last executing test programs: 7m10.518005982s ago: executing program 4 (id=1178): r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r3, &(0x7f00000005c0)=""/4096, 0x1000) wait4(r0, 0x0, 0x40000000, 0x0) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x86) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x101, 0x1) getdents(r6, &(0x7f00000002c0)=""/201, 0xc9) 7m9.906102857s ago: executing program 4 (id=1185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe, 0x200, 0x5, 0xb, 0x4, 0xe4b}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0x20000fff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m9.691218473s ago: executing program 4 (id=1188): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_open_dev$dvb_demux(0x0, 0x0, 0x40200) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff, 0x0) io_setup(0x3fc, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m8.718743237s ago: executing program 4 (id=1199): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 7m7.43783512s ago: executing program 4 (id=1212): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m5.894207749s ago: executing program 4 (id=1224): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x401, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0xd07, 0x1a001}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x0) 7m5.610976206s ago: executing program 32 (id=1224): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x401, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0xd07, 0x1a001}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x0) 5m56.780103035s ago: executing program 2 (id=1603): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5m56.395695545s ago: executing program 2 (id=1607): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_open_dev$dvb_demux(0x0, 0x0, 0x40200) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 5m56.099233163s ago: executing program 2 (id=1611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x8, 0x2, 0x200, 0x101, 0x39, 0x10b7, 0xb3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x4, 0x6, 0x4, 0x71}, 0x8, 0x1, 0x401, 0x4, 0x3ff, 0x3, 0x14, 0xa, 0x2, 0xfffffffb, {0x5, 0xe, 0x6, 0xdce8, 0x8, 0xffffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2404c8c0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m55.728170692s ago: executing program 2 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) openat$tun(0xffffffffffffff9c, 0x0, 0x42400, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4894}, 0x42) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000080), 0xf8, 0x55d, &(0x7f0000000700)="$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") r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000700)) ptrace$cont(0x21, r3, 0x80000001, 0x4) 5m54.693088088s ago: executing program 2 (id=1620): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00000036c0)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x2, {0x0, 0x4, 0x1, 0xffffffff}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, 0x0) 5m52.396303906s ago: executing program 2 (id=1632): socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 5m52.052712615s ago: executing program 33 (id=1632): socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 13.617676505s ago: executing program 5 (id=3578): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x6c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, r4, r5}}, [@algo_auth={0x11b, 0x1, {{'blake2s-128-x86\x00'}, 0x698, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e05"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x11f4, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0xd9, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x120}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r6}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee066545976ea2fe8", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$netlink(0x10, 0x3, 0x0) 12.276524098s ago: executing program 5 (id=3587): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$ax25(0x27, 0x0, 0xcb) io_setup(0x2, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0xffe7, {0xffffffff, 0xbde, 0xb, 0x10000}}) 11.627699745s ago: executing program 5 (id=3592): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r3, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) syz_init_net_socket$rose(0xb, 0x5, 0x0) 8.145020424s ago: executing program 5 (id=3606): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) 7.854346641s ago: executing program 3 (id=3608): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100), 0x0, 0x0) shutdown(r1, 0x1) setrlimit(0x4, &(0x7f0000000080)={0x100, 0xffffffffffff18b2}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ftruncate(r0, 0x3) 6.411803648s ago: executing program 5 (id=3618): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.726560015s ago: executing program 3 (id=3620): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) 4.664130222s ago: executing program 0 (id=3625): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r2 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) ioctl$MTDFILEMODE(r2, 0x4d13, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 4.240418983s ago: executing program 6 (id=3628): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) 3.896293021s ago: executing program 6 (id=3631): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe3a) setresgid(0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 3.660344528s ago: executing program 6 (id=3632): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r5, r3, 0x0, 0x100000000) 3.537067571s ago: executing program 0 (id=3633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @auto=[0x66, 0x38, 0x63, 0x33, 0x63, 0x66, 0x38, 0x0, 0x34, 0x32, 0x38, 0x33, 0x36, 0x36, 0x37, 0x33]}, &(0x7f0000000400)={0x0, "cfe062a761e3827b24b8892afdefedeb95e601613685c3359b46736511645680f020b02d24851781ed8c7134d7fd8378d32f107e462b4542f6487e32df24b2e6", 0x40}, 0x48, 0xfffffffffffffff8) request_key(&(0x7f0000000340)='id_legacy\x00', 0x0, &(0x7f00000003c0)='/dev/vsock\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000280)='$\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0xa00}, 0x2040) 3.495381072s ago: executing program 6 (id=3634): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r4, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) syz_init_net_socket$rose(0xb, 0x5, 0x0) 3.421129793s ago: executing program 6 (id=3635): ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000080)) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) fanotify_init(0xf00, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.143846251s ago: executing program 6 (id=3636): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100), 0x0, 0x0) shutdown(r1, 0x1) setrlimit(0x4, &(0x7f0000000080)={0x100, 0xffffffffffff18b2}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ftruncate(r0, 0x3) 2.891613137s ago: executing program 5 (id=3638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.795455849s ago: executing program 3 (id=3639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.067024138s ago: executing program 3 (id=3641): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) 1.699253947s ago: executing program 3 (id=3643): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r2 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) ioctl$MTDFILEMODE(r2, 