink: 'syz.5.605': attribute type 10 has an invalid length. [ 230.636986][ T6593] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.858419][ T6593] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 231.160474][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.168663][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.869492][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.916960][ T6644] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 233.989970][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.212340][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.488757][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 234.518199][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.700534][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.023790][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.125024][ T6666] loop4: detected capacity change from 0 to 256 [ 235.436710][ T6670] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 236.167895][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.336792][ T6678] loop4: detected capacity change from 0 to 512 [ 236.348691][ T6678] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.409195][ T6678] EXT4-fs (loop4): 1 truncate cleaned up [ 236.417209][ T6678] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.776862][ T6693] loop4: detected capacity change from 0 to 1024 [ 236.834639][ T6693] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 64 [ 237.047897][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.240807][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.265130][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.339757][ T6707] netlink: 'syz.0.652': attribute type 10 has an invalid length. [ 238.135623][ T6713] loop0: detected capacity change from 0 to 512 [ 238.175016][ T6714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.204457][ T6714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.233594][ T6714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.234249][ T6713] EXT4-fs (loop0): Invalid want_extra_isize 5 [ 239.194226][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 239.341989][ T4334] net_ratelimit: 3 callbacks suppressed [ 239.342007][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.582695][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 240.522256][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.637707][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.781683][ T6753] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 241.277060][ T6753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.196922][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.294214][ T6762] bond1: (slave dummy0): making interface the new active one [ 242.332317][ T6762] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 242.347109][ T6762] syz.3.668 (6762) used greatest stack depth: 19376 bytes left [ 242.381613][ T6758] bond1: (slave veth3): Enslaving as an active interface with a down link [ 242.396560][ T6765] device syzkaller0 entered promiscuous mode [ 242.423965][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 242.467994][ T6772] netlink: 76 bytes leftover after parsing attributes in process `syz.0.673'. [ 242.497037][ T6772] netlink: 52 bytes leftover after parsing attributes in process `syz.0.673'. [ 242.508949][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.516586][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.588991][ T6781] tipc: Enabling of bearer rejected, failed to enable media [ 243.039950][ T6786] device syzkaller0 entered promiscuous mode [ 243.341996][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.483515][ T6805] loop3: detected capacity change from 0 to 512 [ 243.585056][ T6805] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 243.624038][ T6805] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 16)! [ 243.662960][ T6811] loop0: detected capacity change from 0 to 128 [ 243.688110][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.697080][ T6805] EXT4-fs (loop3): group descriptors corrupted! [ 243.803401][ T6820] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 244.088134][ T6811] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.400373][ T6811] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.531228][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.728243][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.749236][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.785846][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.807115][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.817991][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.851912][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.327874][ T6833] batman_adv: batadv0: Adding interface: vlan2 [ 245.459330][ T6833] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.864059][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.935186][ T6833] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 245.969158][ T6842] device syzkaller0 entered promiscuous mode [ 246.295995][ T6864] loop3: detected capacity change from 0 to 1024 [ 246.360370][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.485215][ T6864] EXT4-fs (loop3): Ignoring removed bh option [ 246.598702][ T6864] EXT4-fs (loop3): Ignoring removed nobh option [ 246.759609][ T6864] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.921607][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.082938][ T6864] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 247.082938][ T6864] [ 247.138143][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.788255][ T6864] loop3: detected capacity change from 0 to 512 [ 248.391530][ T6864] EXT4-fs warning (device loop3): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 248.420420][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.557222][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.702'. [ 249.589555][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.782143][ T6891] device syzkaller0 entered promiscuous mode [ 249.804647][ T6893] device syzkaller0 entered promiscuous mode [ 250.203398][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.625820][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.839720][ T6933] device syzkaller0 entered promiscuous mode [ 252.153895][ T6946] loop5: detected capacity change from 0 to 1024 [ 252.206586][ T6946] EXT4-fs (loop5): Test dummy encryption mode enabled [ 252.319472][ T6946] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 252.840495][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.764616][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.840236][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 255.181486][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.665688][ T7025] capability: warning: `syz.4.749' uses 32-bit capabilities (legacy support in use) [ 255.866021][ T7031] loop5: detected capacity change from 0 to 512 [ 255.935159][ T7031] EXT4-fs (loop5): inline encryption not supported [ 255.952223][ T7031] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 256.493274][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.501641][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.841328][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.923447][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 257.002648][ T7] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 257.189181][ T7] Bluetooth: hci0: Injecting HCI hardware error event [ 257.271670][ T4204] Bluetooth: hci0: hardware error 0x00 [ 257.330901][ T7053] tipc: Started in network mode [ 257.372306][ T7053] tipc: Node identity 7f000001, cluster identity 4711 [ 257.381174][ T7053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.410559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.420440][ T7053] tipc: Enabled bearer , priority 10 [ 257.520774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.561160][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.648884][ T7069] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 257.660298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.669181][ T7067] device team_slave_1 entered promiscuous mode [ 257.715137][ T7074] device team_slave_1 left promiscuous mode [ 257.800271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.108266][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 258.118544][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 258.126152][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.136336][ T4203] Workqueue: hci4 hci_rx_work [ 258.141063][ T4203] Call Trace: [ 258.144373][ T4203] [ 258.147337][ T4203] dump_stack_lvl+0x188/0x250 [ 258.152052][ T4203] ? show_regs_print_info+0x20/0x20 [ 258.157429][ T4203] ? load_image+0x400/0x400 [ 258.161993][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 258.167156][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 258.171870][ T4203] ? process_one_work+0x85f/0x1010 [ 258.177019][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 258.182265][ T4203] kobject_add_internal+0x6e0/0xd90 [ 258.187509][ T4203] kobject_add+0x160/0x230 [ 258.191973][ T4203] ? kobject_init+0x1d0/0x1d0 [ 258.196779][ T4203] ? klist_children_get+0x50/0x50 [ 258.201827][ T4203] ? get_device_parent+0x121/0x3f0 [ 258.206955][ T4203] device_add+0x483/0xfb0 [ 258.211309][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 258.216299][ T4203] le_conn_complete_evt+0xc48/0x15c0 [ 258.221610][ T4203] ? cs_le_create_conn+0x5e0/0x5e0 [ 258.226731][ T4203] ? __mutex_trylock_common+0x155/0x260 [ 258.232289][ T4203] hci_le_meta_evt+0x285/0x3c90 [ 258.237153][ T4203] ? hci_event_packet+0x37b/0x1370 [ 258.242284][ T4203] ? __lock_acquire+0x7d10/0x7d10 [ 258.247327][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 258.253402][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 258.259045][ T4203] ? mark_lock+0x94/0x320 [ 258.263399][ T4203] ? mutex_unlock+0x10/0x10 [ 258.267916][ T4203] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 258.273905][ T4203] ? lock_chain_count+0x20/0x20 [ 258.278773][ T4203] ? __rwlock_init+0x140/0x140 [ 258.283545][ T4203] hci_event_packet+0xe48/0x1370 [ 258.288492][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 258.293711][ T4203] ? rcu_lock_release+0x20/0x20 [ 258.298572][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 258.303776][ T4203] hci_rx_work+0x255/0xa10 [ 258.308211][ T4203] process_one_work+0x85f/0x1010 [ 258.313174][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 258.318809][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 258.324103][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 258.329140][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 258.334691][ T4203] ? wq_worker_running+0x97/0x170 [ 258.339827][ T4203] worker_thread+0xaa6/0x1290 [ 258.344618][ T4203] kthread+0x436/0x520 [ 258.348695][ T4203] ? rcu_lock_release+0x20/0x20 [ 258.353550][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 258.358150][ T4203] ret_from_fork+0x1f/0x30 [ 258.362592][ T4203] [ 258.406303][ T4203] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 258.421534][ T4203] Bluetooth: hci4: failed to register connection device [ 258.452979][ T4203] Bluetooth: hci4: link tx timeout [ 258.460007][ T4203] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 258.471842][ T4203] Bluetooth: hci4: link tx timeout [ 258.477511][ T4203] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 258.988473][ T4234] tipc: Node number set to 2130706433 [ 259.158876][ T7116] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 259.245260][ T7120] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 259.286527][ T7122] loop1: detected capacity change from 0 to 1024 [ 259.353524][ T7120] device bond2 entered promiscuous mode [ 259.369069][ T7120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.406568][ T7124] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.425000][ T7124] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 259.437585][ T7124] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 259.454391][ T7122] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.542889][ T7124] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.555599][ T7124] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 260.074480][ T7145] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 260.082838][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 260.394465][ T7162] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 260.920257][ C0] net_ratelimit: 10 callbacks suppressed [ 260.920276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.181923][ T7166] loop5: detected capacity change from 0 to 512 [ 261.218317][ T4235] Bluetooth: hci4: command 0x0406 tx timeout [ 261.225677][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.323165][ T7166] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 261.338244][ T7166] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.398317][ T7180] loop0: detected capacity change from 0 to 256 [ 261.553010][ T7180] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.173795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.267904][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.282592][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.282691][ T7180] FAT-fs (loop0): Filesystem has been set read-only [ 262.328843][ T7191] device syzkaller0 entered promiscuous mode [ 262.342789][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.409776][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.450271][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.458939][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.498383][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.514756][ T7201] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 262.523022][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.581126][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.600023][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.610256][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.618928][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.662314][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.708056][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.747571][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.772339][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.790928][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.807565][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.825214][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.890195][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.922908][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.931634][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.944636][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.953990][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.962911][ T7180] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.971746][ T25] audit: type=1800 audit(1778106997.436:6): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.796" name="file1" dev="loop0" ino=1048609 res=0 errno=0 [ 263.002961][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.009307][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.022377][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.219852][ T7225] loop4: detected capacity change from 0 to 2048 [ 263.240552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.311651][ T7231] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 263.385338][ T7225] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 263.399614][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.450401][ T7225] EXT4-fs (loop4): group descriptors corrupted! [ 264.290229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.460009][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.482100][ T7244] loop1: detected capacity change from 0 to 512 [ 264.567911][ T7244] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 264.585413][ T7244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 264.615288][ T7244] System zones: 0-1, 15-15, 18-18, 34-34 [ 264.622401][ T7244] EXT4-fs (loop1): orphan cleanup on readonly fs [ 264.628848][ T7244] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 264.638716][ T7244] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 264.653995][ T7244] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 264.673258][ T7244] EXT4-fs (loop1): 1 truncate cleaned up [ 264.678966][ T7244] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 264.930312][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 264.955289][ T7262] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 265.320283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.104121][ T4235] net_ratelimit: 3 callbacks suppressed [ 266.104139][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.118529][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.196462][ T7277] loop5: detected capacity change from 0 to 512 [ 266.247018][ T7279] lo: Caught tx_queue_len zero misconfig [ 266.256888][ T7278] lo: Caught tx_queue_len zero misconfig [ 266.288587][ T7277] EXT4-fs (loop5): Ignoring removed bh option [ 266.305867][ T7277] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 266.360151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.373736][ T7277] EXT4-fs (loop5): 1 truncate cleaned up [ 266.379586][ T7277] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 266.432323][ T7289] loop0: detected capacity change from 0 to 8 [ 266.583573][ T7291] device syzkaller0 entered promiscuous mode [ 266.642712][ T3038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.773561][ T7289] SQUASHFS error: zlib decompression failed, data probably corrupt [ 266.950734][ T7289] SQUASHFS error: Failed to read block 0x9b: -5 [ 267.066500][ T4232] Bluetooth: hci4: command 0x0405 tx timeout [ 267.076010][ T7289] SQUASHFS error: Unable to read metadata cache entry [99] [ 267.215521][ T7289] SQUASHFS error: Unable to read inode 0x127 [ 267.323681][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.337512][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.346077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.400203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.417085][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.841'. [ 267.439147][ T3038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.591640][ T3038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.628234][ T7301] loop5: detected capacity change from 0 to 2048 [ 267.705877][ T3038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.743578][ T7301] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 268.130414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.162267][ T7319] device syzkaller0 entered promiscuous mode [ 268.360726][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.440194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.512270][ T7335] netlink: 7 bytes leftover after parsing attributes in process `syz.4.854'. [ 268.916243][ T7312] chnl_net:caif_netlink_parms(): no params data found [ 268.972568][ T7360] device syzkaller0 entered promiscuous mode [ 269.248233][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.360906][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.420511][ T7312] device bridge_slave_0 entered promiscuous mode [ 269.441447][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.466504][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.501331][ T7312] device bridge_slave_1 entered promiscuous mode [ 269.998797][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.139184][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 270.187373][ T3038] device hsr_slave_0 left promiscuous mode [ 270.207202][ T3038] device hsr_slave_1 left promiscuous mode [ 270.267892][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.328512][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.340236][ T3038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.347704][ T3038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.369416][ T3038] batman_adv: batadv0: Removing interface: vlan2 [ 270.387026][ T3038] device bridge_slave_1 left promiscuous mode [ 270.393416][ T3038] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.424453][ T3038] device bridge_slave_0 left promiscuous mode [ 270.446588][ T3038] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.502644][ T3038] device veth1_macvtap left promiscuous mode [ 270.526263][ T3038] device veth0_macvtap left promiscuous mode [ 270.554447][ T3038] device veth1_vlan left promiscuous mode [ 270.567511][ T3038] device veth0_vlan left promiscuous mode [ 271.124132][ T3038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.148215][ T3038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.229902][ T3038] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 271.274676][ T3038] bond0 (unregistering): Released all slaves [ 271.360644][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.372735][ T7404] netlink: 'syz.5.877': attribute type 1 has an invalid length. [ 271.434378][ T7423] device syzkaller0 entered promiscuous mode [ 271.481649][ T4235] net_ratelimit: 5 callbacks suppressed [ 271.481669][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.562268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.584606][ T7312] team0: Port device team_slave_0 added [ 271.615714][ T7446] loop5: detected capacity change from 0 to 1024 [ 271.688468][ T7312] team0: Port device team_slave_1 added [ 271.721614][ T7446] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodelalloc,noquota,resgid=0x0000000000000000,jqfmt=vfsv0,barrier,,errors=continue. Quota mode: none. [ 271.740435][ T7446] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.756451][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.763842][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.789968][ T7312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.802795][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.809794][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.836208][ T7312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.078563][ T7312] device hsr_slave_0 entered promiscuous mode [ 272.101191][ T7312] device hsr_slave_1 entered promiscuous mode [ 272.120008][ T7312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.129244][ T7312] Cannot create hsr debugfs directory [ 272.200329][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.201008][ T26] Bluetooth: hci1: command 0x041b tx timeout [ 272.404059][ T7477] netlink: 'syz.5.894': attribute type 5 has an invalid length. [ 272.457630][ T7477] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.467047][ T7477] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.476033][ T7477] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.484897][ T7477] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.520758][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.569664][ T7477] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.578965][ T7477] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.588151][ T7477] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.597220][ T7477] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.610183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.672247][ T7486] veth1_to_bond: Caught tx_queue_len zero misconfig [ 272.837682][ T7492] device syzkaller0 entered promiscuous mode [ 272.947915][ T7312] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 272.961412][ T7498] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 273.101032][ T7312] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 273.143079][ T7312] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 273.640258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.307768][ T6457] Bluetooth: hci1: command 0x040f tx timeout [ 274.325017][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.348676][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.414975][ T7312] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 274.429814][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.550868][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.714366][ T7508] netlink: 144 bytes leftover after parsing attributes in process `syz.0.902'. [ 275.033152][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.130548][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.182902][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.279881][ T7312] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.361667][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.411102][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.490450][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.497602][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.739017][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.747956][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.756943][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.764078][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.798115][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.827635][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.839096][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.880946][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.906269][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.927763][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.982117][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.028406][ T7312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.103048][ T7312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.188647][ T7533] device syzkaller0 entered promiscuous mode [ 276.217395][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.233781][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.364141][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.431463][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 276.442509][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.511160][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.523486][ T4334] net_ratelimit: 12 callbacks suppressed [ 276.523504][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.677890][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.760188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.859820][ T7551] device syzkaller0 entered promiscuous mode [ 277.050536][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.072064][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.104513][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.360355][ T4334] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 277.810289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.161627][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.183550][ T7575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.197980][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.206179][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.214720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.460281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.469185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.510217][ T4334] usb 4-1: Using ep0 maxpacket: 32 [ 278.740384][ T4334] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 278.749216][ T4334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.798319][ T4334] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 278.826996][ T4334] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 279.010336][ T4334] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.019493][ T4334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.068665][ T4334] usb 4-1: Product: syz [ 279.133025][ T4334] usb 4-1: Manufacturer: syz [ 279.150171][ T4334] usb 4-1: SerialNumber: syz [ 279.277811][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.292116][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.390745][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.416961][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.502398][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.516476][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.557781][ T7312] device veth0_vlan entered promiscuous mode [ 279.598831][ T7612] device syzkaller0 entered promiscuous mode [ 279.642595][ T4334] usb 4-1: USB disconnect, device number 2 [ 279.647787][ T7312] device veth1_vlan entered promiscuous mode [ 279.920135][ T4339] udevd[4339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.926784][ T7610] device syzkaller0 entered promiscuous mode [ 280.368358][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.487985][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.700256][ T7312] device veth0_macvtap entered promiscuous mode [ 280.767701][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.803501][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.890633][ T7312] device veth1_macvtap entered promiscuous mode [ 280.907648][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.945474][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.986892][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.050221][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.096422][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.120138][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.146637][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.177826][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.268632][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.321669][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.330816][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.373240][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.424573][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.450662][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.471662][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.532373][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.590560][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.631076][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.672576][ T7312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.685752][ T7312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.736126][ T7312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.781231][ T7312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.802856][ T26] net_ratelimit: 7 callbacks suppressed [ 281.802876][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.210168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.286785][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.306118][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.356007][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.449119][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.491574][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.523658][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.922415][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.240202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.019895][ T7723] netlink: 'syz.4.946': attribute type 10 has an invalid length. [ 284.144217][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.280249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.387237][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.470360][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.611535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.724751][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.828674][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.963'. [ 286.207924][ T7772] loop3: detected capacity change from 0 to 512 [ 286.543670][ T7772] EXT4-fs warning (device loop3): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 286.914028][ T7792] netlink: 'syz.4.966': attribute type 10 has an invalid length. [ 287.720162][ C0] net_ratelimit: 6 callbacks suppressed [ 287.720184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.793927][ T7809] loop6: detected capacity change from 0 to 256 [ 287.805017][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.841493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.858592][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.847690][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.880646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.986103][ T7809] FAT-fs (loop6): Directory bread(block 64) failed [ 289.992913][ T7809] FAT-fs (loop6): Directory bread(block 65) failed [ 289.999915][ T7809] FAT-fs (loop6): Directory bread(block 66) failed [ 290.006667][ T7809] FAT-fs (loop6): Directory bread(block 67) failed [ 290.013679][ T7809] FAT-fs (loop6): Directory bread(block 68) failed [ 290.020397][ T7809] FAT-fs (loop6): Directory bread(block 69) failed [ 290.027592][ T7809] FAT-fs (loop6): Directory bread(block 70) failed [ 290.034508][ T7809] FAT-fs (loop6): Directory bread(block 71) failed [ 290.041493][ T7809] FAT-fs (loop6): Directory bread(block 72) failed [ 290.048179][ T7809] FAT-fs (loop6): Directory bread(block 73) failed [ 290.873234][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.930198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.038470][ T7821] netlink: 9 bytes leftover after parsing attributes in process `syz.3.978'. [ 291.108566][ T7821] device gretap0 