last executing test programs: 15m4.147401158s ago: executing program 32 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 13m5.468646093s ago: executing program 0 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 13m2.719817168s ago: executing program 0 (id=466): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x1af, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a0104000000ffeb0000000a0000000900010073797a31000000000900020073797a320000d54b90a40480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a310000"], 0x68}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)}], 0x1}}], 0x2, 0x2090) 12m59.977671142s ago: executing program 0 (id=461): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r3, &(0x7f0000002240)=""/236, 0xec, 0x4eb) 12m56.619920452s ago: executing program 0 (id=469): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, &(0x7f0000000680), 0x0, 0x48c, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 12m55.306607983s ago: executing program 0 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x1, 0x153d, &(0x7f0000002b80)="$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") read(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12m52.990203217s ago: executing program 0 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$packet(0x11, 0x2, 0x300) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @mcast1, 0x6}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) shmctl$IPC_INFO(0x0, 0x3, 0x0) 12m37.631733229s ago: executing program 33 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$packet(0x11, 0x2, 0x300) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @mcast1, 0x6}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) shmctl$IPC_INFO(0x0, 0x3, 0x0) 11m53.722785253s ago: executing program 1 (id=571): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, &(0x7f0000000680), 0x0, 0x48c, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 11m51.816645128s ago: executing program 1 (id=584): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400"], 0xbc}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_vlan\x00'}) r2 = socket(0xa, 0x2, 0x0) r3 = inotify_init() r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @remote, r6}, 0xc) 11m51.418952907s ago: executing program 1 (id=578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m51.159670663s ago: executing program 5 (id=579): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 11m50.01576376s ago: executing program 1 (id=582): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfc, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) 11m43.789343896s ago: executing program 1 (id=586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x2, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 11m43.789198037s ago: executing program 5 (id=587): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x296, &(0x7f00000008c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 11m42.593711185s ago: executing program 5 (id=590): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 11m41.687815316s ago: executing program 1 (id=593): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) 11m41.50908044s ago: executing program 5 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x109540, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x17}) 11m40.434872325s ago: executing program 5 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f00000000c0)=""/18, 0x12) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) 11m38.378086544s ago: executing program 5 (id=600): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/92, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my=0x1}) 11m26.500639374s ago: executing program 34 (id=593): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) 11m21.900589832s ago: executing program 35 (id=600): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/92, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my=0x1}) 8m8.707017501s ago: executing program 7 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0x992, 0x0, 0x0, 0x124, 0x5}}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 8m6.954709473s ago: executing program 7 (id=1017): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1e0, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x70, 0x90, 0x0, {0x390, 0x8f00}}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x80003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x1a3042, 0x20) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = socket(0x2, 0x5, 0x800003) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cifs\x00', 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x912, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x5]}) 8m3.66498456s ago: executing program 7 (id=1024): r0 = socket(0x1, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) listen(r1, 0x0) listen(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000000c0)) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x8, 0x2f, 0x6, 0x40000, 0x4, 0x2, 0x81}}) 8m1.459899792s ago: executing program 7 (id=1028): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200030200"/42, @ANYBLOB], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8m0.416350707s ago: executing program 7 (id=1031): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x400000ac6) socket(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) 7m57.429537917s ago: executing program 7 (id=1036): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) listen(0xffffffffffffffff, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 7m40.984551604s ago: executing program 36 (id=1036): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) listen(0xffffffffffffffff, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 5m47.367877152s ago: executing program 9 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) 5m45.876802676s ago: executing program 9 (id=1288): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 5m45.367309769s ago: executing program 9 (id=1290): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='hpfs\x00', 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 5m37.646013362s ago: executing program 9 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x9}}, 0x1c}}, 0x0) 5m37.188707933s ago: executing program 9 (id=1303): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200030200"/42, @ANYBLOB], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40040c4) 5m33.471677361s ago: executing program 9 (id=1307): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80078b, &(0x7f0000000080)={[], [{@pcr={'pcr', 0x3d, 0x9}}]}, 0x0, 0x47f, &(0x7f0000000680)="$eJzs281vFOUfAPDvTF+AHy/tD/EFRK0STaOxpQWVgxeNJhwwmugBj7VdSMNCDa1GSCPFGLyYGBI9G48m/gXejIlRTiZe9eLJkBDtBfBUM7MzsF12oZVtt7KfTzK7zzPzzD7Pd+ftmXl2A+haQ9lLErEtIn6NiIFadnmBodrbtcX5yeuL85NJLC29+WeSl7u6OD9ZFi3X21pkhtOI9OOkqGS52TNnT0xUq5XTRX507uS7o7Nnzj77/smJ45XjlVPjhw4dPDD2wvPjz7Ulziyuq3s+nNm7+/DbF1+bPHrxnZ++ydq7rVheH0e7DGWB/7WUa1z2ZLsr67Dtdemkt4MNYVV6IiLbXH358T8QPXFz4w3Eqx91tHHAmsquTZtaL15YAu5hSXS6BUBnlBf67P63nNap67EhXHmpdgOUxX2tmGpLeiMtyvQ13N+201BEHF34+8tsijV6DgEAUO/TyS+O9Dbt/6XxQP7+e/66oxhDGYyI/0fEzoi4LyJ2RcT9EXnZByPioRb1PLXC9tza/0kv/+vgViDr/71YjG0t7/+Vvb8Y7Cly2/P4+5Jj09XK/uI7GY6+TVl+7DZ1fPfKL5+1Wlbf/8umrP6yL1i043Lvpjh8vW6dqYm5ibxT2gZXzkfs6W0Wf3JjJCCJiN0RsWd1H72jTEw//fXeVoXuHP9ttGGcaemrLLyFLP6FaIi/lNSPT07fMj45ujmqlf2j5V5xq0s/X3ijVf13FX8bXKnU3q8tzl8qtn9jkcGkfrx2dvV1XPjtk5b3NCvc/5eZmphL+5O38nHm/mLeBxNzc6fHIvqTI3l+2fzxm+uW+bJ8tv8P72t+/O8s1snifzgisp34kYh4NCIeK9r+eEQ8ERH7bhP/jy+3XlbGH2mHtv/5iKmm578b+3/D9l99oufED9+2qn9l2/9gnhou5uTnvzto1pzsdNHYwLv57gAAAOC/Is1/A5+kIzfSaToyUvsN/674X1qdmZ175tjMe6emar+VH4y+tHzSNVA8D61OVytjyULxibXno+PFs+LyeemB4rnx5z1b8vzI5Ex1qsOxQ7fb2uL4z/zR0+nWAWtsS9O54/3r3hCgAxrH0dPl2XOvh5MB3Kv8Xxu61x2O/3S92gGsP9d/6F7Njv9zDXljAXBvcv2H7uX4hy6Vft/pFgAd5PoPXelu/te/honNG6MZnUls1I2SJyLKRLoh2iOxRolOn5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa458AAAD//3N/7a4=") ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r1, 0x186a0, 0x0) 5m17.637271607s ago: executing program 37 (id=1307): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80078b, &(0x7f0000000080)={[], [{@pcr={'pcr', 0x3d, 0x9}}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r1, 0x186a0, 0x0) 1m8.026316625s ago: executing program 3 (id=1826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x7, 0x7, 0x5, 0x6, 0x7, 0x1, 0xb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4c000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m4.775783052s ago: executing program 3 (id=1832): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x2}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x4040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m3.311102367s ago: executing program 3 (id=1837): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200030200"/42, @ANYBLOB], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40040c4) 1m2.464987537s ago: executing program 3 (id=1839): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200030200"/42, @ANYBLOB], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40040c4) 1m0.248975189s ago: executing program 3 (id=1843): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000010280)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRES32, @ANYRES16], 0x5, 0x105c9, &(0x7f0000020bc0)="$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") r0 = open(0x0, 0x8000, 0x70) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00"/240) open(&(0x7f0000000340)='./bus\x00', 0x68042, 0x62) 56.85693283s ago: executing program 3 (id=1847): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5fa, &(0x7f0000000d40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x12, 0xffffffffffffffff, 0x80000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 41.092429364s ago: executing program 38 (id=1847): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5fa, &(0x7f0000000d40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x12, 0xffffffffffffffff, 0x80000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 15.045353153s ago: executing program 2 (id=1920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x7, 0x7, 0x5, 0x6, 0x7, 0x1, 0xb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4c000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 13.678731656s ago: executing program 2 (id=1923): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xfffff000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) 12.478533764s ago: executing program 6 (id=1924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x45a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd0ae}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x70}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.159587952s ago: executing program 2 (id=1927): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x100801, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = memfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x10000, 0x8, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 12.080455003s ago: executing program 6 (id=1928): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x200000000000011, 0x2, 0xd) r4 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r4, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="0fac00", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x42000000) 8.594137946s ago: executing program 6 (id=1930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x70, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x45a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd0ae}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x70}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.558361947s ago: executing program 8 (id=1931): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000700)=0x2000008, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) 8.383771401s ago: executing program 2 (id=1932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x7, 0x7, 0x5, 0x6, 0x7, 0x1, 0xb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4c000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.373406081s ago: executing program 6 (id=1933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000022c0)=@get={0x1, &(0x7f00000012c0)=""/4096, 0x7eb}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0), 0x40, 0x0) preadv(r4, &(0x7f0000000900), 0x0, 0x1, 0x8) 7.223786869s ago: executing program 8 (id=1935): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x0, 0x8, 0x1c1, 0x2f4, 0x80, 0xf1, 0x9}, "df5ab44cc69cfed9e3ce9230c3c2c0ac"}, 0x30) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) r4 = socket(0x10, 0x80002, 0x0) r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000140), 0x0, r5) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 6.995683324s ago: executing program 6 (id=1936): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 6.995285874s ago: executing program 4 (id=1937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x45a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd0ae}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x70}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.634171553s ago: executing program 4 (id=1938): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) 4.924852473s ago: executing program 4 (id=1939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) acct(0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$unix(0x1, 0x1, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) 2.96381332s ago: executing program 2 (id=1940): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r3, 0xffffe000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8be", 0x4}], 0x1, 0x0, 0x30}, 0x4004000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ptrace$setopts(0x4206, 0x0, 0x200000, 0x1e) syz_open_procfs(0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @any, 0x7, 0x2}, 0xe) 2.960396899s ago: executing program 6 (id=1941): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r3 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 2.703247276s ago: executing program 4 (id=1942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x70, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x45a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd0ae}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x70}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.675798836s ago: executing program 8 (id=1943): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aa080000000000000033445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x38, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccfbeeff0011223344556677887158bbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 2.012330162s ago: executing program 8 (id=1944): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200030200"/42], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40040c4) 1.875825856s ago: executing program 4 (id=1945): socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.412645527s ago: executing program 2 (id=1946): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x136) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) 849.65428ms ago: executing program 8 (id=1947): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 83.707838ms ago: executing program 4 (id=1948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x45a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd0ae}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x70}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 8 (id=1949): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='7777\n\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dlmfs_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000001000)='./dlmfs_mnt\x00', &(0x7f0000000300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./dlmfs_mnt/domain1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./dlmfs_mnt/domain1/lock1\x00', 0x42, 0x1ff) write(r3, &(0x7f0000001300), 0x0) close(r3) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./dlmfs_mnt/domain1/lock1\x00', 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 512.551109][ T8536] mmap: syz.6.880 (8536) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 512.650992][ T8539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.879'. [ 512.689723][ T8536] jffs2: notice: (8536) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 513.160183][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.569940][ T8539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.879'. [ 513.860750][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.022689][ T4293] Bluetooth: hci2: command 0x0405 tx timeout [ 514.030442][ T4293] Bluetooth: hci4: command 0x0406 tx timeout [ 515.468601][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.574663][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.986255][ T8566] device syzkaller0 entered promiscuous mode [ 518.074731][ T8569] loop8: detected capacity change from 0 to 128 [ 518.934073][ T7904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.028984][ T4923] handle_bad_sector: 154 callbacks suppressed [ 519.029035][ T4923] attempt to access beyond end of device [ 519.029035][ T4923] loop8: rw=1, want=281, limit=128 [ 519.053408][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.362191][ T8569] attempt to access beyond end of device [ 519.362191][ T8569] loop8: rw=524288, want=281, limit=128 [ 519.451054][ T8569] attempt to access beyond end of device [ 519.451054][ T8569] loop8: rw=0, want=153, limit=128 [ 519.494815][ T8592] device syzkaller0 entered promiscuous mode [ 519.529218][ T8569] attempt to access beyond end of device [ 519.529218][ T8569] loop8: rw=0, want=153, limit=128 [ 519.651734][ T8580] attempt to access beyond end of device [ 519.651734][ T8580] loop8: rw=0, want=151, limit=128 [ 519.693180][ T8569] attempt to access beyond end of device [ 519.693180][ T8569] loop8: rw=0, want=146, limit=128 [ 519.705882][ T8569] buffer_io_error: 150 callbacks suppressed [ 519.706128][ T8569] Buffer I/O error on dev loop8, logical block 145, async page read [ 519.806823][ T8569] attempt to access beyond end of device [ 519.806823][ T8569] loop8: rw=0, want=147, limit=128 [ 519.865317][ T8569] Buffer I/O error on dev loop8, logical block 146, async page read [ 519.877435][ T8569] attempt to access beyond end of device [ 519.877435][ T8569] loop8: rw=0, want=148, limit=128 [ 519.890340][ T8569] Buffer I/O error on dev loop8, logical block 147, async page read [ 519.902273][ T8569] attempt to access beyond end of device [ 519.902273][ T8569] loop8: rw=0, want=149, limit=128 [ 520.040439][ T8569] Buffer I/O error on dev loop8, logical block 148, async page read [ 520.778308][ T8569] attempt to access beyond end of device [ 520.778308][ T8569] loop8: rw=0, want=150, limit=128 [ 521.877093][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.902333][ T8569] Buffer I/O error on dev loop8, logical block 149, async page read [ 521.911569][ T8569] Buffer I/O error on dev loop8, logical block 150, async page read [ 521.920717][ T8569] Buffer I/O error on dev loop8, logical block 151, async page read [ 521.943569][ T7894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.955117][ T8569] Buffer I/O error on dev loop8, logical block 152, async page read [ 522.258566][ T8605] device syzkaller0 entered promiscuous mode [ 524.503893][ T4931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.153604][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.725177][ T26] audit: type=1800 audit(1788800078.605:24): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.904" name="zoned" dev="configfs" ino=52615 res=0 errno=0 [ 526.478517][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.592177][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.601370][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.650357][ T4686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.677502][ T26] audit: type=1800 audit(1788800078.605:25): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.904" name="power" dev="configfs" ino=52616 res=0 errno=0 [ 527.701490][ T7904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.393089][ T8687] netlink: 'syz.3.912': attribute type 12 has an invalid length. [ 528.475582][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 528.514246][ T8687] bond0: option primary_reselect: invalid value (183) [ 528.767924][ T8692] device syzkaller0 entered promiscuous mode [ 529.742186][ T8705] device syzkaller0 entered promiscuous mode [ 529.790773][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.291195][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.626556][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.635917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.185112][ T7889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.460873][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.746465][ T4686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.756048][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.794632][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.171373][ T8732] device syzkaller0 entered promiscuous mode [ 536.661006][ T333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.820454][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.157811][ T8764] jffs2: notice: (8764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 537.814994][ T8771] loop3: detected capacity change from 0 to 4096 [ 538.027914][ T8771] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 539.045338][ T8798] loop7: detected capacity change from 0 to 256 [ 539.442798][ T333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.475451][ T4293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.130177][ T8802] netlink: 48 bytes leftover after parsing attributes in process `syz.3.941'. [ 540.654086][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.575169][ T8819] loop4: detected capacity change from 0 to 512 [ 542.282739][ T8819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 542.347105][ T8825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.358460][ T8819] System zones: 1-12 [ 542.373045][ T8819] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.945: missing EA_INODE flag [ 542.400351][ T8819] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.945: error while reading EA inode 12 err=-117 [ 542.425316][ T7880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.468882][ T8825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.485717][ T8819] EXT4-fs (loop4): 1 orphan inode deleted [ 542.495517][ T8819] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 542.521896][ T8825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.860367][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.870597][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.682032][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.700592][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.795572][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.060511][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.908375][ T8845] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 547.274048][ T8845] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 547.693343][ T4936] net_ratelimit: 7 callbacks suppressed [ 547.693431][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.067467][ T8876] loop3: detected capacity change from 0 to 128 [ 549.289768][ T8877] handle_bad_sector: 3 callbacks suppressed [ 549.289801][ T8877] attempt to access beyond end of device [ 549.289801][ T8877] loop3: rw=2049, want=1033, limit=128 [ 549.464338][ T8876] attempt to access beyond end of device [ 549.464338][ T8876] loop3: rw=524288, want=369, limit=128 [ 549.498672][ T8876] attempt to access beyond end of device [ 549.498672][ T8876] loop3: rw=0, want=153, limit=128 [ 549.532961][ T8877] attempt to access beyond end of device [ 549.532961][ T8877] loop3: rw=0, want=151, limit=128 [ 549.586267][ T8876] attempt to access beyond end of device [ 549.586267][ T8876] loop3: rw=0, want=146, limit=128 [ 549.620228][ T8876] Buffer I/O error on dev loop3, logical block 145, async page read [ 549.632363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.643777][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.726476][ T8888] loop4: detected capacity change from 0 to 128 [ 549.738076][ T8876] attempt to access beyond end of device [ 549.738076][ T8876] loop3: rw=0, want=147, limit=128 [ 549.750862][ T8876] Buffer I/O error on dev loop3, logical block 146, async page read [ 549.799885][ T8876] attempt to access beyond end of device [ 549.799885][ T8876] loop3: rw=0, want=148, limit=128 [ 549.857454][ T8888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 549.913900][ T8888] System zones: 1-3, 19-19, 35-36 [ 550.037321][ T8876] Buffer I/O error on dev loop3, logical block 147, async page read [ 550.055876][ T8876] attempt to access beyond end of device [ 550.055876][ T8876] loop3: rw=0, want=149, limit=128 [ 550.093519][ T8876] Buffer I/O error on dev loop3, logical block 148, async page read [ 550.122115][ T8876] attempt to access beyond end of device [ 550.122115][ T8876] loop3: rw=0, want=150, limit=128 [ 550.153534][ T8876] Buffer I/O error on dev loop3, logical block 149, async page read [ 550.194835][ T8876] attempt to access beyond end of device [ 550.194835][ T8876] loop3: rw=0, want=151, limit=128 [ 550.312722][ T8876] Buffer I/O error on dev loop3, logical block 150, async page read [ 550.939225][ T8888] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 550.953631][ T8876] Buffer I/O error on dev loop3, logical block 151, async page read [ 550.965551][ T8888] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 550.999874][ T8876] Buffer I/O error on dev loop3, logical block 152, async page read [ 551.240968][ T333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.620779][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.630329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.300444][ T7904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.870513][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.882534][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.678386][ T4686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.668157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.900977][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.957220][ T8968] loop8: detected capacity change from 0 to 128 [ 557.447382][ T7894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.506973][ T8968] EXT4-fs (loop8): Ignoring removed oldalloc option [ 557.875147][ T8972] device syzkaller0 entered promiscuous mode [ 557.982435][ T8968] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nodelalloc,oldalloc,grpjquota=,,errors=continue. Quota mode: none. [ 558.066592][ T8968] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.279337][ T8983] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 559.288638][ T8983] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 559.298179][ T8983] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 559.339666][ T7894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.348082][ T26] audit: type=1804 audit(1788800111.375:26): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.972" name="/newroot/54/file0/file0" dev="loop8" ino=12 res=1 errno=0 [ 560.326885][ T8718] Bluetooth: hci2: command 0x0406 tx timeout [ 560.350554][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.021313][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.028273][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.036968][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.414475][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.955234][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.460415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.580789][ T4686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.722599][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.337823][ T7894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.399028][ T9071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.451171][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.723105][ T9028] device syzkaller0 entered promiscuous mode [ 569.842584][ T7894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.152443][ T7894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.183534][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.306452][ T7894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.258896][ T4686] FS-Cache: Duplicate cookie detected [ 571.264947][ T4686] FS-Cache: O-cookie c=00000008 [p=00000006 fl=222 nc=0 na=1] [ 571.272706][ T4686] FS-Cache: O-cookie d=ffffffff8c747d80{AFS.cell} n=ffff88806135b800 [ 571.280854][ T4686] FS-Cache: O-key=[4] '73797a30' [ 571.285861][ T4686] FS-Cache: N-cookie c=00000009 [p=00000006 fl=2 nc=0 na=1] [ 571.293239][ T4686] FS-Cache: N-cookie d=ffffffff8c747d80{AFS.cell} n=ffff88807c529000 [ 571.301370][ T4686] FS-Cache: N-key=[4] '73797a30' [ 571.326532][ T9106] kAFS: No cell specified [ 571.612036][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.620454][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.038709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.265952][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.846613][ T9138] loop3: detected capacity change from 0 to 128 [ 574.878923][ T9138] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 574.958417][ T9138] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 574.972791][ T9122] loop8: detected capacity change from 0 to 2048 [ 576.040327][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.340498][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.089487][ T9075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.795633][ T9167] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 578.830283][ T9167] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 580.990386][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.005033][ T9194] FAULT_INJECTION: forcing a failure. [ 581.005033][ T9194] name failslab, interval 1, probability 0, space 0, times 1 [ 581.109520][ T9194] CPU: 1 PID: 9194 Comm: syz.8.1013 Not tainted syzkaller #0 [ 581.116994][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.127091][ T9194] Call Trace: [ 581.130409][ T9194] [ 581.133380][ T9194] dump_stack_lvl+0x188/0x250 [ 581.138108][ T9194] ? show_regs_print_info+0x20/0x20 [ 581.143347][ T9194] ? load_image+0x410/0x410 [ 581.147910][ T9194] ? __might_sleep+0xf0/0xf0 [ 581.152633][ T9194] ? __lock_acquire+0x7b50/0x7b50 [ 581.157722][ T9194] should_fail+0x383/0x4b0 [ 581.162193][ T9194] should_failslab+0x5/0x20 [ 581.166805][ T9194] slab_pre_alloc_hook+0x51/0xc0 [ 581.171837][ T9194] kmem_cache_alloc_node+0x47/0x2c0 [ 581.177071][ T9194] ? __alloc_skb+0xf4/0x750 [ 581.181652][ T9194] __alloc_skb+0xf4/0x750 [ 581.186039][ T9194] qdisc_notify+0x74/0x360 [ 581.190540][ T9194] qdisc_graft+0x11e8/0x1610 [ 581.195174][ T9194] ? trace_qdisc_create+0x83/0x1d0 [ 581.200350][ T9194] ? qdisc_create+0x11a0/0x11a0 [ 581.205242][ T9194] ? qdisc_notify+0x360/0x360 [ 581.209976][ T9194] ? lockdep_rtnl_is_held+0x22/0x30 [ 581.215295][ T9194] tc_modify_qdisc+0xe6a/0x17d0 [ 581.220207][ T9194] ? rcu_lock_release+0x20/0x20 [ 581.225125][ T9194] ? rcu_lock_release+0x20/0x20 [ 581.230026][ T9194] rtnetlink_rcv_msg+0x7f1/0xf10 [ 581.235080][ T9194] ? lock_chain_count+0x20/0x20 [ 581.239978][ T9194] ? rtnetlink_bind+0x80/0x80 [ 581.244814][ T9194] ? __local_bh_enable_ip+0x136/0x1c0 [ 581.250313][ T9194] ? lockdep_hardirqs_on+0x94/0x140 [ 581.255549][ T9194] ? __local_bh_enable_ip+0x136/0x1c0 [ 581.260950][ T9194] ? _local_bh_enable+0xa0/0xa0 [ 581.265929][ T9194] ? __dev_queue_xmit+0x1b64/0x2e50 [ 581.271248][ T9194] ? dev_queue_xmit+0x20/0x20 [ 581.275958][ T9194] ? memcpy+0x3c/0x60 [ 581.280067][ T9194] ? __copy_skb_header+0x3ba/0x4f0 [ 581.285234][ T9194] netlink_rcv_skb+0x1e9/0x430 [ 581.290124][ T9194] ? rtnetlink_bind+0x80/0x80 [ 581.294847][ T9194] ? netlink_ack+0xb10/0xb10 [ 581.299486][ T9194] netlink_unicast+0x78f/0x940 [ 581.304301][ T9194] netlink_sendmsg+0x8ba/0xbe0 [ 581.309126][ T9194] ? netlink_getsockopt+0x570/0x570 [ 581.314367][ T9194] ? aa_sock_msg_perm+0x94/0x150 [ 581.319423][ T9194] ? apparmor_socket_sendmsg+0x88/0x230 [ 581.325011][ T9194] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 