0x4d13, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 1.372376726s ago: executing program 1 (id=3645): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r5, r3, 0x0, 0x100000000) 1.355809266s ago: executing program 0 (id=3646): ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000080)) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) fanotify_init(0xf00, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.21017793s ago: executing program 1 (id=3647): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) ioctl$MTDFILEMODE(r1, 0x4d13, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 927.874197ms ago: executing program 0 (id=3648): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a331800009c1100fe8000000000000001000000000000aaff0200000000000000000000000000014e1d4e20"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004000)=""/4086, 0xff6, 0x1, 0x0}, &(0x7f0000000480)=0x8a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000080)=' P\xccs|\xe2', 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 913.915297ms ago: executing program 1 (id=3649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) r6 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r6, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) 588.511676ms ago: executing program 3 (id=3650): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$ax25(0x27, 0x0, 0xcb) io_setup(0x2, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0xffe7, {0xffffffff, 0xbde, 0xb, 0x10000}}) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x227, &(0x7f0000000580)="$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") 501.287278ms ago: executing program 1 (id=3651): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) time(0x0) unshare(0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) madvise(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x11) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 476.543079ms ago: executing program 0 (id=3652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 158.397087ms ago: executing program 1 (id=3653): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pivot_root(0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) 420.22µs ago: executing program 0 (id=3654): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$FUSE(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2128}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x95, {}, {}, @raw32}], 0xffc8) 0s ago: executing program 1 (id=3655): r0 = syz_open_dev$video(&(0x7f0000000080), 0x6, 0x80280) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x9d1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12040) ppoll(&(0x7f00000000c0)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x8000, 0x2, 0x4, 0x2000, 0x9, {0x77359400}, {0x5, 0x1, 0x9, 0x84, 0xb4, 0x0, "78fac7fb"}, 0x4, 0x4, {}, 0x8}) kernel console output (not intermixed with test programs): 546][ T8923] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 366.495449][ T8932] netlink: 'syz.1.1355': attribute type 2 has an invalid length. [ 366.515364][ T8923] kvm: pic: non byte read [ 366.526877][ T8923] kvm: pic: level sensitive irq not supported [ 366.527408][ T8923] kvm: pic: non byte read [ 366.549282][ T8923] kvm: pic: level sensitive irq not supported [ 366.549425][ T8923] kvm: pic: non byte read [ 366.569819][ T8923] kvm: pic: level sensitive irq not supported [ 366.570388][ T8923] kvm: pic: non byte read [ 366.832120][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.840393][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.485571][ T8952] device syzkaller0 entered promiscuous mode [ 368.691316][ T8963] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 368.719661][ T8968] device syzkaller0 entered promiscuous mode [ 368.893959][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.903861][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.031205][ T8975] binder: 8974:8975 ioctl 4018620d 0 returned -22 [ 369.752833][ T8998] device syzkaller0 entered promiscuous mode [ 369.949943][ T9003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1375'. [ 370.304260][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.312486][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.334279][ T9003] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 370.485497][ T9003] [U] J"—E:ÀÆ" [ 370.840558][ T9031] device syzkaller0 entered promiscuous mode [ 371.017196][ T9040] loop5: detected capacity change from 0 to 256 [ 371.039489][ T26] audit: type=1800 audit(2000000034.170:23): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1385" name="local" dev="configfs" ino=50157 res=0 errno=0 [ 371.098302][ T26] audit: type=1800 audit(2000000034.200:24): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1385" name="scan_secs" dev="configfs" ino=50159 res=0 errno=0 [ 371.813884][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.822238][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.844237][ T9061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1391'. [ 371.882252][ T9062] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 371.893131][ T9062] [U] J"—E:ÀÆ" [ 372.155657][ T9066] netem: change failed [ 372.367729][ T9075] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 373.330647][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.496471][ T9081] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by ""[9081] [ 374.013875][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.022125][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.232801][ T9090] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1403'. [ 374.267728][ T9102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1406'. [ 374.312634][ T9102] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 374.358136][ T9102] [U] J"—E:ÀÆ" [ 376.014293][ T9119] netlink: 'syz.0.1411': attribute type 2 has an invalid length. [ 376.303178][ T9132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1419'. [ 376.334256][ T9132] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 376.350221][ T9132] [U] J"—E:ÀÆ" [ 376.610065][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.618472][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.013709][ T9146] kvm [9133]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 378.031959][ T9146] kvm [9133]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 378.236130][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.244384][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.612719][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.619180][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.692895][ T9174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.702445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.024309][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1434'. [ 381.283900][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.292130][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.460256][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.048530][ T9206] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1439'. [ 383.173813][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.182052][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.669069][ T9232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1451'. [ 385.780618][ T9236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1453'. [ 385.809710][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.817975][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.857217][ T9228] IPVS: lc: FWM 3 0x00000003 - no destination available [ 385.865062][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.955318][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'. [ 386.412093][ T9250] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 386.786474][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1463'. [ 386.992339][ T9271] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 387.009910][ T9271] [U] J"—E:ÀÆ" [ 387.028262][ T9268] xt_HMARK: spi-set and port-set can't be combined [ 387.553215][ T9282] device bridge3 entered promiscuous mode [ 387.571139][ T9282] team0: Port device bridge3 added [ 387.613810][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.622181][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.651753][ T9282] bridge0: port 5(team0) entered blocking state [ 387.659784][ T9282] bridge0: port 5(team0) entered disabled state [ 387.673513][ T9282] device team0 entered promiscuous mode [ 387.680229][ T9282] device team_slave_0 entered promiscuous mode [ 387.689908][ T9282] device team_slave_1 entered promiscuous mode [ 387.763988][ T9279] device syzkaller0 entered promiscuous mode [ 388.545348][ T9309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1476'. [ 388.607199][ T9309] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 388.636155][ T9309] [U] J"—E:ÀÆ" [ 389.093778][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.102110][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.550126][ T9336] overlayfs: failed to clone upperpath [ 389.589393][ T9339] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 390.212801][ T9356] xt_TCPMSS: Only works on TCP SYN packets [ 390.220473][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1491'. [ 390.504495][ T9339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.116602][ T26] audit: type=1800 audit(2000000054.160:25): pid=9367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1497" name="local" dev="configfs" ino=52361 res=0 errno=0 [ 391.389362][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.397632][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.499071][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.560300][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.570119][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.903715][ T9395] syz.5.1506 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 394.377145][ T9410] loop3: detected capacity change from 0 to 512 [ 394.674203][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.682402][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.065335][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.073849][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.424295][ T9410] EXT4-fs: error -4 creating inode table initialization thread [ 397.432981][ T9410] EXT4-fs (loop3): mount failed [ 399.179927][ T9448] overlayfs: failed to clone lowerpath [ 399.252685][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.260906][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.277253][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1510'. [ 399.356570][ T9452] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 399.386218][ T9452] [U] J"—E:ÀÆ" [ 400.010364][ T9469] tipc: Enabling of bearer rejected, already enabled [ 400.160685][ T9473] device syzkaller0 left promiscuous mode [ 400.284185][ T9473] tipc: Resetting bearer [ 400.929406][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.937678][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.228961][ T9496] netlink: 'syz.0.1539': attribute type 12 has an invalid length. [ 401.316365][ T9497] loop2: detected capacity change from 0 to 2048 [ 401.426330][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1542'. [ 401.441265][ T9497] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 401.471104][ T9499] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 401.492272][ T9499] [U] J"—E:ÀÆ" [ 401.655408][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.948653][ T4191] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 402.094185][ T9512] loop5: detected capacity change from 0 to 256 [ 402.113680][ T9512] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 402.148971][ T9512] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 402.532658][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.540911][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.558104][ T9522] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 402.829493][ T9525] device syzkaller0 entered promiscuous mode [ 402.846440][ T9525] tipc: Resetting bearer [ 403.315472][ T9535] smc: removing ib device syz0 [ 403.746139][ T9545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1557'. [ 403.772954][ T9545] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 403.858936][ T9545] [U] J"—E:ÀÆ" [ 404.384919][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.393133][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.438217][ T9559] netlink: 'syz.0.1562': attribute type 9 has an invalid length. [ 404.446367][ T9559] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1562'. [ 405.534064][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.542279][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.255162][ T9583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1570'. [ 408.219206][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.227454][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.422800][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1582'. [ 408.938428][ T9629] loop5: detected capacity change from 0 to 1024 [ 409.110978][ T9629] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 409.148847][ T9629] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 409.416068][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.424368][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.749959][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 410.795046][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.803386][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.866440][ T9651] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 410.894241][ T9651] [U] J"—E:ÀÆ" [ 411.154468][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.417616][ T9667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.602612][ T9667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.629814][ T9667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.029753][ T9685] loop5: detected capacity change from 0 to 8 [ 412.065368][ T9684] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 412.079613][ T9684] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 412.241220][ T9685] SQUASHFS error: Unable to read inode 0x11f [ 412.373294][ T9693] tipc: Enabling of bearer rejected, already enabled [ 412.710541][ T9703] loop2: detected capacity change from 0 to 512 [ 412.842787][ T9703] EXT4-fs (loop2): orphan cleanup on readonly fs [ 412.870297][ T9703] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.1613: bad orphan inode 15 [ 413.015684][ T9703] ext4_test_bit(bit=14, block=18) = 1 [ 413.021146][ T9703] is_bad_inode(inode)=0 [ 413.025475][ T9703] NEXT_ORPHAN(inode)=1023 [ 413.029851][ T9703] max_ino=32 [ 413.033084][ T9703] i_nlink=0 [ 413.062126][ T9703] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #15: comm syz.2.1613: corrupted xattr block 19 [ 413.144877][ T9703] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 413.159928][ T9703] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 413.543894][ C1] net_ratelimit: 12 callbacks suppressed [ 413.543982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.557913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.604241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.643876][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.652251][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.665216][ T4191] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /310/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 413.764378][ T4191] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 413.800471][ T9725] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 413.814310][ T4191] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 413.866596][ T9725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 414.298155][ T9735] loop5: detected capacity change from 0 to 256 [ 414.344507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.354128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.362314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.338017][ T9735] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 415.383881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.392143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.096077][ T4331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.305892][ T4331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.333660][ T9759] loop3: detected capacity change from 0 to 1024 [ 417.430139][ T4331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.613513][ T9762] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8547] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9762] [ 417.716393][ T4331] bond0: (slave netdevsim0): Releasing backup interface [ 417.769530][ T4331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.003318][ T9771] device syzkaller0 entered promiscuous mode [ 418.719023][ T9793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.846115][ T9793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.901657][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.910127][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 419.187001][ T4331] tipc: Disabling bearer [ 419.210049][ T4331] tipc: Left network mode [ 419.219011][ T154] net_ratelimit: 9 callbacks suppressed [ 419.219023][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.232833][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.289398][ T9768] chnl_net:caif_netlink_parms(): no params data found [ 420.151395][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 420.223424][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.256502][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.301906][ T9768] device bridge_slave_0 entered promiscuous mode [ 420.375081][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.397175][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.415592][ T9768] device bridge_slave_1 entered promiscuous mode [ 420.588644][ T9843] Cannot find add_set index 4 as target [ 420.624237][ T9768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.655842][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.664099][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.031661][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.079491][ T9768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.146732][ T9853] xt_cgroup: path and classid specified [ 421.341437][ T9864] ALSA: mixer_oss: invalid OSS volume '' [ 422.142461][ T9768] team0: Port device team_slave_0 added [ 422.186836][ T9768] team0: Port device team_slave_1 added [ 422.194107][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 422.264880][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.302511][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.375551][ T9768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.391392][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.399527][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.474011][ T9768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.745797][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.754071][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.906705][ T9768] device hsr_slave_0 entered promiscuous mode [ 422.944113][ T9768] device hsr_slave_1 entered promiscuous mode [ 422.976826][ T9768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.011889][ T9768] Cannot create hsr debugfs directory [ 423.244954][ T9892] syz.5.1668 (9892): drop_caches: 2 [ 423.622881][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'. [ 423.815083][ T9901] i2c i2c-0: delete_device: Can't find device in list [ 423.945466][ T9768] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.048020][ T9768] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 424.085558][ T9768] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 424.095151][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.103362][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.221841][ T9768] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 424.243794][ T9931] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 424.299545][ T9931] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 424.387222][ T1325] Bluetooth: hci2: command 0x040f tx timeout [ 424.577977][ T4331] device hsr_slave_0 left promiscuous mode [ 424.610025][ T4331] device hsr_slave_1 left promiscuous mode [ 424.633762][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.658362][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.695783][ T4331] device bridge_slave_1 left promiscuous mode [ 424.734063][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.823073][ T4331] device bridge_slave_0 left promiscuous mode [ 424.860240][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.122580][ T4331] device bond0 left promiscuous mode [ 425.136719][ T4331] device bond_slave_0 left promiscuous mode [ 425.143267][ T4331] device bond_slave_1 left promiscuous mode [ 425.213444][ T4331] device veth1_macvtap left promiscuous mode [ 425.244443][ T4331] device veth0_macvtap left promiscuous mode [ 425.282633][ T4331] device veth1_vlan left promiscuous mode [ 425.289964][ T4331] device veth0_vlan left promiscuous mode [ 425.344534][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.352822][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.684555][ T4331] bond3 (unregistering): Released all slaves [ 425.796501][ T4331] bond1 (unregistering): (slave bond2): Releasing backup interface [ 425.813820][ T4331] device bond2 left promiscuous mode [ 425.829614][ T4331] bond2 (unregistering): Released all slaves [ 425.872605][ T4331] bond1 (unregistering): Released all slaves [ 425.931815][ T9972] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 425.945885][ T9972] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 426.230485][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 426.250530][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 