entered promiscuous mode [ 291.880514][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.970148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.345354][ T7860] device syzkaller1 entered promiscuous mode [ 292.492663][ T7863] netlink: 'syz.6.984': attribute type 10 has an invalid length. [ 292.747656][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.757491][ T7863] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 293.000214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.770675][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.846642][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.855273][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.050169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.426654][ T7901] device syzkaller0 entered promiscuous mode [ 294.921504][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.941205][ T7912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.973580][ T7912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.080225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.133812][ T7912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.340612][ T7920] loop4: detected capacity change from 0 to 512 [ 295.492897][ T7920] EXT4-fs (loop4): Ignoring removed bh option [ 295.519561][ T7920] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 295.548313][ T7925] loop3: detected capacity change from 0 to 512 [ 295.578712][ T7920] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #15: comm syz.4.1011: inline data xattr refers to an external xattr inode [ 296.287918][ T7925] EXT4-fs (loop3): Test dummy encryption mode enabled [ 296.340202][ T7920] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1011: couldn't read orphan inode 15 (err -117) [ 296.380388][ T7925] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 296.435737][ T7925] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 296.450538][ T7920] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,abort,,errors=continue. Quota mode: writeback. [ 296.497827][ T7925] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 296.913046][ T7936] device syzkaller0 entered promiscuous mode [ 297.866745][ T7956] loop6: detected capacity change from 0 to 256 [ 297.962268][ T7956] FAT-fs (loop6): Directory bread(block 64) failed [ 297.979143][ T7956] FAT-fs (loop6): Directory bread(block 65) failed [ 298.068527][ T7956] FAT-fs (loop6): Directory bread(block 66) failed [ 298.083048][ T7956] FAT-fs (loop6): Directory bread(block 67) failed [ 298.098305][ T7956] FAT-fs (loop6): Directory bread(block 68) failed [ 298.111388][ T7956] FAT-fs (loop6): Directory bread(block 69) failed [ 298.124061][ T7956] FAT-fs (loop6): Directory bread(block 70) failed [ 298.137577][ T7956] FAT-fs (loop6): Directory bread(block 71) failed [ 298.152026][ T7956] FAT-fs (loop6): Directory bread(block 72) failed [ 298.158927][ T7956] FAT-fs (loop6): Directory bread(block 73) failed [ 298.200775][ C0] net_ratelimit: 8 callbacks suppressed [ 298.200796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.779659][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.838063][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1028'. [ 299.098857][ T7988] netlink: 'syz.4.1026': attribute type 10 has an invalid length. [ 299.240190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.488491][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.496997][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.518847][ T7994] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 299.520271][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.940340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.949976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.187355][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.204460][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.261148][ T8003] loop4: detected capacity change from 0 to 512 [ 300.319078][ T8003] EXT4-fs (loop4): Ignoring removed bh option [ 300.365778][ T8003] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 300.400238][ T8003] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 300.919796][ T8026] loop3: detected capacity change from 0 to 2048 [ 301.095006][ T8026] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.144791][ T8039] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 301.878352][ T8057] netlink: 'syz.6.1047': attribute type 10 has an invalid length. [ 303.246374][ T7] net_ratelimit: 6 callbacks suppressed [ 303.246395][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.330402][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.410148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.697562][ T8092] loop3: detected capacity change from 0 to 512 [ 303.937941][ T8092] EXT4-fs (loop3): Test dummy encryption mode enabled [ 304.107271][ T8092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 304.450155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.624623][ T8092] EXT4-fs (loop3): 1 truncate cleaned up [ 304.630668][ T8092] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,errors=remount-ro,. Quota mode: none. [ 304.644867][ T8097] xt_hashlimit: size too large, truncated to 1048576 [ 304.817983][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.925305][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.159246][ T4194] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 305.332504][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 305.545033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.679616][ T4629] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.802701][ T4629] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.919371][ T4629] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.961764][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.046126][ T4629] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.281716][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.610224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.733766][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 308.156295][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.200175][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.238619][ T8200] 9pnet: Insufficient options for proto=fd [ 308.248692][ T8141] device bridge_slave_0 entered promiscuous mode [ 308.262585][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.269717][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.291272][ T8141] device bridge_slave_1 entered promiscuous mode [ 308.397797][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.447994][ T8207] netlink: 'syz.6.1081': attribute type 10 has an invalid length. [ 308.484595][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.530816][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 308.680207][ C0] net_ratelimit: 3 callbacks suppressed [ 308.680228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.142833][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.156071][ T4629] device hsr_slave_0 left promiscuous mode [ 309.214803][ T4629] device hsr_slave_1 left promiscuous mode [ 309.268105][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.285365][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.320343][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.328711][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.359000][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.379842][ T4629] device bridge_slave_1 left promiscuous mode [ 309.399521][ T4629] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.412167][ T4629] device bridge_slave_0 left promiscuous mode [ 309.426137][ T4629] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.463927][ T4629] device veth1_macvtap left promiscuous mode [ 309.478241][ T4629] device veth0_macvtap left promiscuous mode [ 309.491297][ T4629] device veth1_vlan left promiscuous mode [ 309.517731][ T4629] device veth0_vlan left promiscuous mode [ 309.697493][ T8234] loop4: detected capacity change from 0 to 256 [ 309.730484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.773030][ T4629] bond2 (unregistering): Released all slaves [ 309.783167][ T8234] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 309.794627][ T4629] bond1 (unregistering): (slave veth3): Releasing active interface [ 309.815558][ T4629] device dummy0 entered promiscuous mode [ 309.835479][ T8234] FAT-fs (loop4): bogus number of directory entries (1) [ 309.844926][ T4629] bond1 (unregistering): (slave dummy0): Releasing active interface [ 309.869264][ T4629] device dummy0 left promiscuous mode [ 309.870121][ T8234] FAT-fs (loop4): Can't find a valid FAT filesystem [ 309.892655][ T4629] bond1 (unregistering): Released all slaves [ 310.200680][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.209804][ T4629] team0 (unregistering): Port device team_slave_1 removed [ 310.244026][ T4629] team0 (unregistering): Port device team_slave_0 removed [ 310.277141][ T4629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.398356][ T4629] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 310.464935][ T4629] bond0 (unregistering): Released all slaves [ 310.610149][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 310.619755][ T8141] team0: Port device team_slave_0 added [ 310.656822][ T8141] team0: Port device team_slave_1 added [ 310.770146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.954592][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.730301][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.870190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.880541][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.897195][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.926878][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.940789][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.948305][ T8249] loop0: detected capacity change from 0 to 1024 [ 312.005768][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.043205][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.049921][ T8249] EXT4-fs (loop0): Test dummy encryption mode enabled [ 312.112549][ T8254] loop6: detected capacity change from 0 to 128 [ 312.123852][ T8249] EXT4-fs (loop0): inline encryption not supported [ 312.144425][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.157705][ T8249] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 312.267256][ T8141] device hsr_slave_0 entered promiscuous mode [ 312.274794][ T8141] device hsr_slave_1 entered promiscuous mode [ 312.291615][ T8141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.307368][ T8141] Cannot create hsr debugfs directory [ 312.319532][ T8254] EXT4-fs (loop6): Test dummy encryption mode enabled [ 312.406083][ T8254] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 312.494118][ T8254] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.680232][ T26] Bluetooth: hci2: command 0x040f tx timeout [ 312.963911][ T8141] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 313.830195][ T8141] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.960313][ C0] net_ratelimit: 5 