581.330403][ T9194] ? security_socket_sendmsg+0x7c/0xa0 [ 581.335980][ T9194] ? netlink_getsockopt+0x570/0x570 [ 581.341237][ T9194] ____sys_sendmsg+0x5be/0x8f0 [ 581.346118][ T9194] ? __sys_sendmsg_sock+0x30/0x30 [ 581.351204][ T9194] ? import_iovec+0x6f/0xa0 [ 581.355774][ T9194] ___sys_sendmsg+0x236/0x2e0 [ 581.360492][ T9194] ? __sys_sendmsg+0x290/0x290 [ 581.365314][ T9194] ? sock_do_ioctl+0x29d/0x320 [ 581.370146][ T9194] __se_sys_sendmsg+0x1b7/0x2a0 [ 581.375032][ T9194] ? __x64_sys_sendmsg+0x80/0x80 [ 581.379997][ T9194] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 581.386033][ T9194] ? lockdep_hardirqs_on+0x94/0x140 [ 581.391267][ T9194] do_syscall_64+0x4c/0xa0 [ 581.395762][ T9194] ? clear_bhb_loop+0x30/0x80 [ 581.400470][ T9194] ? clear_bhb_loop+0x30/0x80 [ 581.405185][ T9194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 581.411140][ T9194] RIP: 0033:0x7f3b14829159 [ 581.415627][ T9194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.435336][ T9194] RSP: 002b:00007f3b12a81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.443786][ T9194] RAX: ffffffffffffffda RBX: 00007f3b14ab0fa0 RCX: 00007f3b14829159 [ 581.451797][ T9194] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 581.459805][ T9194] RBP: 00007f3b148c0024 R08: 0000000000000000 R09: 0000000000000000 [ 581.467987][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.476009][ T9194] R13: 00007f3b14ab1038 R14: 00007f3b14ab0fa0 R15: 00007ffeb9b0d6e8 [ 581.484034][ T9194] [ 581.563286][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.666228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.682595][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.740817][ T9239] comedi comedi1: Minor 2 specified more than once! [ 584.777454][ T4293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.900712][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.058956][ T9231] tmpfs: Bad value for 'mpol' [ 587.459276][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.465590][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.048395][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.077004][ T7894] device hsr_slave_0 left promiscuous mode [ 593.190181][ T7894] device hsr_slave_1 left promiscuous mode [ 593.298812][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.327062][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.665120][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.696000][ T9324] capability: warning: `syz.8.1040' uses deprecated v2 capabilities in a way that may be insecure [ 594.212158][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.234748][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.272626][ T7894] device bridge_slave_1 left promiscuous mode [ 594.278951][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.213996][ T7880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.519009][ T9347] loop4: detected capacity change from 0 to 40427 [ 597.615640][ T7894] device bridge_slave_0 left promiscuous mode [ 597.625002][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.631384][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.710041][ T9347] F2FS-fs (loop4): invalid crc value [ 597.735641][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1036'. [ 597.760835][ T9347] F2FS-fs (loop4): Found nat_bits in checkpoint [ 597.819333][ T9347] F2FS-fs (loop4): Start checkpoint disabled! [ 597.861990][ T9347] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 597.941163][ T7894] device veth0_to_bond left promiscuous mode [ 598.982569][ T7894] device veth1_macvtap left promiscuous mode [ 598.994347][ T7894] device veth0_macvtap left promiscuous mode [ 599.045532][ T7894] device veth1_vlan left promiscuous mode [ 599.075895][ T7894] device veth0_vlan left promiscuous mode [ 599.244414][ T7880] handle_bad_sector: 2 callbacks suppressed [ 599.244453][ T7880] attempt to access beyond end of device [ 599.244453][ T7880] loop4: rw=2049, want=40976, limit=40427 [ 599.463862][ T4293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.550567][ T7880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.560209][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.596747][ T4686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.823679][ T7894] team0 (unregistering): Port device macvlan2 removed [ 600.334904][ T9369] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 601.524871][ T9383] loop8: detected capacity change from 0 to 512 [ 601.642501][ T9383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 601.732658][ T9383] System zones: 1-12 [ 601.750282][ T7894] team0 (unregistering): Port device team_slave_1 removed [ 601.808527][ T7894] team0 (unregistering): Port device team_slave_0 removed [ 601.831367][ T9383] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.1053: missing EA_INODE flag [ 602.580756][ T9075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.590358][ T9383] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1053: error while reading EA inode 12 err=-117 [ 602.650466][ T9383] EXT4-fs (loop8): 1 orphan inode deleted [ 602.671062][ T7894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.690631][ T9383] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 602.941111][ T7894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.338390][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.359526][ T4686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.845163][ T7894] team0 (unregistering): Port device bridge0 removed [ 605.890199][ T7894] bond0 (unregistering): Released all slaves [ 607.422152][ T7889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.621317][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.460823][ T9429] device syzkaller0 entered promiscuous mode [ 609.754743][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.580787][ T9442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.278935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.654946][ T9446] loop3: detected capacity change from 0 to 512 [ 612.787170][ T9446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 612.820880][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.830724][ T7889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.866874][ T9446] System zones: 1-12 [ 612.937952][ T9446] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1070: missing EA_INODE flag [ 613.046844][ T9446] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1070: error while reading EA inode 12 err=-117 [ 613.390079][ T9446] EXT4-fs (loop3): 1 orphan inode deleted [ 613.395887][ T9446] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 613.460810][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.918333][ T9451] chnl_net:caif_netlink_parms(): no params data found [ 613.974633][ T9469] loop4: detected capacity change from 0 to 32768 [ 613.983442][ T4632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.489543][ T4686] Bluetooth: hci1: command 0x0409 tx timeout [ 616.343702][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.557775][ T9503] loop8: detected capacity change from 0 to 4096 [ 617.104125][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.227785][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.270330][ T9451] device bridge_slave_0 entered promiscuous mode [ 617.314034][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.336980][ T9511] loop3: detected capacity change from 0 to 512 [ 617.374010][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.433165][ T9451] device bridge_slave_1 entered promiscuous mode [ 617.570716][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.623460][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.767813][ T9451] team0: Port device team_slave_0 added [ 617.787715][ T9503] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 617.884454][ T9451] team0: Port device team_slave_1 added [ 617.911319][ T9511] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 617.940784][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.100088][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 618.149546][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.249515][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.444827][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.580868][ T9063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.608205][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.272153][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.385989][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.595366][ T9451] device hsr_slave_0 entered promiscuous mode [ 619.658528][ T9451] device hsr_slave_1 entered promiscuous mode [ 619.701360][ T9451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.760042][ T9451] Cannot create hsr debugfs directory [ 619.861893][ T4293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.194920][ T7352] Bluetooth: hci1: command 0x040f tx timeout [ 620.763883][ T4293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.260063][ T4685] Bluetooth: hci1: command 0x0419 tx timeout [ 622.747987][ T9451] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 622.862933][ T9451] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 622.994649][ T9451] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 623.068407][ T9451] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 623.646418][ T9571] loop4: detected capacity change from 0 to 512 [ 623.670184][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.700859][ T7880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.722724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.756044][ T9571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 623.790584][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.892346][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.900562][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.030872][ T9571] EXT4-fs (loop4): 1 truncate cleaned up [ 624.037272][ T9571] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback. [ 624.041505][ T9578] loop8: detected capacity change from 0 to 512 [ 624.074944][ T9451] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.098239][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.128235][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.344334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.353765][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.361423][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.368214][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.466055][ T9578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 624.491150][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.498273][ T9063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.824013][ T9578] System zones: 1-12 [ 624.879403][ T9578] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.1094: missing EA_INODE flag [ 625.042718][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.060549][ T9578] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1094: error while reading EA inode 12 err=-117 [ 625.075225][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.140722][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.149713][ T9578] EXT4-fs (loop8): 1 orphan inode deleted [ 625.190356][ T9578] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 625.204971][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.212098][ T9063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.356766][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 625.571110][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 625.597950][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 627.240669][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.255891][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.344492][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 627.629676][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 627.770647][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 627.931287][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 628.629805][ T9451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.694924][ T9451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.924373][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.944942][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 629.236888][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 629.298648][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.404204][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 629.483678][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.205040][ T9626] jffs2: notice: (9626) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 630.289693][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.301288][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.314060][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1097'. [ 630.323057][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1097'. [ 630.335969][ T9617] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.345201][ T9617] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.353974][ T9617] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.362776][ T9617] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.472381][ T9624] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 630.478953][ T9624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 630.493932][ T9624] vhci_hcd vhci_hcd.0: Device attached [ 630.717976][ T4233] vhci_hcd: vhci_device speed not set [ 630.798472][ T9627] vhci_hcd: connection closed [ 630.802690][ T4923] vhci_hcd: stop threads [ 630.814582][ T4233] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 630.862054][ T4923] vhci_hcd: release socket [ 630.932653][ T4923] vhci_hcd: disconnect device [ 633.710598][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 633.718201][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.809371][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.835752][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.492107][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 634.551654][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.612215][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 634.622604][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.638067][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.668024][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 634.678335][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.714069][ T9451] device veth0_vlan entered promiscuous mode [ 634.733400][ T9677] device syzkaller0 entered promiscuous mode [ 634.765954][ T9451] device veth1_vlan entered promiscuous mode [ 634.873058][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 634.892314][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 634.922768][ T9451] device veth0_macvtap entered promiscuous mode [ 634.945056][ T9451] device veth1_macvtap entered promiscuous mode [ 635.226143][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.282741][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.403163][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.518595][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.667212][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.760938][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.870458][ T7889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.889030][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.880132][ T4233] vhci_hcd: vhci_device speed not set [ 636.983969][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.160133][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.226502][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.358122][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.509181][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.569468][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 637.610797][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 