426.266788][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.294947][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.429888][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 426.452553][ T4331] bond0 (unregistering): Released all slaves [ 426.689675][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.697916][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.790792][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'. [ 428.715122][ T9768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.789681][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 428.820636][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 428.841700][ T9768] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.902952][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 428.927103][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 428.954502][ T9998] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.961685][ T9998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.970639][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.978960][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.040036][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.076799][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.100495][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.126108][ T9998] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.133352][ T9998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.158315][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.203017][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.226865][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.243240][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.262887][ T9768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.292736][ T9768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.311281][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.322934][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.335866][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.346741][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.355854][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.366583][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.375778][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.409855][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.860344][T10030] loop5: detected capacity change from 0 to 256 [ 429.894727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.902490][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.078809][ T9768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.117355][T10030] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 430.154157][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.162515][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.351950][ T4684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.384805][T10030] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 430.532733][T10045] tipc: Enabling of bearer rejected, already enabled [ 430.894269][T10057] device syzkaller0 entered promiscuous mode [ 431.034352][T10069] Non-string source [ 431.039296][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.337790][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.398077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.408853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.457544][ T9768] device veth0_vlan entered promiscuous mode [ 431.516337][ T9768] device veth1_vlan entered promiscuous mode [ 431.537685][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.545973][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.692951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.709441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.717943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 431.726813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 431.859632][ T9768] device veth0_macvtap entered promiscuous mode [ 431.926483][T10087] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 431.936743][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 431.981789][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.025789][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 432.154828][ T9768] device veth1_macvtap entered promiscuous mode [ 432.232587][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.243279][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.255372][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.267084][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.280646][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.294724][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 432.306783][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.316649][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.428284][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.448103][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.459628][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.489944][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.523741][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.559534][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.613421][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.644918][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.672440][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.675690][T10105] loop3: detected capacity change from 0 to 256 [ 432.708070][ T9768] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.730256][ T9768] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.783624][ T9768] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.803214][ T9768] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.822426][T10112] Non-string source [ 432.844170][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.852585][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.267777][T10105] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 433.631366][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.855094][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.867200][T10129] Cannot find add_set index 4 as target [ 433.929681][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.940767][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.010191][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.079473][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 434.130684][T10141] xt_cgroup: path and classid specified [ 434.633910][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.642357][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.953878][T10158] netlink: 'syz.6.1634': attribute type 1 has an invalid length. [ 434.983762][T10158] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 435.091628][T10158] device bridge1 entered promiscuous mode [ 436.227971][T10199] loop6: detected capacity change from 0 to 256 [ 436.235027][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.243290][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.344344][T10199] exfat: Deprecated parameter 'utf8' [ 436.425526][T10199] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 437.613800][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.622040][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.063838][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.072068][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.350861][T10267] loop5: detected capacity change from 0 to 16 [ 