callbacks suppressed [ 313.960332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.041485][ T8141] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 314.048753][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.099487][ T8141] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 314.760156][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 315.000187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.623210][ T8321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.880358][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.888573][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.050162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.280340][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.350326][ T8312] device syzkaller0 entered promiscuous mode [ 316.823779][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.090181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.421556][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.498865][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.540519][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1111'. [ 317.602697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.618865][ T8348] loop6: detected capacity change from 0 to 512 [ 317.628627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.641083][ T8344] netlink: 'syz.5.1111': attribute type 1 has an invalid length. [ 317.707529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.756749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.814722][ T8348] EXT4-fs (loop6): 1 orphan inode deleted [ 317.820782][ T8348] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.831645][ T8348] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.010627][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.017781][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.126861][ T8361] loop4: detected capacity change from 0 to 256 [ 318.408409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.097863][ T6457] net_ratelimit: 3 callbacks suppressed [ 319.097885][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.143240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.160141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.210618][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.217793][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.210162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.415979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.427039][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.480922][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.872917][ T8141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.984725][ T8141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.039431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.063079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.162556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.233479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.250141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.261745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.290684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.303589][ T8391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.316496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.349173][ T8391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.379443][ T8391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.399529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.418869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.433468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.470570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.560876][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.399023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.679238][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.803331][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.046354][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.137262][ T6457] net_ratelimit: 8 callbacks suppressed [ 324.137281][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.452908][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.459356][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.788907][ T8442] loop6: detected capacity change from 0 to 2048 [ 324.850193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.232487][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.261034][ T8442] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 325.271958][ T8442] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 325.393721][ T8442] fs-verity: sha512 using implementation "sha512-avx2" [ 325.880352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.417060][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.654227][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.684923][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.737283][ T8492] netlink: 'syz.4.1132': attribute type 10 has an invalid length. [ 326.805763][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.825911][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.840643][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.869452][ T8141] device veth0_vlan entered promiscuous mode [ 326.887526][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.928271][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.930128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.964834][ T8141] device veth1_vlan entered promiscuous mode [ 327.093904][ T8141] device veth0_macvtap entered promiscuous mode [ 327.166511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 327.202740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 327.229103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.260961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.295822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 327.356583][ T8141] device veth1_macvtap entered promiscuous mode [ 327.451537][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.480537][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.491476][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.515047][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.538901][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.559991][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.583611][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.611266][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.635820][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 327.647296][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.674279][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.715809][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.786295][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.806985][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.846049][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.869248][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.960189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.008526][ T8141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.086308][ T8141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.108867][ T8141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.152545][ T8141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.184435][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.210549][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.219466][ T8511] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1146'. [ 328.406307][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.441403][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.469298][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 328.520905][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.541194][ T390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.559248][ T390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.573859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 328.908891][ T8546] loop7: detected capacity change from 0 to 1024 [ 328.969003][ T8546] EXT4-fs (loop7): Ignoring removed bh option [ 328.983179][ T8546] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 329.043839][ T8546] EXT4-fs (loop7): group descriptors corrupted! [ 330.040235][ C0] net_ratelimit: 1 callbacks suppressed [ 330.040254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.290688][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.310083][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.378592][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.080201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.574338][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.796828][ T8613] netlink: 'syz.4.1159': attribute type 10 has an invalid length. [ 331.885702][ T8608] binder: 8607:8608 unknown command 1074553619 [ 331.943106][ T8617] binder: 8607:8617 unknown command 1074553620 [ 331.981023][ T8608] binder: 8607:8608 ioctl c0306201 200000000040 returned -22 [ 332.047790][ T8617] binder: 8607:8617 ioctl c0306201 200000000640 returned -22 [ 332.130347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.213731][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.322999][ T8629] loop6: detected capacity change from 0 to 256 [ 333.160208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.323513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.362025][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.523504][ T140] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.613555][ T140] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.204149][ T140] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.240148][ C0] net_ratelimit: 5 callbacks suppressed [ 335.240169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.030532][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.116155][ T140] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.280144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.589055][ T8716] device syzkaller0 entered promiscuous mode [ 336.606161][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.243969][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.320153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.457530][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.572038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.733368][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 339.343538][ T4235] Bluetooth: hci2: command 0x0409 tx timeout [ 339.657612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.666079][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.333935][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.481946][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.497287][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.507075][ T8723] device bridge_slave_0 entered promiscuous mode [ 340.690148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.703452][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.725456][ T8790] device syzkaller0 entered promiscuous mode [ 340.733322][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.740735][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.748566][ T8723] device bridge_slave_1 entered promiscuous mode [ 340.947701][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.002955][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.258614][ T8723] team0: Port device team_slave_0 added [ 341.313358][ T8723] team0: Port device team_slave_1 added [ 341.415783][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 341.457799][ T8811] device syzkaller0 entered promiscuous mode [ 341.506825][ T140] device hsr_slave_0 left promiscuous mode [ 341.518700][ T140] device hsr_slave_1 left promiscuous mode [ 341.529288][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.566379][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.610791][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.628501][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.649341][ T140] device bridge_slave_1 left promiscuous mode [ 341.679223][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.692301][ T140] device bridge_slave_0 left promiscuous mode [ 341.698566][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.721192][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.729379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.741194][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.810003][ T140] device veth1_macvtap left promiscuous mode [ 341.820326][ T140] device veth0_macvtap left promiscuous mode [ 341.836676][ T140] device veth1_vlan left promiscuous mode [ 341.857026][ T140] device veth0_vlan left promiscuous mode [ 342.597772][ T140] team0 (unregistering): Port device team_slave_1 removed [ 342.623353][ T140] team0 (unregistering): Port device team_slave_0 removed [ 342.647921][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.676963][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.760138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.768543][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.906864][ T140] bond0 (unregistering): Released all slaves [ 342.966769][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.979032][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.005000][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.021231][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.180794][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.198012][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.223956][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.249895][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.282955][ T8840] device syzkaller0 entered promiscuous mode [ 343.296381][ T8844] netlink: 'syz.0.1221': attribute type 6 has an invalid length. [ 343.313720][ T8844] netlink: 'syz.0.1221': attribute type 7 has an invalid length. [ 343.323688][ T8844] netlink: 'syz.0.1221': attribute type 8 has an invalid length. [ 343.405446][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.444015][ T8723] device hsr_slave_0 entered promiscuous mode [ 343.473127][ T8723] device hsr_slave_1 entered promiscuous mode [ 343.473994][ T8723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.474094][ T8723] Cannot create hsr debugfs directory [ 343.480200][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 343.607122][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 343.800275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.071381][ T8723] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 344.113601][ T8723] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 344.145306][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1230'. [ 344.158830][ T8723] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 344.192845][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 344.209817][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 344.270312][ T8723] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 344.420568][ T8877] device syzkaller0 entered promiscuous mode [ 345.431670][ T4178] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 345.439981][ T4178] Bluetooth: hci3: Injecting HCI hardware error event [ 345.447643][ T4203] Bluetooth: hci3: hardware error 0x00 [ 345.512815][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.570085][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 345.880134][ C0] net_ratelimit: 3 callbacks suppressed [ 345.880153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.209964][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.252496][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.293194][ T8723] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.326270][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.353110][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.377292][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.456448][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.463628][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.476277][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.658543][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.760439][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.903363][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.930123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.179120][ T4629] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.186448][ T4629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.468036][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.501200][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.970145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.531456][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.732614][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.743220][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.852296][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.887408][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.914907][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.947729][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.996400][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.010160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.045088][ T8723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.059719][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.071380][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.080834][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.182871][ T8951] device syzkaller0 entered promiscuous mode [ 349.497590][ T8962] device netdevsim0 entered promiscuous mode [ 349.579145][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.626089][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.634903][ T8962] device netdevsim0 left promiscuous mode [ 350.051512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.407622][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.450643][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.458235][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.514078][ T8983] loop0: detected capacity change from 0 to 256 [ 351.080150][ C0] net_ratelimit: 1 callbacks suppressed [ 351.080169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.177853][ T8998] device syzkaller0 entered promiscuous mode [ 351.330957][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.582160][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 351.591281][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.612610][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.645941][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.855384][ T8723] device veth0_vlan entered promiscuous mode [ 351.868055][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.871110][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.130121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.531650][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.610450][ T4178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.651368][ T8723] device veth1_vlan entered promiscuous mode [ 352.715686][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.824608][ T8723] device veth0_macvtap entered promiscuous mode [ 352.850779][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.880951][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.940210][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.940872][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.031714][ T8723] device veth1_macvtap entered promiscuous mode [ 353.099193][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.132928][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.160225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.184761][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.214873][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.258196][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.286580][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.350643][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.392492][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.429540][ T9053] device syzkaller0 entered promiscuous mode [ 353.440366][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.518215][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.575589][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.640760][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.682403][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.730082][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.797152][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.835795][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.847274][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.969982][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.981855][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.012483][ T8723] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.167538][ T8723] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.211071][ T8723] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.249000][ T8723] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.263949][ T9091] tmpfs: Unknown parameter 'noswap' [ 355.297996][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.320428][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.427313][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.491786][ T390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.510270][ T390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.528791][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.280233][ C0] net_ratelimit: 8 callbacks suppressed [ 356.280254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.294829][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.305682][ T9113] device syzkaller0 entered promiscuous mode [ 357.320264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.328444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.801337][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 357.843496][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 358.000259][ T9172] netlink: 'syz.8.1302': attribute type 21 has an invalid length. [ 358.015519][ T9172] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.041550][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 