637.679107][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.758585][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.834083][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.868130][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.959914][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.030070][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.110023][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.160127][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.220043][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.321254][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.380673][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.572980][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.593744][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.657472][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.672866][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.727531][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 638.750975][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.852061][ T9451] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.892727][ T9451] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.907117][ T7352] Bluetooth: hci1: command 0x0407 tx timeout [ 638.952272][ T9451] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.007347][ T9451] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.083331][ T9721] tipc: New replicast peer: 172.20.20.187 [ 639.093006][ T9721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.104156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.191449][ T9721] tipc: Enabled bearer , priority 10 [ 639.240402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.251897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.914463][ T9075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.966492][ T9075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.120346][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 640.219900][ T333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.258821][ T333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.309327][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 640.535022][ T9742] loop4: detected capacity change from 0 to 512 [ 640.646763][ T9742] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 642.161118][ T7880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.484030][ T7880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.750547][ T1109] tipc: Node number set to 2630410661 [ 642.762720][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.777773][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.692098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.423776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.433167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.443203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.556605][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.563490][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.570328][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.577114][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.583931][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.590752][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.597540][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.604389][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.611217][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.618008][ T9753] tc action pedit offset must be on 32 bit boundaries [ 644.624882][ T9753] 0: reclassify loop, rule prio 0, protocol 800 [ 644.990178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.541415][ T4356] net_ratelimit: 2 callbacks suppressed [ 648.541433][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.559269][ T9063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.737530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.751023][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.760391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.911034][ T9797] tipc: New replicast peer: 172.20.20.187 [ 649.951033][ T9797] tipc: Enabled bearer , priority 10 [ 650.066340][ T9806] kAFS: No cell specified [ 650.321411][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.330000][ T4686] FS-Cache: Duplicate cookie detected [ 650.335400][ T4686] FS-Cache: O-cookie c=00000008 [p=00000006 fl=222 nc=0 na=1] [ 650.343006][ T4686] FS-Cache: O-cookie d=ffffffff8c747d80{AFS.cell} n=ffff88806135b800 [ 650.351137][ T4686] FS-Cache: O-key=[4] '73797a30' [ 650.356128][ T4686] FS-Cache: N-cookie c=0000000b [p=00000006 fl=2 nc=0 na=1] [ 650.363463][ T4686] FS-Cache: N-cookie d=ffffffff8c747d80{AFS.cell} n=ffff888073da4800 [ 650.372457][ T4686] FS-Cache: N-key=[4] '73797a30' [ 650.750372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.761384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.772119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.142228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.208735][ T9818] loop3: detected capacity change from 0 to 512 [ 651.302050][ T9821] loop9: detected capacity change from 0 to 512 [ 651.325703][ T9818] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 651.437844][ T9821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 651.570373][ T9821] System zones: 1-12 [ 651.591909][ T9823] kAFS: No cell specified [ 651.633767][ T9821] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.1136: missing EA_INODE flag [ 651.667649][ T9821] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1136: error while reading EA inode 12 err=-117 [ 651.735812][ T9821] EXT4-fs (loop9): 1 orphan inode deleted [ 651.790495][ T9821] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 653.973203][ T9854] loop8: detected capacity change from 0 to 40427 [ 654.803634][ T4329] net_ratelimit: 5 callbacks suppressed [ 654.803654][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.844387][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.173719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.184822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.199210][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.224838][ T9854] F2FS-fs (loop8): invalid crc_offset: 4177530876 [ 656.286055][ T9854] F2FS-fs (loop8): Wrong journal entry on segno 65538 [ 656.294225][ T9854] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-117) [ 656.719508][ T9873] xt_connbytes: Forcing CT accounting to be enabled [ 656.730000][ T9873] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 657.283101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.298118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.666606][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.201811][ T333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.211815][ T4686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.394675][ T9891] tipc: Started in network mode [ 658.399603][ T9891] tipc: Node identity ac1414aa, cluster identity 4711 [ 658.491621][ T9891] tipc: New replicast peer: 172.20.20.187 [ 658.559370][ T9891] tipc: Enabled bearer , priority 10 [ 659.748752][ T4686] tipc: Node number set to 2886997162 [ 659.872707][ T9912] loop4: detected capacity change from 0 to 1024 [ 659.989168][ T9912] EXT4-fs (loop4): Ignoring removed orlov option [ 660.142380][ T9912] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 660.181947][ T4329] net_ratelimit: 3 callbacks suppressed [ 660.181965][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.196696][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.222719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.304779][ T9921] Cannot find add_set index 4 as target [ 661.766063][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.776035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.785754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.796146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.301168][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.339002][ T9933] loop9: detected capacity change from 0 to 512 [ 663.462875][ T9933] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 663.522361][ T9933] EXT4-fs (loop9): Unrecognized mount option "fscontext=system_u" or missing value [ 664.854083][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.900618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.266478][ T7900] net_ratelimit: 2 callbacks suppressed [ 666.266495][ T7900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.300438][ T9063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.285021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.296257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.386669][ T9963] loop3: detected capacity change from 0 to 512 [ 667.477783][ T9963] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 667.991578][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.425317][ T4293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.490494][ T9063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.700849][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.283848][T10006] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 672.350977][T10006] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 672.637871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.649144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.589768][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.113800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.123915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.820560][ T7880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.829231][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.049701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.063627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.393266][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.564850][T10059] 0x646e732f00000007-0x646ee5946d697436 : "" [ 679.571536][T10059] mtd: partition "" is out of reach -- disabled [ 679.615670][T10059] ftl_cs: FTL header not found. [ 680.427577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.080487][ T7352] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 682.350042][ T7352] usb 5-1: Using ep0 maxpacket: 32 [ 682.510210][ T7352] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 682.541262][ T7352] usb 5-1: can't read configurations, error -61 [ 682.591451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.600850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.610484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.623486][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.018376][ T7352] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 683.302494][ T9063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.320098][ T7352] usb 5-1: Using ep0 maxpacket: 32 [ 683.480366][ T7352] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 683.514222][ T7352] usb 5-1: can't read configurations, error -61 [ 683.895470][ T7352] usb usb5-port1: attempt power cycle [ 683.935195][T10095] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 11 (only 8 groups) [ 684.189986][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.447801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.458234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.515130][ T4686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.570894][ T7352] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 685.679458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.358702][ T7352] usb 5-1: device not accepting address 8, error -71 [ 686.366505][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.376883][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.169155][ C0] net_ratelimit: 4 callbacks suppressed [ 688.169187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.189571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.240311][T10137] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 688.280442][T10137] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 688.448770][T10150] loop3: detected capacity change from 0 to 512 [ 688.526234][T10150] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 688.981030][ T7889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.076197][T10159] loop8: detected capacity change from 0 to 512 [ 689.202886][T10159] EXT4-fs error (device loop8): ext4_orphan_get:1410: inode #15: comm syz.8.1204: iget: bad i_size value: 38620345925642 [ 689.230410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.240072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.340586][T10159] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1204: couldn't read orphan inode 15 (err -117) [ 689.400043][T10159] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 689.470282][ T4265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.561673][T10170] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.1204: bg 0: block 5: invalid block bitmap [ 689.621434][ T9063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.714359][ T4187] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 689.724568][ T4187] CPU: 1 PID: 4187 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 689.732173][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.742268][ T4187] Workqueue: hci2 hci_rx_work [ 689.747004][ T4187] Call Trace: [ 689.750309][ T4187] [ 689.753267][ T4187] dump_stack_lvl+0x188/0x250 [ 689.757997][ T4187] ? show_regs_print_info+0x20/0x20 [ 689.763237][ T4187] ? load_image+0x410/0x410 [ 689.767803][ T4187] sysfs_create_dir_ns+0x26a/0x290 [ 689.772969][ T4187] ? sysfs_warn_dup+0xa0/0xa0 [ 689.777668][ T4187] ? kthread+0x42e/0x520 [ 689.781953][ T4187] ? do_raw_spin_unlock+0x11d/0x230 [ 689.787192][ T4187] kobject_add_internal+0x5ba/0xcd0 [ 689.792451][ T4187] kobject_add+0x160/0x230 [ 689.796904][ T4187] ? kobject_init+0x1c0/0x1c0 [ 689.801630][ T4187] ? __raw_spin_lock_init+0x41/0x100 [ 689.806946][ T4187] ? klist_children_get+0x50/0x50 [ 689.811994][ T4187] ? get_device_parent+0x121/0x3e0 [ 689.817137][ T4187] device_add+0x470/0x1050 [ 689.821668][ T4187] ? device_initialize+0x2a5/0x4d0 [ 689.826821][ T4187] hci_conn_add_sysfs+0xd1/0x1e0 [ 689.831805][ T4187] le_conn_complete_evt+0xc2e/0x14d0 [ 689.837137][ T4187] ? cs_le_create_conn+0x5e0/0x5e0 [ 689.842298][ T4187] ? __mutex_trylock_common+0x15c/0x260 [ 689.847887][ T4187] hci_le_meta_evt+0x285/0x3ca0 [ 689.852780][ T4187] ? hci_event_packet+0x363/0x1310 [ 689.857955][ T4187] ? __lock_acquire+0x7b50/0x7b50 [ 689.863064][ T4187] ? hci_remote_host_features_evt+0x240/0x240 [ 689.869260][ T4187] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 689.874935][ T4187] ? mark_lock+0x94/0x320 [ 689.879319][ T4187] ? mutex_unlock+0x10/0x10 [ 689.883857][ T4187] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 689.889875][ T4187] ? lock_chain_count+0x20/0x20 [ 689.894767][ T4187] ? __rwlock_init+0x140/0x140 [ 689.899569][ T4187] hci_event_packet+0xe0b/0x1310 [ 689.904551][ T4187] ? _raw_spin_unlock+0x40/0x40 [ 689.909445][ T4187] ? rcu_lock_release+0x20/0x20 [ 689.914330][ T4187] ? hci_send_to_monitor+0x9c/0x4a0 [ 689.919556][ T4187] hci_rx_work+0x255/0xa10 [ 689.924012][ T4187] process_one_work+0x867/0xff0 [ 689.928929][ T4187] ? worker_detach_from_pool+0x240/0x240 [ 689.934587][ T4187] ? lockdep_hardirqs_off+0x70/0x100 [ 689.939901][ T4187] ? _raw_spin_lock_irq+0xb7/0xf0 [ 689.945008][ T4187] ? _raw_spin_lock_irqsave+0x100/0x100 [ 689.950613][ T4187] ? wq_worker_running+0x97/0x170 [ 689.955673][ T4187] worker_thread+0xad7/0x12a0 [ 689.960416][ T4187] kthread+0x42e/0x520 [ 689.964535][ T4187] ? rcu_lock_release+0x20/0x20 [ 689.969400][ T4187] ? kthread_blkcg+0xd0/0xd0 [ 689.974010][ T4187] ret_from_fork+0x1f/0x30 [ 689.978476][ T4187] [ 689.988342][ T4187] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 690.003160][ T4187] Bluetooth: hci2: failed to register connection device [ 690.080371][T10170] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 172 with error 28 [ 690.102840][T10170] EXT4-fs (loop8): This should not happen!! Data will be lost [ 690.102840][T10170] [ 690.112735][T10170] EXT4-fs (loop8): Total free blocks count 0 [ 690.118742][T10170] EXT4-fs (loop8): Free/Dirty block details [ 690.128820][T10170] EXT4-fs (loop8): free_blocks=0 [ 690.150052][T10170] EXT4-fs (loop8): dirty_blocks=172 [ 690.200538][T10170] EXT4-fs (loop8): Block reservation details [ 690.260928][T10170] EXT4-fs (loop8): i_reserved_data_blocks=172 [ 