439.945807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.954075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.019126][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.029229][ T4684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.043598][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.117362][T10267] erofs: (device loop5): mounted with root inode @ nid 36. [ 440.375448][T10267] erofs: (device loop5): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 441.425120][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.433719][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.135636][T10326] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 442.175245][T10326] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 442.665409][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.673671][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.045972][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.054209][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.065397][T10357] netlink: 'syz.5.1796': attribute type 11 has an invalid length. [ 444.392253][T10374] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 444.411888][T10366] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 444.432768][T10366] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 444.460515][T10376] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 444.541848][T10374] device bridge2 entered promiscuous mode [ 444.571870][T10374] bond3: (slave bridge2): making interface the new active one [ 444.584661][T10374] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 445.501900][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.510201][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.930219][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.938490][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.118795][T10433] overlayfs: failed to clone upperpath [ 447.173302][T10433] overlayfs: failed to clone upperpath [ 448.014697][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1826'. [ 448.062365][T10455] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 448.079321][T10455] [U] J"—e:ÀÆ" [ 448.138340][T10256] Set syz1 is full, maxelem 65536 reached [ 448.493207][T10460] loop3: detected capacity change from 0 to 4096 [ 448.516865][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.525126][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.620793][T10462] loop6: detected capacity change from 0 to 512 [ 448.916482][T10462] EXT4-fs (loop6): Test dummy encryption mode enabled [ 449.205570][T10468] i2c i2c-0: delete_device: Can't find device in list [ 449.348161][T10462] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.6.1828: corrupted xattr block 95 [ 449.370508][T10462] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 449.386900][T10462] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1828: bg 0: block 7: invalid block bitmap [ 449.393221][T10470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.415882][T10462] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 449.458200][T10462] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2925: inode #11: comm syz.6.1828: corrupted xattr block 95 [ 449.501270][T10462] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 449.523046][T10462] EXT4-fs (loop6): 1 orphan inode deleted [ 449.535941][T10462] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 449.545956][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.633964][ T26] audit: type=1800 audit(2000000006.190:26): pid=10462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1828" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 449.676235][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1836'. [ 450.035333][T10491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1839'. [ 450.113785][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.122006][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.314289][T10515] i2c i2c-0: delete_device: Can't find device in list [ 451.883876][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.892134][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.103953][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.112230][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.741827][T10584] device syzkaller0 entered promiscuous mode [ 454.424393][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.432647][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.883820][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.892071][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.960733][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1881'. [ 457.424130][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.432406][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.786182][T10656] loop6: detected capacity change from 0 to 16 [ 458.322969][T10656] erofs: (device loop6): mounted with root inode @ nid 36. [ 458.623676][T10656] erofs: (device loop6): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 459.051942][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.060194][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.290430][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.302151][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.979684][T10687] loop3: detected capacity change from 0 to 128 [ 460.274883][T10700] attempt to access beyond end of device [ 460.274883][T10700] loop3: rw=2049, want=681, limit=128 [ 460.304175][ T4328] net_ratelimit: 7 callbacks suppressed [ 460.304196][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.318112][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.708357][ T4241] attempt to access beyond end of device [ 460.708357][ T4241] loop3: rw=1, want=151, limit=128 [ 460.750152][ T4241] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 462.214126][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.222351][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.764086][T10727] loop3: detected capacity change from 0 to 128 [ 463.904507][T10727] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 463.993720][T10727] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.294943][T10744] kvm [10742]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 464.359845][T10760] device syzkaller0 entered promiscuous mode [ 464.373251][T10744] kvm [10742]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 464.853809][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.862056][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.921245][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.929533][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.937748][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.945942][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.982448][T10792] loop3: detected capacity change from 0 to 1024 [ 466.126352][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1919'. [ 466.544509][ T4241] net_ratelimit: 4 callbacks suppressed [ 466.544531][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.558507][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.623664][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 467.891741][T10807] loop5: detected capacity change from 0 to 131072 [ 468.681789][T10815] loop6: detected capacity change from 0 to 256 [ 468.993950][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.002193][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.317406][T10833] device