358.060495][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 358.280521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.360337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.370913][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.400131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.408628][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.416790][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.541194][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1318'. [ 361.480126][ C0] net_ratelimit: 3 callbacks suppressed [ 361.480147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.710272][ T9292] xfrm0: Caught tx_queue_len zero misconfig [ 362.005113][ T9304] kernel profiling enabled (shift: 17) [ 362.520171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.933905][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.945272][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.982118][ T9318] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1349'. [ 363.094934][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1349'. [ 363.126877][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1349'. [ 363.570114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.983325][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1355'. [ 363.999185][ T9337] loop8: detected capacity change from 0 to 512 [ 364.031660][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.126241][ T9337] EXT4-fs (loop8): Invalid log block size: 12 [ 364.780436][ T9365] netlink: 'syz.8.1361': attribute type 1 has an invalid length. [ 366.556497][ T9385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 366.671538][ T9388] loop5: detected capacity change from 0 to 512 [ 366.930405][ T9388] EXT4-fs (loop5): Mount option "dax=never" incompatible with ext2 [ 367.250695][ T9411] fuse: Bad value for 'fd' [ 374.791958][ T9550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1417'. [ 375.050693][ T9547] loop0: detected capacity change from 0 to 8192 [ 375.344074][ T9570] loop4: detected capacity change from 0 to 512 [ 375.412830][ T9570] EXT4-fs (loop4): Ignoring removed nobh option [ 375.449077][ T9570] EXT4-fs (loop4): Ignoring removed bh option [ 375.665992][ T9570] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 375.679305][ T9570] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1423: invalid indirect mapped block 256 (level 1) [ 375.734856][ T9570] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1423: invalid indirect mapped block 2683928664 (level 1) [ 375.760604][ T9570] EXT4-fs (loop4): 1 truncate cleaned up [ 375.766437][ T9570] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nouid32,bh,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,jqfmt=vfsold,,,errors=continue. Quota mode: writeback. [ 377.627052][ T9619] input: syz1 as /devices/virtual/input/input7 [ 377.666063][ T9619] input: failed to attach handler leds to device input7, error: -6 [ 380.232528][ T9662] loop8: detected capacity change from 0 to 128 [ 380.517556][ T9668] device syzkaller1 entered promiscuous mode [ 380.539678][ T9669] device syzkaller0 entered promiscuous mode [ 382.195625][ T9707] device syzkaller0 entered promiscuous mode [ 382.581987][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1468'. [ 384.869254][ T9763] device syzkaller0 entered promiscuous mode [ 385.967246][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.978390][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.099130][ T9822] netlink: 'syz.5.1487': attribute type 10 has an invalid length. [ 390.898406][ T9887] loop4: detected capacity change from 0 to 512 [ 390.955489][ T9887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 391.104713][ T9887] EXT4-fs (loop4): 1 truncate cleaned up [ 391.114005][ T9887] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 393.247108][ T1110] Bluetooth: hci1: command 0x0406 tx timeout [ 393.312297][ T9923] device syzkaller0 entered promiscuous mode [ 393.499053][ T9931] loop0: detected capacity change from 0 to 1024 [ 393.621863][ T9931] EXT4-fs (loop0): Ignoring removed orlov option [ 394.769627][ T9931] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 396.352651][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 396.406826][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 396.630543][ T9983] device syzkaller0 entered promiscuous mode [ 397.838731][T10011] netlink: 'syz.0.1531': attribute type 10 has an invalid length. [ 397.880542][T10013] netlink: 'syz.5.1534': attribute type 1 has an invalid length. [ 398.068534][T10016] loop5: detected capacity change from 0 to 128 [ 398.275846][ T1110] Bluetooth: hci5: command 0x1003 tx timeout [ 398.282500][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 398.291539][T10016] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 398.351748][T10016] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.344867][T10030] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 399.401150][T10034] loop8: detected capacity change from 0 to 256 [ 399.516147][T10034] FAT-fs (loop8): Directory bread(block 64) failed [ 399.564327][T10034] FAT-fs (loop8): Directory bread(block 65) failed [ 399.590869][T10034] FAT-fs (loop8): Directory bread(block 66) failed [ 399.597477][T10034] FAT-fs (loop8): Directory bread(block 67) failed [ 399.664959][T10034] FAT-fs (loop8): Directory bread(block 68) failed [ 399.700132][T10034] FAT-fs (loop8): Directory bread(block 69) failed [ 399.706900][T10034] FAT-fs (loop8): Directory bread(block 70) failed [ 399.760127][T10034] FAT-fs (loop8): Directory bread(block 71) failed [ 399.766827][T10034] FAT-fs (loop8): Directory bread(block 72) failed [ 399.784178][T10034] FAT-fs (loop8): Directory bread(block 73) failed [ 399.832419][T10049] device syzkaller0 entered promiscuous mode [ 400.214026][T10063] netlink: 'syz.6.1545': attribute type 1 has an invalid length. [ 400.360202][ T4178] Bluetooth: hci5: command 0x1001 tx timeout [ 400.366465][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 403.103127][T10096] xt_CT: No such helper "pptp" [ 403.293124][T10107] device syzkaller0 entered promiscuous mode [ 403.352879][ T1110] Bluetooth: hci5: command 0x1009 tx timeout [ 403.730605][T10132] device geneve2 entered promiscuous mode [ 403.761559][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 404.878918][T10156] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1567'. [ 406.102381][T10177] device syzkaller0 entered promiscuous mode [ 407.537020][T10207] loop0: detected capacity change from 0 to 512 [ 407.727461][T10210] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1580'. [ 408.018018][T10207] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 408.050296][T10207] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.408346][T10207] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1578: corrupted inode contents [ 408.496888][T10207] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.1578: mark_inode_dirty error [ 408.517784][T10207] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1578: corrupted inode contents [ 408.701508][T10207] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1578: mark_inode_dirty error [ 409.818608][T10246] device syzkaller0 entered promiscuous mode [ 412.024565][T10285] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1597'. [ 412.562295][T10307] device syzkaller0 entered promiscuous mode [ 412.985832][T10323] netlink: 'syz.4.1596': attribute type 10 has an invalid length. [ 414.800614][T10340] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1612'. [ 415.649181][T10365] loop0: detected capacity change from 0 to 512 [ 415.730479][T10365] EXT4-fs (loop0): Ignoring removed orlov option [ 415.768378][T10365] EXT4-fs (loop0): bad block size 65536 Stopping sshd: [ 417.194923][T10389] loop6: detected capacity change from 0 to 512 stopped /usr/sbin/sshd (pid 3949) OK [ 417.481740][T10389] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.1623: bad orphan inode 11862016 [ 417.504027][T10389] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 417.581191][T10389] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) Stopping crond: stopped /usr/sbin/crond (pid 3928) OK [ 418.862623][T10412] device syzkaller1 entered promiscuous mode Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3853) [ 420.401312][T10453] device syzkaller0 entered promiscuous mode [ 420.502713][T10465] loop8: detected capacity change from 0 to 512 [ 420.563283][T10465] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended Stopping network: [ 420.714514][T10465] EXT4-fs (loop8): failed to initialize system zone (-117) [ 420.728593][T10465] EXT4-fs (loop8): mount failed [ 421.227375][T10495] ================================================================== [ 421.236111][T10495] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 421.245539][T10495] Read of size 1 at addr ffff88807af87608 by task syz.5.1647/10495 [ 421.253847][T10495] [ 421.256516][T10495] CPU: 1 PID: 10495 Comm: syz.5.1647 Not tainted syzkaller #0 [ 421.264104][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.275971][T10495] Call Trace: [ 421.279555][T10495] [ 421.282515][T10495] dump_stack_lvl+0x188/0x250 [ 421.287240][T10495] ? show_regs_print_info+0x20/0x20 [ 421.292525][T10495] ? load_image+0x400/0x400 [ 421.297060][T10495] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 421.302589][T10495] print_address_description+0x60/0x2d0 [ 421.308938][T10495] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 421.317833][T10495] kasan_report+0xdf/0x130 [ 421.322714][T10495] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 421.330495][T10495] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 421.337423][T10495] ? xfrm_policy_addr_delta+0x212/0x340 [ 421.343111][T10495] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 421.350456][T10495] ? __kasan_kmalloc+0xb5/0xf0 [ 421.355561][T10495] ? xfrm_policy_alloc+0x75/0x2b0 [ 421.360645][T10495] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 421.366883][T10495] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 421.373378][T10495] xfrm_policy_inexact_insert+0xe0/0x1460 [ 421.379269][T10495] ? do_raw_spin_lock+0x128/0x2f0 [ 421.384446][T10495] ? __rwlock_init+0x140/0x140 [ 421.389258][T10495] ? policy_hash_bysel+0x135/0x7b0 [ 421.394420][T10495] xfrm_policy_insert+0x112/0x930 [ 421.399499][T10495] xfrm_add_policy+0x4f2/0x880 [ 421.404315][T10495] ? xfrm_dump_sa_done+0xc0/0xc0 [ 421.409476][T10495] ? apparmor_capable+0x12c/0x190 [ 421.414730][T10495] ? __nla_parse+0x3c/0x50 [ 421.419287][T10495] xfrm_user_rcv_msg+0x5e5/0x910 [ 421.424876][T10495] ? xfrm_netlink_rcv+0x90/0x90 [ 421.429996][T10495] ? xfrm_netlink_rcv+0x66/0x90 [ 421.434898][T10495] ? __mutex_lock_common+0x465/0x2400 [ 421.440330][T10495] ? __skb_clone+0x480/0x790 [ 421.444979][T10495] netlink_rcv_skb+0x1f5/0x440 [ 421.449936][T10495] ? xfrm_netlink_rcv+0x90/0x90 [ 421.454830][T10495] ? netlink_ack+0xb50/0xb50 [ 421.459774][T10495] ? __lock_acquire+0x7d10/0x7d10 [ 421.465163][T10495] xfrm_netlink_rcv+0x75/0x90 [ 421.469979][T10495] netlink_unicast+0x774/0x920 [ 421.474936][T10495] netlink_sendmsg+0x8ba/0xbe0 [ 421.479942][T10495] ? netlink_getsockopt+0x570/0x570 [ 421.485555][T10495] ? aa_sock_msg_perm+0x94/0x150 [ 421.490633][T10495] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 421.496492][T10495] ? security_socket_sendmsg+0x7c/0xa0 [ 421.502006][T10495] ? netlink_getsockopt+0x570/0x570 [ 421.507253][T10495] ____sys_sendmsg+0x5b7/0x8f0 [ 421.512254][T10495] ? __sys_sendmsg_sock+0x30/0x30 [ 421.518118][T10495] ? import_iovec+0x6f/0xa0 [ 421.523051][T10495] ___sys_sendmsg+0x236/0x2e0 [ 421.528553][T10495] ? __sys_sendmsg+0x2a0/0x2a0 [ 421.533751][T10495] ? percpu_counter_add_batch+0x13b/0x160 [ 421.540169][T10495] __se_sys_sendmsg+0x1af/0x290 [ 421.545217][T10495] ? __x64_sys_sendmsg+0x80/0x80 [ 421.550730][T10495] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 421.556902][T10495] ? lockdep_hardirqs_on+0x94/0x140 [ 421.562246][T10495] do_syscall_64+0x4c/0xa0 [ 421.566699][T10495] ? clear_bhb_loop+0x30/0x80 [ 421.571588][T10495] ? clear_bhb_loop+0x30/0x80 [ 421.576501][T10495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 421.582561][T10495] RIP: 0033:0x7f735d1badd9 [ 421.587142][T10495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.607675][T10495] RSP: 002b:00007f735b414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.616385][T10495] RAX: ffffffffffffffda RBX: 00007f735d433fa0 RCX: 00007f735d1badd9 [ 421.624576][T10495] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 421.632604][T10495] RBP: 00007f735d250d69 R08: 0000000000000000 R09: 0000000000000000 [ 421.641201][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.649579][T10495] R13: 00007f735d434038 R14: 00007f735d433fa0 R15: 00007ffd90e57dd8 [ 421.658315][T10495] [ 421.663021][T10495] [ 421.665383][T10495] Allocated by task 10495: [ 421.670202][T10495] __kasan_kmalloc+0xb5/0xf0 [ 421.674918][T10495] sk_prot_alloc+0xe7/0x210 [ 421.679544][T10495] sk_alloc+0x2f/0x310 [ 421.684164][T10495] pfkey_create+0xd8/0x560 [ 421.688988][T10495] __sock_create+0x47b/0x900 [ 421.693969][T10495] __sys_socket+0xe2/0x170 [ 421.698574][T10495] __x64_sys_socket+0x76/0x80 [ 421.703819][T10495] do_syscall_64+0x4c/0xa0 [ 421.708496][T10495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 421.714702][T10495] [ 421.717055][T10495] Last potentially related work creation: [ 421.722800][T10495] kasan_save_stack+0x35/0x60 [ 421.727851][T10495] kasan_record_aux_stack+0xb8/0x100 [ 421.733387][T10495] call_rcu+0x189/0x950 [ 421.737599][T10495] dev_shutdown+0x19f/0x710 [ 421.742198][T10495] unregister_netdevice_many+0xa2c/0x19f0 [ 421.748192][T10495] unregister_netdevice_queue+0x324/0x370 [ 421.754300][T10495] __tun_detach+0xd4a/0x1500 [ 421.758942][T10495] tun_chr_close+0x109/0x1b0 [ 421.764181][T10495] __fput+0x234/0x930 [ 421.768501][T10495] task_work_run+0x125/0x1a0 [ 421.773766][T10495] exit_to_user_mode_loop+0x10f/0x130 [ 421.779300][T10495] exit_to_user_mode_prepare+0xee/0x180 [ 421.785020][T10495] syscall_exit_to_user_mode+0x16/0x40 [ 421.790960][T10495] do_syscall_64+0x58/0xa0 [ 421.797893][T10495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 421.804112][T10495] [ 421.806568][T10495] The buggy address belongs to the object at ffff88807af87000 [ 421.806568][T10495] which belongs to the cache kmalloc-2k of size 2048 [ 421.822166][T10495] The buggy address is located 1544 bytes inside of [ 421.822166][T10495] 2048-byte region [ffff88807af87000, ffff88807af87800) [ 421.836396][T10495] The buggy address belongs to the page: [ 421.842438][T10495] page:ffffea0001ebe000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7af80 [ 421.852761][T10495] head:ffffea0001ebe000 order:3 compound_mapcount:0 compound_pincount:0 [ 421.861308][T10495] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 421.869610][T10495] raw: 00fff00000010200 ffffea00008c3000 0000000300000003 ffff888016c42000 [ 421.878333][T10495] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 421.888344][T10495] page dumped because: kasan: bad access detected [ 421.894788][T10495] page_owner tracks the page as allocated [ 421.900648][T10495] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8723, ts 343620359850, free_ts 343227228280 [ 421.922022][T10495] get_page_from_freelist+0x1bbd/0x1ca0 [ 421.927710][T10495] __alloc_pages+0x1ee/0x480 [ 421.932425][T10495] new_slab+0xc0/0x4b0 [ 421.936718][T10495] ___slab_alloc+0x80a/0xdd0 [ 421.941368][T10495] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 421.947536][T10495] pskb_expand_head+0x127/0x10f0 [ 421.952697][T10495] netlink_trim+0x180/0x220 [ 421.957246][T10495] netlink_broadcast_filtered+0x7c/0x1170 [ 421.963009][T10495] nlmsg_notify+0xec/0x1a0 [ 421.967553][T10495] __dev_notify_flags+0xdc/0x300 [ 421.973060][T10495] rtnl_configure_link+0x21f/0x320 [ 421.978497][T10495] rtnl_newlink+0x15be/0x1a50 [ 421.983679][T10495] rtnetlink_rcv_msg+0x844/0xf30 [ 421.989074][T10495] netlink_rcv_skb+0x1f5/0x440 [ 421.994056][T10495] netlink_unicast+0x774/0x920 [ 421.999047][T10495] netlink_sendmsg+0x8ba/0xbe0 [ 422.003848][T10495] page last free stack trace: [ 422.008758][T10495] free_unref_page_prepare+0x637/0x6c0 [ 422.014434][T10495] free_unref_page+0x8f/0x2a0 [ 422.019362][T10495] __unfreeze_partials+0x1a5/0x200 [ 422.024603][T10495] put_cpu_partial+0x12d/0x190 [ 422.029557][T10495] qlist_free_all+0x35/0x90 [ 422.034156][T10495] kasan_quarantine_reduce+0x150/0x160 [ 422.039955][T10495] __kasan_slab_alloc+0x2f/0xd0 [ 422.045199][T10495] slab_post_alloc_hook+0x4c/0x380 [ 422.050550][T10495] kmem_cache_alloc+0x100/0x290 [ 422.055795][T10495] getname_flags+0xb5/0x500 [ 422.060865][T10495] user_path_at_empty+0x2a/0x190 [ 422.066440][T10495] do_readlinkat+0xd9/0x490 [ 422.071223][T10495] __x64_sys_readlink+0x7b/0x90 [ 422.076208][T10495] do_syscall_64+0x4c/0xa0 [ 422.080678][T10495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 422.086820][T10495] [ 422.089531][T10495] Memory state around the buggy address: [ 422.095444][T10495] ffff88807af87500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 422.104552][T10495] ffff88807af87580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 422.112841][T10495] >ffff88807af87600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 422.121215][T10495] ^ [ 422.125677][T10495] ffff88807af87680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 422.134213][T10495] ffff88807af87700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 422.142407][T10495] ================================================================== [ 422.150585][T10495] Disabling lock debugging due to kernel taint [ 422.157004][T10495] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 422.164252][T10495] CPU: 1 PID: 10495 Comm: syz.5.1647 Tainted: G B syzkaller #0 [ 422.173216][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 422.183302][T10495] Call Trace: [ 422.186608][T10495] [ 422.189571][T10495] dump_stack_lvl+0x188/0x250 [ 422.194543][T10495] ? show_regs_print_info+0x20/0x20 [ 422.199861][T10495] ? load_image+0x400/0x400 [ 422.204562][T10495] panic+0x2e5/0x810 [ 422.208582][T10495] ? bpf_jit_dump+0xd0/0xd0 [ 422.213121][T10495] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 422.219042][T10495] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 422.225066][T10495] ? _raw_spin_unlock+0x40/0x40 [ 422.230329][T10495] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 422.236874][T10495] check_panic_on_warn+0x80/0xa0 [ 422.241852][T10495] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 422.248490][T10495] end_report+0x6d/0xf0 [ 422.253005][T10495] kasan_report+0x102/0x130 [ 422.257542][T10495] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 422.264181][T10495] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 422.270548][T10495] ? xfrm_policy_addr_delta+0x212/0x340 [ 422.276220][T10495] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 422.282410][T10495] ? __kasan_kmalloc+0xb5/0xf0 [ 422.287210][T10495] ? xfrm_policy_alloc+0x75/0x2b0 [ 422.292272][T10495] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 422.298545][T10495] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 422.304481][T10495] xfrm_policy_inexact_insert+0xe0/0x1460 [ 422.310409][T10495] ? do_raw_spin_lock+0x128/0x2f0 [ 422.315783][T10495] ? __rwlock_init+0x140/0x140 [ 422.320770][T10495] ? policy_hash_bysel+0x135/0x7b0 [ 422.326924][T10495] xfrm_policy_insert+0x112/0x930 [ 422.332089][T10495] xfrm_add_policy+0x4f2/0x880 [ 422.337892][T10495] ? xfrm_dump_sa_done+0xc0/0xc0 [ 422.343662][T10495] ? apparmor_capable+0x12c/0x190 [ 422.349607][T10495] ? __nla_parse+0x3c/0x50 [ 422.354169][T10495] xfrm_user_rcv_msg+0x5e5/0x910 [ 422.359347][T10495] ? xfrm_netlink_rcv+0x90/0x90 [ 422.364329][T10495] ? xfrm_netlink_rcv+0x66/0x90 [ 422.369351][T10495] ? __mutex_lock_common+0x465/0x2400 [ 422.374906][T10495] ? __skb_clone+0x480/0x790 [ 422.380547][T10495] netlink_rcv_skb+0x1f5/0x440 [ 422.385362][T10495] ? xfrm_netlink_rcv+0x90/0x90 [ 422.390245][T10495] ? netlink_ack+0xb50/0xb50 [ 422.394879][T10495] ? __lock_acquire+0x7d10/0x7d10 [ 422.400026][T10495] xfrm_netlink_rcv+0x75/0x90 [ 422.404826][T10495] netlink_unicast+0x774/0x920 [ 422.409616][T10495] netlink_sendmsg+0x8ba/0xbe0 [ 422.414658][T10495] ? netlink_getsockopt+0x570/0x570 [ 422.420003][T10495] ? aa_sock_msg_perm+0x94/0x150 [ 422.425059][T10495] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 422.430608][T10495] ? security_socket_sendmsg+0x7c/0xa0 [ 422.436600][T10495] ? netlink_getsockopt+0x570/0x570 [ 422.442752][T10495] ____sys_sendmsg+0x5b7/0x8f0 [ 422.447735][T10495] ? __sys_sendmsg_sock+0x30/0x30 [ 422.452882][T10495] ? import_iovec+0x6f/0xa0 [ 422.457596][T10495] ___sys_sendmsg+0x236/0x2e0 [ 422.462312][T10495] ? __sys_sendmsg+0x2a0/0x2a0 [ 422.467309][T10495] ? percpu_counter_add_batch+0x13b/0x160 [ 422.473363][T10495] __se_sys_sendmsg+0x1af/0x290 [ 422.478620][T10495] ? __x64_sys_sendmsg+0x80/0x80 [ 422.483813][T10495] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 422.490106][T10495] ? lockdep_hardirqs_on+0x94/0x140 [ 422.495347][T10495] do_syscall_64+0x4c/0xa0 [ 422.499803][T10495] ? clear_bhb_loop+0x30/0x80 [ 422.504701][T10495] ? clear_bhb_loop+0x30/0x80 [ 422.509424][T10495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 422.515355][T10495] RIP: 0033:0x7f735d1badd9 [ 422.519817][T10495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.540121][T10495] RSP: 002b:00007f735b414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.548590][T10495] RAX: ffffffffffffffda RBX: 00007f735d433fa0 RCX: 00007f735d1badd9 [ 422.556713][T10495] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 422.564714][T10495] RBP: 00007f735d250d69 R08: 0000000000000000 R09: 0000000000000000 [ 422.572713][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.580715][T10495] R13: 00007f735d434038 R14: 00007f735d433fa0 R15: 00007ffd90e57dd8 [ 422.589058][T10495] [ 422.592668][T10495] Kernel Offset: disabled [ 422.597478][T10495] Rebooting in 86400 seconds..