690.270489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.311361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.861962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.105053][ T9075] net_ratelimit: 2 callbacks suppressed [ 694.105072][ T9075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.697192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.007222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.256202][T10249] binder: BINDER_SET_CONTEXT_MGR already set [ 695.331847][T10249] binder: 10245:10249 ioctl 4018620d 200000004a80 returned -16 [ 695.381882][ T7900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.535697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.550662][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.560172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.724858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.733673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.744165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.758128][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 698.827449][T10271] tipc: Enabling of bearer rejected, failed to enable media [ 699.790190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.799758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.833103][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.860750][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.280635][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1231'. [ 700.356500][T10307] device syzkaller0 entered promiscuous mode [ 700.373373][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1231'. [ 700.684609][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1234'. [ 700.830243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.839868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.313137][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.051574][T10341] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.061087][T10341] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.069859][T10341] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.078638][T10341] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.638941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.661964][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.680880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.412329][T10375] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1245'. [ 705.424925][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.988691][T10394] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 706.066911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.100236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.111228][T10394] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 706.987550][T10403] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 707.140206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.154487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.833693][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.844699][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.938377][T10412] kernel profiling enabled (shift: 7) [ 708.336752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.345676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.226280][T10425] loop3: detected capacity change from 0 to 512 [ 709.376203][T10425] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 709.390147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.709838][T10440] device syzkaller0 entered promiscuous mode [ 710.430218][ C0] net_ratelimit: 1 callbacks suppressed [ 710.430262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.446172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.651014][T10455] device syzkaller0 entered promiscuous mode [ 710.740463][ T7880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.046628][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.020196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.029847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.297094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.305940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.316561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.385538][ T4689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.891971][ C0] net_ratelimit: 3 callbacks suppressed [ 715.892005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.920412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.503448][ T7880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.910139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.919315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.183890][T10522] loop9: detected capacity change from 0 to 128 [ 717.898294][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.940237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.949800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.984524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.993952][T10552] loop3: detected capacity change from 0 to 512 [ 718.997901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.773233][T10552] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 720.985522][ T7] net_ratelimit: 3 callbacks suppressed [ 720.985554][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.150249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.180529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.460604][T10581] device syzkaller0 entered promiscuous mode [ 721.674907][T10576] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 721.730568][T10576] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 721.827508][T10592] loop4: detected capacity change from 0 to 1024 [ 722.189711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.599956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.907057][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.230173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.239929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.363904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.384425][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.126771][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1292'. [ 726.432521][ C0] net_ratelimit: 4 callbacks suppressed [ 726.432572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.448354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.473905][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.483439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.727634][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.087509][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.513513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.523065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.650440][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.660545][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.709728][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1292'. [ 729.688012][T10631] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 729.808722][T10639] Cannot find add_set index 4 as target [ 731.170614][T10644] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1298'. [ 731.404972][T10651] loop3: detected capacity change from 0 to 512 [ 731.678705][T10651] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 732.515132][ C0] net_ratelimit: 6 callbacks suppressed [ 732.515167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.531776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.543985][ T8718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.719001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.729605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.026241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.035099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.065504][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.073675][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.493520][T10681] loop8: detected capacity change from 0 to 32768 [ 736.629330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.018125][ C0] net_ratelimit: 1 callbacks suppressed [ 738.018161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.034765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.663370][T10681] JBD2: recovery failed [ 738.667856][T10681] (syz.8.1308,10681,1):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 738.676987][T10681] (syz.8.1308,10681,1):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 738.686638][T10681] (syz.8.1308,10681,1):ocfs2_check_volume:2491 ERROR: status = -5 [ 738.694628][T10681] (syz.8.1308,10681,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 738.796306][T10681] (syz.8.1308,10681,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 739.064624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.074356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.104424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.114448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.139756][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.197316][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.528329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.537777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.860312][ C0] net_ratelimit: 3 callbacks suppressed [ 743.860343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.876296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.777851][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.641695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.651812][ T9075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.663627][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.673109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.746246][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.229254][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.236755][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.677742][T10736] device syzkaller0 entered promiscuous mode [ 747.710306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.723371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.429429][T10755] loop8: detected capacity change from 0 to 1024 [ 749.510042][T10756] loop9: detected capacity change from 0 to 512 [ 749.576203][T10755] EXT4-fs (loop8): Ignoring removed orlov option [ 749.600293][T10756] EXT4-fs (loop9): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 749.796769][ T7352] net_ratelimit: 2 callbacks suppressed [ 749.796786][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.883314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.000000][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.030427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.040336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.050162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.322779][T10755] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 752.360267][ T9075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.428456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.437930][ T7900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.446100][ T7900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.750347][T10781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1336'. [ 755.010594][ C0] net_ratelimit: 2 callbacks suppressed [ 755.010628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.032502][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.075900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.138795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.165110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.411434][T10799] device syzkaller0 entered promiscuous mode [ 756.820958][ T7352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.150171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.160032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.100443][ T7897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.248323][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.270520][ T4231] Bluetooth: hci3: command 0x0409 tx timeout [ 760.350103][ T8148] Bluetooth: hci3: command 0x041b tx timeout [ 762.430208][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 763.454392][T10813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.538787][T10813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.129399][T10813] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.140671][T10813] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.149587][T10813] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.160719][T10813] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.364200][T10813] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.373363][T10813] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.382365][T10813] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.391351][T10813] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.468385][T10792] chnl_net:caif_netlink_parms(): no params data found [ 764.510506][ T8148] Bluetooth: hci3: command 0x0419 tx timeout [ 764.524711][T10841] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1350'. [ 765.061667][ T9075] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.324693][T10879] tipc: Enabling of bearer rejected, failed to enable media [ 765.589722][T10792] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.726842][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.776739][T10792] device bridge_slave_0 entered promiscuous mode [ 765.846903][T10792] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.916769][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.211196][T10792] device bridge_slave_1 entered promiscuous mode [ 768.451663][ T9075] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.521440][T10901] 0x000000000000-0x000000020000 : "" [ 768.594244][T10904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1365'. [ 768.630455][T10901] ftl_cs: FTL header not found. [ 768.756682][ T9075] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.825859][T10792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.922430][T10792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.039103][ T9075] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.360057][T10792] team0: Port device team_slave_0 added [ 770.411694][T10792] team0: Port device team_slave_1 added [ 770.963577][T10792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.036022][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.429938][T10792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.647321][T10943] 0x000000000000-0x000000020000 : "" [ 774.748314][T10943] ftl_cs: FTL header not found. [ 776.907075][T10792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.934696][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.124410][T10792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.070829][T10792] device hsr_slave_0 entered promiscuous mode [ 779.925708][T10792] device hsr_slave_1 entered promiscuous mode [ 780.212108][T10792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.527443][T10792] Cannot create hsr debugfs directory [ 785.609683][T10984] device syzkaller0 entered promiscuous mode [ 786.437171][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1378'. [ 786.470211][ T9075] tipc: Disabling bearer [ 786.481390][ T9075] tipc: Left network mode [ 787.296277][T11040] loop4: detected capacity change from 0 to 16 [ 791.950848][T11040] erofs: (device loop4): mounted with root inode @ nid 36. [ 797.880094][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1399'. [ 803.440066][T10792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 803.454255][T10792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 804.944275][T10792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 805.000423][T10792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 806.332513][T11173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1413'. [ 806.577620][ T9075] device hsr_slave_0 left promiscuous mode [ 806.610138][ T9075] device hsr_slave_1 left promiscuous mode [ 806.626525][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.677068][ T9075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.748714][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.777809][ T9075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.827334][ T9075] device bridge_slave_1 left promiscuous mode [ 806.860232][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.911385][ T9075] device bridge_slave_0 left promiscuous mode [ 806.917730][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.037406][ T9075] device veth1_macvtap left promiscuous mode [ 807.048427][ T9075] device veth0_macvtap left promiscuous mode [ 807.130192][ T9075] device veth1_vlan left promiscuous mode [ 807.136089][ T9075] device veth0_vlan left promiscuous mode [ 808.930753][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.937134][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.032197][ T9075] team0 (unregistering): Port device team_slave_1 removed [ 810.166465][ T9075] team0 (unregistering): Port device team_slave_0 removed [ 810.311297][ T9075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.408315][ T9075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.948615][ T9075] bond0 (unregistering): Released all slaves [ 811.448174][T11228] UBIFS error (pid: 11228): cannot open "(null)", error -22 [ 813.549430][ T26] audit: type=1800 audit(1788800365.430:27): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1424" name=10 dev="sda1" ino=2063 res=0 errno=0 [ 813.593280][T11247] netlink: 'syz.4.1425': attribute type 15 has an invalid length. [ 813.678666][T11247] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 813.687550][T11247] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 813.696524][T11247] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 813.705950][T11247] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 813.905725][T11247] netlink: 'syz.4.1425': attribute type 15 has an invalid length. [ 818.603302][ T4227] Bluetooth: hci1: command 0x0409 tx timeout [ 818.817777][T11241] chnl_net:caif_netlink_parms(): no params data found [ 819.412879][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.447476][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.512506][T11241] device bridge_slave_0 entered promiscuous mode [ 819.598070][T11287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1435'. [ 819.680507][T11241] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.692076][T11241] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.754005][T11241] device bridge_slave_1 entered promiscuous mode [ 819.973811][T11241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.115225][T11241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.756836][T11311] UBIFS error (pid: 11311): cannot open "(null)", error -22 [ 820.893559][T11241] team0: Port device team_slave_0 added [ 821.002679][T11241] team0: Port device team_slave_1 added [ 821.008960][T11314] device syzkaller0 entered promiscuous mode [ 821.672443][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 821.872457][ T4200] Bluetooth: Wrong link type (-22) [ 823.302488][T11322] loop3: detected capacity change from 0 to 512 [ 823.707458][T11322] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 823.717980][ T1109] Bluetooth: hci1: command 0x040f tx timeout [ 823.772282][T11241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.807956][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.841318][T11322] EXT4-fs (loop3): 1 truncate cleaned up [ 823.847328][T11241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.858200][T11322] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 823.866756][T11241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.883604][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.912994][T11241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.040787][ T8148] Bluetooth: hci1: command 0x0419 tx timeout [ 827.144033][T11241] device hsr_slave_0 entered promiscuous mode [ 827.246563][T11241] device hsr_slave_1 entered promiscuous mode [ 827.332075][T11241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.390000][T11241] Cannot create hsr debugfs directory [ 828.459669][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1450'. [ 829.696424][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1452'. [ 831.152046][T11414] device syzkaller0 entered promiscuous mode [ 831.251389][T11241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 832.020814][T11241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 832.232582][T11241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 832.272908][T11241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 832.883326][T11241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.528230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 833.568395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 833.620991][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.676999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 833.696293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 833.752357][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.759492][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.920284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 833.940513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 834.006156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 834.080876][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.088027][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.215548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 835.431251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 835.550236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 835.624462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 835.664073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 835.708188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 835.774966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 835.853490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 835.909988][T11454] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1461'. [ 835.951353][T11241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 835.984538][T11241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 836.031118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 836.039427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 836.108616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 836.246233][T11468] device syzkaller0 entered promiscuous mode [ 838.663046][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.702678][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.878972][T11241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.195097][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 839.910514][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 840.294123][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 840.341279][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 840.402085][T11241] device veth0_vlan entered promiscuous mode [ 840.420304][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 840.499375][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 840.549136][T11241] device veth1_vlan entered promiscuous mode [ 842.118762][T11241] device veth0_macvtap entered promiscuous mode [ 842.191385][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 842.207706][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 842.392412][T11241] device veth1_macvtap entered promiscuous mode [ 842.428462][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 842.526179][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.616049][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.686405][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.734142][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.764600][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.827041][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.883289][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.919452][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.948165][T11533] kvm [11531]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 842.998112][T11241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.184749][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 843.239358][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 843.249568][T11559] UBIFS error (pid: 11559): cannot open "(null)", error -22 [ 843.454088][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.723586][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.063370][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.080301][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.140451][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.199625][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.279920][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.340569][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.829701][T11241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.922653][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 846.021337][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 846.069486][T11241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.119364][T11241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.058038][T11241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.157597][T11241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.628923][ T9075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.668613][ T9075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.899696][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 849.353817][ T9071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.380187][ T9071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.516439][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 849.688410][T11595] tc action pedit 'at' offset 164 out of bounds [ 850.058460][T11603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 850.068290][T11603] team0: Failed to send options change via netlink (err -105) [ 850.076319][T11603] team0: Port device bond1 added [ 850.201793][T11604] device syzkaller0 entered promiscuous mode [ 850.954873][T11615] UBIFS error (pid: 11615): cannot open "(null)", error -22 [ 853.820210][T11663] loop3: detected capacity change from 0 to 512 [ 854.018833][T11663] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1498: corrupted in-inode xattr [ 854.034341][T11663] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1498: couldn't read orphan inode 15 (err -117) [ 854.140809][T11663] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,grpquota,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000004,init_itable=0x0000000000000007,auto_da_alloc,bsdgroups,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 854.358135][ T144] device hsr_slave_0 left promiscuous mode [ 854.381159][ T144] device hsr_slave_1 left promiscuous mode [ 854.431619][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.460048][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.511462][ T144] device bridge_slave_1 left promiscuous mode [ 854.517774][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.590503][ T144] device bridge_slave_0 left promiscuous mode [ 854.616193][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.604940][T11702] loop3: detected capacity change from 0 to 256 [ 857.673793][T11702] exfat: Deprecated parameter 'utf8' [ 857.754236][T11702] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 858.770981][ T144] team0 (unregistering): Port device team_slave_1 removed [ 858.790591][T11723] UBIFS error (pid: 11723): cannot open "(null)", error -22 [ 859.217165][ T144] team0 (unregistering): Port device team_slave_0 removed [ 859.303196][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.457102][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.938822][ T144] bond0 (unregistering): Released all slaves [ 861.064168][T11709] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa1a error=-28 [ 861.174322][T11709] infiniband syz2: set down [ 861.179407][T11709] infiniband syz2: added team_slave_1 [ 861.198243][T11709] infiniband syz2: Couldn't open port 1 [ 861.263791][T11709] RDS/IB: syz2: added [ 861.268587][T11709] smc: adding ib device syz2 with port count 1 [ 861.275127][T11709] smc: ib device syz2 port 1 has pnetid [ 861.408710][T11736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1511'. [ 863.083395][T11772] loop2: detected capacity change from 0 to 512 [ 863.365512][T11774] FAULT_INJECTION: forcing a failure. [ 863.365512][T11774] name failslab, interval 1, probability 0, space 0, times 0 [ 863.379254][T11774] CPU: 1 PID: 11774 Comm: syz.8.1519 Not tainted syzkaller #0 [ 863.386758][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.396847][T11774] Call Trace: [ 863.400150][T11774] [ 863.403113][T11774] dump_stack_lvl+0x188/0x250 [ 863.407864][T11774] ? show_regs_print_info+0x20/0x20 [ 863.413100][T11774] ? load_image+0x410/0x410 [ 863.417647][T11774] ? __lock_acquire+0x7b50/0x7b50 [ 863.422709][T11774] ? memset+0x1e/0x40 [ 863.426729][T11774] ? lockdep_init_map_type+0x98/0x900 [ 863.432143][T11774] should_fail+0x383/0x4b0 [ 863.436595][T11774] should_failslab+0x5/0x20 [ 863.441134][T11774] slab_pre_alloc_hook+0x51/0xc0 [ 863.446103][T11774] ? security_inode_alloc+0x30/0x110 [ 863.451607][T11774] kmem_cache_alloc+0x3d/0x280 [ 863.456413][T11774] security_inode_alloc+0x30/0x110 [ 863.461564][T11774] inode_init_always+0x8e5/0xc90 [ 863.466629][T11774] new_inode_pseudo+0x8e/0x210 [ 863.471438][T11774] new_inode+0x25/0x1d0 [ 863.475628][T11774] mqueue_get_inode+0x27/0xbe0 [ 863.480497][T11774] ? do_raw_spin_unlock+0x11d/0x230 [ 863.485730][T11774] mqueue_create_attr+0x212/0x410 [ 863.490799][T11774] vfs_mkobj+0x343/0x520 [ 863.495145][T11774] ? do_mq_open+0x750/0x750 [ 863.499697][T11774] do_mq_open+0x5fc/0x750 [ 863.504066][T11774] ? mq_put_mnt+0x40/0x40 [ 863.508427][T11774] ? __context_tracking_exit+0x4c/0x80 [ 863.513921][T11774] __x64_sys_mq_open+0x182/0x1e0 [ 863.518900][T11774] ? proc_ipc_sem_dointvec+0x330/0x330 [ 863.524401][T11774] ? lockdep_hardirqs_on+0x94/0x140 [ 863.529642][T11774] do_syscall_64+0x4c/0xa0 [ 863.534181][T11774] ? clear_bhb_loop+0x30/0x80 [ 863.538888][T11774] ? clear_bhb_loop+0x30/0x80 [ 863.543588][T11774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 863.549509][T11774] RIP: 0033:0x7f3b14829159 [ 863.553956][T11774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.573684][T11774] RSP: 002b:00007f3b12a81028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 863.582259][T11774] RAX: ffffffffffffffda RBX: 00007f3b14ab0fa0 RCX: 00007f3b14829159 [ 863.590265][T11774] RDX: 00000000000001d0 RSI: 0000000000000040 RDI: 0000200000000180 [ 863.598271][T11774] RBP: 00007f3b148c0024 R08: 0000000000000000 R09: 0000000000000000 [ 863.606269][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.614267][T11774] R13: 00007f3b14ab1038 R14: 00007f3b14ab0fa0 R15: 00007ffeb9b0d6e8 [ 863.622285][T11774] [ 863.992855][T11777] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 864.075790][T11777] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 864.920051][T11772] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 867.412493][T11833] device syzkaller0 entered promiscuous mode [ 869.211487][T11852] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 869.255163][T11852] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 870.836051][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.860470][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.774199][ T4200] Bluetooth: Wrong link type (-22) [ 872.524634][T11888] SET target dimension over the limit! [ 872.921629][T11877] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 872.929589][T11877] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 876.406400][T11937] loop2: detected capacity change from 0 to 1024 [ 876.832351][T11930] device syzkaller0 entered promiscuous mode [ 877.400590][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1552'. [ 877.469281][T11952] loop8: detected capacity change from 0 to 512 [ 877.573698][T11937] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 877.600176][T11952] EXT4-fs (loop8): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 879.524287][T11985] device syzkaller0 entered promiscuous mode [ 879.587648][T11976] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 