syzkaller0 entered promiscuous mode [ 469.439501][T10846] device syzkaller0 entered promiscuous mode [ 469.592041][T10852] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1936'. [ 470.119103][T10865] loop5: detected capacity change from 0 to 1024 [ 470.260721][T10865] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 470.333217][T10865] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.379009][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.387360][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.672639][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.680950][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.689171][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.697395][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.735274][T10919] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 471.763647][T10919] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 472.004410][T10132] net_ratelimit: 4 callbacks suppressed [ 472.004429][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.018646][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.007613][T10946] device syzkaller0 entered promiscuous mode [ 474.183987][T10957] device syzkaller0 entered promiscuous mode [ 474.231759][T10957] tipc: Enabled bearer , priority 0 [ 474.285205][T10956] tipc: Resetting bearer [ 474.690741][T10956] tipc: Disabling bearer [ 474.735885][T10967] xt_TCPMSS: Only works on TCP SYN packets [ 474.947570][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.955816][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.991393][T10970] netlink: 'syz.5.1963': attribute type 10 has an invalid length. [ 475.291128][T10970] team0: Device veth1_vlan failed to register rx_handler [ 475.607665][T10978] loop3: detected capacity change from 0 to 40427 [ 475.681888][T10978] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 475.690017][T10978] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 475.702246][T10978] F2FS-fs (loop3): invalid crc value [ 475.766362][T10978] F2FS-fs (loop3): Found nat_bits in checkpoint [ 475.842664][T10978] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 475.850237][T10978] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 476.581434][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.589674][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.597884][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.606037][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.615640][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.623823][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.781459][T10999] device syzkaller0 entered promiscuous mode [ 477.234318][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 477.244161][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 477.254909][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 477.264167][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 477.273262][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 478.269719][T11029] device bridge0 entered promiscuous mode [ 478.425057][T11029] team0: Port device bridge0 added [ 479.283716][T11032] bridge0: port 1(team0) entered blocking state [ 479.290049][T11032] bridge0: port 1(team0) entered disabled state [ 479.307531][T10132] net_ratelimit: 4 callbacks suppressed [ 479.307548][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.321817][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.538012][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.546298][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.980060][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.988316][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.108532][T11091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2004'. [ 482.189788][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.198051][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.206287][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.214479][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.314797][T11101] loop3: detected capacity change from 0 to 512 [ 482.380272][T11101] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 482.536676][T11101] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 482.553066][T11101] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.162439][T11137] device syzkaller0 entered promiscuous mode [ 484.269743][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2017'. [ 485.043380][T10722] net_ratelimit: 6 callbacks suppressed [ 485.043398][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.057745][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.649472][T11173] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2030'. [ 486.827904][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.836166][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.107373][T11216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2043'. [ 488.116640][T11239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2053'. [ 488.137189][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.145391][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.153614][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.161740][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.173421][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.181701][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.353457][T11251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2057'. [ 488.445060][T11248] loop6: detected capacity change from 0 to 2048 [ 488.779276][T11258] autofs4:pid:11258:autofs_fill_super: called with bogus options [ 488.989490][T11269] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 489.837449][T11289] hub 8-0:1.0: USB hub found [ 489.845844][T11289] hub 8-0:1.0: 1 port detected [ 489.929911][T11293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2070'. [ 490.294328][T11282] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 490.322745][T11282] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 490.944782][T10722] net_ratelimit: 6 callbacks suppressed [ 490.944803][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.958826][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.073622][T11336] netlink: 'syz.5.2084': attribute type 21 has an invalid length. [ 492.082033][T11336] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2084'. [ 492.683996][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.692328][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.760812][T11344] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 492.855410][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 492.868308][T11343] device bridge_slave_1 left promiscuous mode [ 492.874980][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.061331][T11352] loop6: detected capacity change from 0 to 512 [ 493.127107][T11343] device bridge_slave_0 left promiscuous mode [ 493.133462][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.198009][T11352] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 493.272608][T11352] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 493.311910][T11352] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.2092: orphan file block 0: bad magic [ 493.336211][T11352] EXT4-fs (loop6): mount failed [ 493.818937][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.827215][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.835438][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.843634][ T9998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.852751][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.860978][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.076318][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2100'. [ 494.085410][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2100'. [ 494.248231][T11384] netlink: 'syz.5.2100': attribute type 4 has an invalid length. [ 494.256054][T11384] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2100'. [ 494.269456][T11384] .