879.646871][T11990] tipc: Enabled bearer , priority 0 [ 879.720465][T11985] tipc: Resetting bearer [ 879.748165][T11976] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 879.819519][T11979] tipc: Resetting bearer [ 879.963759][T11979] tipc: Disabling bearer [ 883.298266][T12016] loop8: detected capacity change from 0 to 256 [ 883.541257][T12016] FAT-fs (loop8): Directory bread(block 64) failed [ 883.599171][T12016] FAT-fs (loop8): Directory bread(block 65) failed [ 883.698030][T12016] FAT-fs (loop8): Directory bread(block 66) failed [ 883.738536][T12016] FAT-fs (loop8): Directory bread(block 67) failed [ 883.810144][T12016] FAT-fs (loop8): Directory bread(block 68) failed [ 884.103111][T12016] FAT-fs (loop8): Directory bread(block 69) failed [ 884.155966][T12016] FAT-fs (loop8): Directory bread(block 70) failed [ 884.237781][T12016] FAT-fs (loop8): Directory bread(block 71) failed [ 884.292694][T12016] FAT-fs (loop8): Directory bread(block 72) failed [ 884.342335][T12016] FAT-fs (loop8): Directory bread(block 73) failed [ 886.608292][T12060] device syzkaller0 entered promiscuous mode [ 887.059340][T12061] kvm [12057]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 887.147637][T12076] loop4: detected capacity change from 0 to 512 [ 887.257421][T12076] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 888.069253][T12082] UBIFS error (pid: 12082): cannot open "(null)", error -22 [ 889.125751][T12099] loop8: detected capacity change from 0 to 512 [ 889.200164][T12093] device syzkaller0 entered promiscuous mode [ 889.475486][T12099] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 889.506729][T12099] EXT4-fs (loop8): Unrecognized mount option "=" or missing value [ 891.277076][T12132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1587'. [ 891.373617][T12134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1587'. [ 891.843066][T12150] netlink: 'syz.8.1591': attribute type 1 has an invalid length. [ 891.953732][T12150] netlink: 'syz.8.1591': attribute type 2 has an invalid length. [ 893.005133][T12155] loop8: detected capacity change from 0 to 4096 [ 893.575883][T12155] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 894.546994][T12172] loop2: detected capacity change from 0 to 512 [ 894.639794][T12176] loop4: detected capacity change from 0 to 4096 [ 894.684850][T12172] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 894.953461][T12183] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 895.198732][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1591'. [ 899.392419][T12232] UBIFS error (pid: 12232): cannot open "(null)", error -22 [ 899.821481][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1604'. [ 899.877882][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1604'. [ 903.622833][T12256] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1613'. [ 903.712778][T12256] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 903.816793][T12256] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 908.253573][T12306] device syzkaller0 entered promiscuous mode [ 910.716341][T12336] xt_cgroup: path and classid specified [ 911.322291][T12340] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 911.368401][T12340] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 912.695041][T12372] Cannot find add_set index 4 as target [ 913.113303][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 916.252322][T12404] 0x646e732f00000007-0x646ee5946d697436 : "" [ 916.259199][T12404] mtd: partition "" is out of reach -- disabled [ 916.575327][T12404] ftl_cs: FTL header not found. [ 919.887906][T12427] netlink: 'syz.6.1651': attribute type 15 has an invalid length. [ 920.012922][T12427] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 920.021786][T12427] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 920.030580][T12427] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 920.039390][T12427] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 920.668503][T12441] UBIFS error (pid: 12441): cannot open "(null)", error -22 [ 920.853985][T12443] netlink: 'syz.4.1655': attribute type 2 has an invalid length. [ 921.919899][T12427] netlink: 'syz.6.1651': attribute type 15 has an invalid length. [ 922.186869][T12443] loop4: detected capacity change from 0 to 32768 [ 922.637892][T12443] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 922.647389][T12443] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 922.696145][T12443] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 922.711324][ T4293] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 922.771726][ T4293] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 923.613235][ T4293] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 841ms [ 923.708391][ T4293] gfs2: fsid=syz:syz.0: jid=0: Done [ 923.720891][T12463] loop3: detected capacity change from 0 to 1024 [ 923.769484][T12443] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 923.787918][T12443] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 923.973512][T12463] hfsplus: unable to parse mount options [ 924.968929][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 924.976707][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 924.984636][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 924.992367][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 925.000165][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 925.007898][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 925.015700][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 925.023461][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 925.031221][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 925.038928][T12480] tc action pedit 'at' offset -2147483645 out of bounds [ 925.046727][T12480] net_ratelimit: 5 callbacks suppressed [ 925.046755][T12480] 0: reclassify loop, rule prio 0, protocol 800 [ 926.628843][T12505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1670'. [ 928.879980][T12525] futex_wake_op: syz.8.1675 tries to shift op by -1; fix this program [ 930.953801][T12538] 0x646e732f00000007-0x646ee5946d697436 : "" [ 930.960387][T12538] mtd: partition "" is out of reach -- disabled [ 931.126134][T12538] ftl_cs: FTL header not found. [ 931.544949][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.586602][T12541] netlink: 'syz.4.1680': attribute type 1 has an invalid length. [ 933.594446][T12541] netlink: 'syz.4.1680': attribute type 2 has an invalid length. [ 933.734942][T12545] device syzkaller0 entered promiscuous mode [ 934.120296][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 934.166887][T12541] loop4: detected capacity change from 0 to 4096 [ 934.184162][T12552] device bridge_slave_1 left promiscuous mode [ 934.236725][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.294029][T12552] device bridge_slave_0 left promiscuous mode [ 934.324994][T12552] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.761322][T12541] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 934.897090][T12558] loop2: detected capacity change from 0 to 1024 [ 935.741020][T12566] device syzkaller0 entered promiscuous mode [ 936.060778][ T9] hfsplus: b-tree write err: -5, ino 3 [ 938.530899][T12613] loop2: detected capacity change from 0 to 128 [ 938.612706][T12613] nfs: Unknown parameter 'úxé­§^zóRè¡J§ÌüP“jcbjý~@æ!ïû̼o^žw ³wýÙýRÁÖ FMÂq%!‘}‘”„¥!Ã^“vkò÷؇7¿_½qór&›™Wj6³ðOZ)51ùòÁ£DÐm{TvS·÷Þ§ßíþ¼ûëÞç…{E[mU®Ô”¡+okÆ¢eª|Ñ.éJÍY¦a›ªX¶ÍªßX¦*X•ååº2ÊùñärÕ´me”ëªdÖU­¢jÕº2îŲÒu]'ÇÉmÌÏ™“—ú< Hµš1FD$q¤%·1”' [ 939.898125][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 941.464871][T12618] device syzkaller0 entered promiscuous mode [ 945.666644][T12669] UBIFS error (pid: 12669): cannot open "(null)", error -22 [ 951.266260][T12702] device syzkaller0 entered promiscuous mode [ 957.367284][T12755] loop8: detected capacity change from 0 to 256 [ 959.109428][T12752] tipc: Enabled bearer , priority 10 [ 960.945158][T12774] device syzkaller0 entered promiscuous mode [ 961.021142][T12777] CIFS: Attempting to mount \\127.0.0.1\share [ 961.093150][T12777] CIFS: VFS: No username specified [ 961.538234][T12789] 0x646e732f00000007-0x646ee5946d697436 : "" [ 961.648248][T12789] mtd: partition "" is out of reach -- disabled [ 962.033454][T12789] ftl_cs: FTL header not found. [ 963.669244][T12823] loop2: detected capacity change from 0 to 128 [ 963.801006][T12823] FAT-fs (loop2): Directory bread(block 1048) failed [ 963.834523][T12823] FAT-fs (loop2): Directory bread(block 1049) failed [ 963.889504][T12823] FAT-fs (loop2): Directory bread(block 1050) failed [ 963.897070][T12823] FAT-fs (loop2): Directory bread(block 1051) failed [ 963.930099][T12823] FAT-fs (loop2): Directory bread(block 1052) failed [ 963.936871][T12823] FAT-fs (loop2): Directory bread(block 1053) failed [ 964.205490][T12823] FAT-fs (loop2): Directory bread(block 1054) failed [ 964.261076][T12823] FAT-fs (loop2): Directory bread(block 1055) failed [ 965.193459][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 965.237033][T12831] device veth0 entered promiscuous mode [ 965.326366][T12846] FAT-fs (loop2): FAT read failed (blocknr 128) [ 965.722594][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 971.719666][T12924] netlink: 'syz.8.1763': attribute type 15 has an invalid length. [ 971.801555][T12924] netdevsim netdevsim8 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 971.811674][T12924] netdevsim netdevsim8 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 971.821477][T12924] netdevsim netdevsim8 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 971.831132][T12924] netdevsim netdevsim8 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 975.094014][T12924] netlink: 'syz.8.1763': attribute type 15 has an invalid length. [ 975.326647][T12950] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 975.375196][T12950] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 976.283766][T12967] 0x646e732f00000007-0x646ee5946d697436 : "" [ 976.345297][T12967] mtd: partition "" is out of reach -- disabled [ 976.444289][T12967] ftl_cs: FTL header not found. [ 977.819322][T12981] loop8: detected capacity change from 0 to 1024 [ 978.761170][T12999] device syzkaller0 entered promiscuous mode [ 982.801961][T13026] netlink: 'syz.2.1784': attribute type 15 has an invalid length. [ 982.878151][T13026] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 982.888126][T13026] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 982.898019][T13026] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 982.907686][T13026] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 983.062606][T13026] netlink: 'syz.2.1784': attribute type 15 has an invalid length. [ 983.067728][T13027] loop8: detected capacity change from 0 to 2048 [ 983.221054][T13027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 988.475791][T13116] syz.3.1799 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 988.499564][T13120] input: syz0 as /devices/virtual/input/input9 [ 988.620871][T13116] CPU: 1 PID: 13116 Comm: syz.3.1799 Not tainted syzkaller #0 [ 988.628415][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 988.638528][T13116] Call Trace: [ 988.641840][T13116] [ 988.644798][T13116] dump_stack_lvl+0x188/0x250 [ 988.649515][T13116] ? show_regs_print_info+0x20/0x20 [ 988.654743][T13116] ? load_image+0x410/0x410 [ 988.659282][T13116] ? local_lock_release+0x170/0x170 [ 988.664508][T13116] ? __rwlock_init+0x140/0x140 [ 988.669303][T13116] dump_header+0xd9/0x780 [ 988.673666][T13116] oom_kill_process+0x20e/0x3d0 [ 988.678645][T13116] out_of_memory+0xdb2/0x1190 [ 988.683353][T13116] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 988.689060][T13116] ? mutex_lock_io_nested+0x60/0x60 [ 988.694292][T13116] ? unregister_oom_notifier+0x20/0x20 [ 988.699926][T13116] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 988.705506][T13116] ? mem_cgroup_oom_trylock+0x210/0x210 [ 988.711092][T13116] ? do_raw_spin_unlock+0x11d/0x230 [ 988.716324][T13116] try_charge_memcg+0x1075/0x15b0 [ 988.721403][T13116] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 988.727240][T13116] ? rcu_lock_acquire+0x30/0x30 [ 988.732150][T13116] obj_cgroup_charge_pages+0x87/0x190 [ 988.737561][T13116] ? __memcg_kmem_charge_page+0x380/0x380 [ 988.743322][T13116] ? rcu_lock_acquire+0x30/0x30 [ 988.748205][T13116] obj_cgroup_charge+0x19f/0x320 [ 988.753184][T13116] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 988.758334][T13116] slab_pre_alloc_hook+0x9d/0xc0 [ 988.763313][T13116] ? sockfs_init_fs_context+0xa0/0xa0 [ 988.768719][T13116] ? sock_alloc_inode+0x17/0xb0 [ 988.773600][T13116] kmem_cache_alloc+0x3d/0x280 [ 988.778415][T13116] ? sockfs_init_fs_context+0xa0/0xa0 [ 988.783844][T13116] sock_alloc_inode+0x17/0xb0 [ 988.788553][T13116] ? sockfs_init_fs_context+0xa0/0xa0 [ 988.793949][T13116] new_inode_pseudo+0x5f/0x210 [ 988.798748][T13116] __sock_create+0x128/0x910 [ 988.803379][T13116] __sys_socket+0xe2/0x170 [ 988.807833][T13116] __x64_sys_socket+0x76/0x80 [ 988.812548][T13116] do_syscall_64+0x4c/0xa0 [ 988.817013][T13116] ? clear_bhb_loop+0x30/0x80 [ 988.821732][T13116] ? clear_bhb_loop+0x30/0x80 [ 988.826445][T13116] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 988.832370][T13116] RIP: 0033:0x7fbf5845f159 [ 988.836814][T13116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.856445][T13116] RSP: 002b:00007fbf566b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 988.864886][T13116] RAX: ffffffffffffffda RBX: 00007fbf586e6fa0 RCX: 00007fbf5845f159 [ 988.872891][T13116] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 988.880891][T13116] RBP: 00007fbf584f6024 R08: 0000000000000000 R09: 0000000000000000 [ 988.888886][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.896882][T13116] R13: 00007fbf586e7038 R14: 00007fbf586e6fa0 R15: 00007ffc45b767a8 [ 988.904899][T13116] [ 989.131850][T13116] memory: usage 0kB, limit 0kB, failcnt 74 [ 989.137958][T13116] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 989.163123][T13116] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 989.199841][T13116] Memory cgroup stats for /syz3/test: [ 989.270303][T13116] anon 0 [ 989.270303][T13116] file 0 [ 989.270303][T13116] kernel_stack 0 [ 989.270303][T13116] pagetables 0 [ 989.270303][T13116] percpu 0 [ 989.270303][T13116] sock 0 [ 989.270303][T13116] shmem 0 [ 989.270303][T13116] file_mapped 0 [ 989.270303][T13116] file_dirty 0 [ 989.270303][T13116] file_writeback 0 [ 989.270303][T13116] swapcached 0 [ 989.270303][T13116] anon_thp 0 [ 989.270303][T13116] file_thp 0 [ 989.270303][T13116] shmem_thp 0 [ 989.270303][T13116] inactive_anon 0 [ 989.270303][T13116] active_anon 0 [ 989.270303][T13116] inactive_file 0 [ 989.270303][T13116] active_file 0 [ 989.270303][T13116] unevictable 0 [ 989.270303][T13116] slab_reclaimable 0 [ 989.270303][T13116] slab_unreclaimable 0 [ 989.270303][T13116] slab 0 [ 989.270303][T13116] workingset_refault_anon 0 [ 989.270303][T13116] workingset_refault_file 0 [ 989.270303][T13116] workingset_activate_anon 0 [ 989.270303][T13116] workingset_activate_file 0 [ 991.522942][T13116] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1799,pid=13113,uid=0 [ 991.542903][T13116] Memory cgroup out of memory: Killed process 13116 (syz.3.1799) total-vm:104424kB, anon-rss:1440kB, file-rss:22588kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 991.565630][T13116] socket: no more sockets [ 991.855514][T13148] loop4: detected capacity change from 0 to 1024 [ 991.875781][T13150] device syzkaller0 entered promiscuous mode [ 992.001077][T13148] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 992.985036][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.123229][T13174] loop8: detected capacity change from 0 to 256 [ 993.240858][T13174] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1000.690791][T13232] device syzkaller0 entered promiscuous mode [ 1000.755232][T13230] tcf_pedit_act: 7 callbacks suppressed [ 1000.755368][T13230] tc action pedit offset must be on 32 bit boundaries [ 1009.994317][T13296] loop3: detected capacity change from 0 to 131072 [ 1010.338370][T13305] hub 8-0:1.0: USB hub found [ 1010.355462][T13296] F2FS-fs (loop3): invalid crc value [ 1010.407021][T13308] device syzkaller0 entered promiscuous mode [ 1010.432146][T13305] hub 8-0:1.0: 1 port detected [ 1010.467560][T13296] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1010.591507][T13296] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 1010.617893][T13296] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1010.709120][T13320] loop4: detected capacity change from 0 to 512 [ 1010.769446][T13320] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 1020.946082][T13365] loop2: detected capacity change from 0 to 8192 [ 1021.027484][T13365] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1021.130196][T13365] REISERFS (device loop2): using ordered data mode [ 1021.169907][T13365] reiserfs: using flush barriers [ 1021.314644][T13365] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1021.472256][T13365] REISERFS (device loop2): checking transaction log (loop2) [ 1021.514630][T13380] device syzkaller0 entered promiscuous mode [ 1021.576748][T13365] REISERFS (device loop2): Using r5 hash to sort names [ 1021.615686][T13365] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1021.916292][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 1021.959986][T13385] device bridge_slave_1 left promiscuous mode [ 1021.979181][T13385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.033135][T13385] device bridge_slave_0 left promiscuous mode [ 1022.076808][T13385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.177942][T13399] loop3: detected capacity change from 0 to 1024 [ 1023.393418][T13399] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 1024.494804][T13411] EXT4-fs warning (device loop3): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 1032.056201][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 1034.099966][T12980] Bluetooth: hci3: command 0x041b tx timeout [ 1036.180123][T12980] Bluetooth: hci3: command 0x040f tx timeout [ 1036.860937][T13436] chnl_net:caif_netlink_parms(): no params data found [ 1038.141517][T13436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.181098][T13436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.199309][T13436] device bridge_slave_0 entered promiscuous mode [ 1038.208565][T13436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.229036][T13436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.243640][T13436] device bridge_slave_1 entered promiscuous mode [ 1038.259863][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 1039.273029][T13436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.304650][T13436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.564026][T13436] team0: Port device team_slave_0 added [ 1039.587610][T13549] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1039.624186][T13549] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1039.656509][T13436] team0: Port device team_slave_1 added [ 1039.824828][T13436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.873412][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.899377][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.957566][T13436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.977488][T13436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.988309][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.060097][T13436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.245079][T13550] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1891'. [ 1041.294529][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1897'. [ 1042.755650][T13436] device hsr_slave_0 entered promiscuous mode [ 1042.848223][T13599] loop4: detected capacity change from 0 to 64 [ 1042.862209][T13436] device hsr_slave_1 entered promiscuous mode [ 1042.953618][T13436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.978747][T13436] Cannot create hsr debugfs directory [ 1045.093856][T13615] device syzkaller0 entered promiscuous mode [ 1046.378481][T13628] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1908'. [ 1053.583120][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1918'. [ 1054.424366][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.381587][T13713] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1056.203784][T13436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1056.428630][T13436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1056.748249][T13436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1056.928382][T13436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1060.336735][T13436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.398936][T13752] device syzkaller0 entered promiscuous mode [ 1060.467210][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1060.493689][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1060.755629][T13436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.798987][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1060.822937][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1060.888161][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.895315][ T7897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.072197][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1061.154476][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1061.216656][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1061.287412][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.294573][ T7897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.401421][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.455571][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.513671][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1935'. [ 1061.589086][T13775] device bridge_slave_1 left promiscuous mode [ 1061.623314][T13775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.673926][T13775] device bridge_slave_0 left promiscuous mode [ 1061.712692][T13775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.902205][T13810] loop4: detected capacity change from 0 to 256 [ 1064.159691][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1064.235047][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1064.308359][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1064.379401][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1064.438873][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1065.517678][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1065.564000][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1065.645949][T13436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.719194][T13436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1066.016333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1066.074777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1068.020121][T13841] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1068.088006][T13841] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1068.304010][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1068.330900][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1068.448911][T13436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.703223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1068.735892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1068.859456][T13870] o2cb: This node has not been configured. [ 1068.921237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1068.929415][T13870] o2cb: Cluster check failed. Fix errors before retrying. [ 1068.960359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1069.011390][T13870] (syz.8.1949,13870,1):user_dlm_register:675 ERROR: status = -22 [ 1069.034178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1069.044701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1069.054397][T13870] (syz.8.1949,13870,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain1" [ 1174.119732][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1174.126816][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4358/1:b..l [ 1174.135656][ C1] (detected by 1, t=10506 jiffies, g=46769, q=413) [ 1174.142270][ C1] task:kworker/u4:22 state:R running task stack:22736 pid: 4358 ppid: 2 flags:0x00004000 [ 1174.154666][ C1] Workqueue: netns cleanup_net [ 1174.159507][ C1] Call Trace: [ 1174.162817][ C1] [ 1174.165794][ C1] __schedule+0x11c3/0x4350 [ 1174.170322][ C1] ? mark_lock+0x94/0x320 [ 1174.174689][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1174.180660][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1174.186569][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1174.191440][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 1174.196753][ C1] preempt_schedule_irq+0xbb/0x160 [ 1174.201889][ C1] ? __cond_resched+0xd0/0xd0 [ 1174.206594][ C1] ? rcu_is_watching+0x11/0xa0 [ 1174.211436][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 1174.217251][ C1] irqentry_exit+0x63/0x70 [ 1174.221707][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1174.227736][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 1174.233056][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 1174.252680][ C1] RSP: 0018:ffffc9000326f920 EFLAGS: 00000206 [ 1174.258771][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ce84087c3e71fb00 [ 1174.266767][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4540 [ 1174.274762][ C1] RBP: ffffc9000326fa40 R08: dffffc0000000000 R09: 1ffffffff203de18 [ 1174.282760][ C1] R10: dffffc0000000000 R11: fffffbfff203de19 R12: ffffffff8c31ef60 [ 1174.290754][ C1] R13: 1ffff9200064df30 R14: 0000000000000246 R15: dffffc0000000000 [ 1174.298762][ C1] ? rcu_lock_release+0x5/0x20 [ 1174.303624][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1174.309028][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 1174.314085][ C1] rcu_lock_acquire+0x2a/0x30 [ 1174.318796][ C1] ? rcu_lock_acquire+0x5/0x30 [ 1174.323609][ C1] inet_twsk_purge+0x10d/0x820 [ 1174.328567][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 1174.333978][ C1] ? iput+0x6ea/0x880 [ 1174.337992][ C1] ? dccp_v4_exit_net+0x80/0x80 [ 1174.342967][ C1] cleanup_net+0x78e/0xba0 [ 1174.347418][ C1] ? ops_free_list+0x330/0x330 [ 1174.352213][ C1] ? __schedule+0x11cb/0x4350 [ 1174.356932][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1174.362153][ C1] process_one_work+0x867/0xff0 [ 1174.367050][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1174.372718][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1174.378053][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1174.383092][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1174.388659][ C1] ? wq_worker_running+0x97/0x170 [ 1174.393711][ C1] worker_thread+0xad7/0x12a0 [ 1174.398468][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1174.404398][ C1] kthread+0x42e/0x520 [ 1174.408497][ C1] ? rcu_lock_release+0x20/0x20 [ 1174.413364][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1174.417983][ C1] ret_from_fork+0x1f/0x30 [ 1174.422447][ C1] [ 1174.425487][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10479 jiffies! g46769 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1174.437823][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=59865 [ 1174.445727][ C1] rcu: rcu_preempt kthread starved for 10480 jiffies! g46769 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1174.457101][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1174.467076][ C1] rcu: RCU grace-period kthread stack dump: [ 1174.472994][ C1] task:rcu_preempt state:I stack:26896 pid: 15 ppid: 2 flags:0x00004000 [ 1174.482239][ C1] Call Trace: [ 1174.485534][ C1] [ 1174.488526][ C1] __schedule+0x11c3/0x4350 [ 1174.493074][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1174.499002][ C1] schedule+0x11b/0x1e0 [ 1174.503198][ C1] schedule_timeout+0x184/0x2d0 [ 1174.508065][ C1] ? console_conditional_schedule+0x40/0x40 [ 1174.513977][ C1] ? update_process_times+0x200/0x200 [ 1174.519377][ C1] ? prepare_to_swait_event+0x33d/0x360 [ 1174.524954][ C1] rcu_gp_fqs_loop+0x2be/0x11f0 [ 1174.529845][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1174.535066][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 1174.541273][ C1] ? rcu_gp_init+0xd72/0x10f0 [ 1174.545972][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 1174.550777][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1174.555995][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1174.561218][ C1] rcu_gp_kthread+0x9a/0x370 [ 1174.565867][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1174.571021][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1174.576965][ C1] ? __kthread_parkme+0x14e/0x1b0 [ 1174.582022][ C1] kthread+0x42e/0x520 [ 1174.586111][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1174.591244][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1174.595854][ C1] ret_from_fork+0x1f/0x30 [ 1174.600308][ C1] [ 1174.603354][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1174.609692][ C1] NMI backtrace for cpu 1 [ 1174.614025][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1174.621067][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1174.631132][ C1] Call Trace: [ 1174.634437][ C1] [ 1174.637293][ C1] dump_stack_lvl+0x188/0x250 [ 1174.641994][ C1] ? show_regs_print_info+0x20/0x20 [ 1174.647220][ C1] ? load_image+0x410/0x410 [ 1174.651750][ C1] ? irq_work_queue+0xbf/0x140 [ 1174.656633][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 1174.661595][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1174.667765][ C1] ? _printk+0xda/0x130 [ 1174.672029][ C1] ? cpu_online+0x1d/0x30 [ 1174.676410][ C1] ? load_image+0x410/0x410 [ 1174.680992][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1174.687141][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1174.693142][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 1174.699324][ C1] print_other_cpu_stall+0x1110/0x1270 [ 1174.704813][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 1174.709770][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 1174.715096][ C1] rcu_sched_clock_irq+0x845/0x1120 [ 1174.720363][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 1174.725252][ C1] ? hrtimer_run_queues+0x162/0x400 [ 1174.730538][ C1] ? account_process_tick+0x22a/0x3a0 [ 1174.735939][ C1] update_process_times+0x193/0x200 [ 1174.741177][ C1] tick_sched_timer+0x37d/0x560 [ 1174.746074][ C1] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 1174.751640][ C1] __hrtimer_run_queues+0x4b0/0xb60 [ 1174.756852][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1174.762867][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 1174.768028][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1174.774150][ C1] hrtimer_interrupt+0x397/0x8b0 [ 1174.779134][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1174.785135][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1174.790788][ C1] [ 1174.793743][ C1] [ 1174.796694][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1174.802705][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1174.807765][ C1] Code: b7 48 89 df e8 06 75 f4 f7 eb ad e8 4f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 05 5c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1174.827383][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 1174.833467][ C1] RAX: 33f05303d860ea00 RBX: ffff88813fe78000 RCX: 33f05303d860ea00 [ 1174.841542][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4540 [ 1174.849536][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 1174.857526][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 1174.865637][ C1] R13: dffffc0000000000 R14: 1ffff11027fcf000 R15: 0000000000000000 [ 1174.873643][ C1] default_idle_call+0x81/0xc0 [ 1174.878424][ C1] do_idle+0x251/0x650 [ 1174.882519][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1174.887738][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1174.892986][ C1] ? asm_sysvec_apic_timer_interrupt+0x11/0x20 [ 1174.899164][ C1] ? schedule_idle+0x57/0x90 [ 1174.903774][ C1] cpu_startup_entry+0x14/0x20 [ 1174.908553][ C1] start_secondary+0x32f/0x430 [ 1174.913371][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 1174.918772][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 1174.924707][ C1]