`: renamed from bond0 [ 494.744766][T11395] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9768] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11395] [ 494.762466][T11395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.187699][T11411] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 495.806216][T11430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2114'. [ 495.838970][T11430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2114'. [ 495.890525][T11430] device team0 entered promiscuous mode [ 495.913627][T11430] device team_slave_0 entered promiscuous mode [ 495.921564][T11430] device team_slave_1 entered promiscuous mode [ 495.953684][T11430] device bond0 entered promiscuous mode [ 495.971485][T11430] device bond_slave_0 entered promiscuous mode [ 495.986411][T11430] device bond_slave_1 entered promiscuous mode [ 496.008783][T11430] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 496.027218][T10722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 496.600184][T11439] Invalid ELF header magic: != ELF [ 496.946857][ T4296] net_ratelimit: 6 callbacks suppressed [ 496.946879][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.960783][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.397017][T11447] overlayfs: failed to clone upperpath [ 498.199998][ T26] audit: type=1326 audit(2000000054.760:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 498.224551][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.232883][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.275796][ T26] audit: type=1326 audit(2000000054.760:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 498.330847][ T26] audit: type=1326 audit(2000000054.760:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 498.370145][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x7fe6000000de [ 498.408322][T11473] kvm [11471]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 498.440111][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xffff7fda000000a8 [ 498.461220][ T26] audit: type=1326 audit(2000000054.780:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 498.494978][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xffee0000002a, nop [ 498.519188][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xffe400000014 [ 498.548279][ T26] audit: type=1326 audit(2000000054.780:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 498.572486][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.588306][T11473] kvm [11471]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 498.609318][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x7ff500000010 [ 499.167839][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xffee0000002a, nop [ 499.464811][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.473069][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.481349][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.489601][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.499149][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.507379][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.832241][ T26] audit: type=1326 audit(2000000054.780:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 499.863564][ T26] audit: type=1326 audit(2000000054.780:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 499.894150][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xffe400000014 [ 499.914153][T11473] kvm [11471]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 499.924874][ T26] audit: type=1326 audit(2000000054.780:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7de395ccab code=0x7ffc0000 [ 499.951675][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x7ff500000010 [ 499.973191][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xffee0000002a, nop [ 499.994087][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xffe400000014 [ 500.013908][ T26] audit: type=1326 audit(2000000054.780:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7de395ccab code=0x7ffc0000 [ 500.126406][T11473] kvm [11471]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 500.163054][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x7ff500000010 [ 500.195809][ T26] audit: type=1326 audit(2000000054.780:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.6.2131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7de395ccab code=0x7ffc0000 [ 500.234660][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xffee0000002a, nop [ 500.318127][T11473] kvm [11471]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xffe400000014 [ 500.348662][T11473] kvm [11471]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 501.021908][T11516] [U]  [ 501.387221][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.393616][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.543202][T11524] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 502.684047][ T4296] net_ratelimit: 6 callbacks suppressed [ 502.684065][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.698029][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.665608][T11554] usb3503 0-0008: unknown mode is requested [ 503.671903][T11554] usb3503 0-0008: usb3503_probe: probed in standby mode [ 503.682699][T11554] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 503.692910][T11554] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 504.029973][T11565] loop5: detected capacity change from 0 to 1024 [ 504.435746][T11565] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 504.534327][T11565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 504.561059][T11565] System zones: 0-1, 3-12 [ 504.585482][T11565] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,errors=remount-ro,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,. Quota mode: none. [ 504.784377][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.792607][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.278185][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.286490][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.294767][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.302949][T10722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.313760][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.321986][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.579062][T11593] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.466095][T11606] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 506.725098][T11608] xt_connbytes: Forcing CT accounting to be enabled [ 506.731812][T11608] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 507.644628][T11629] netlink: 532 bytes leftover after parsing attributes in process `syz.1.2181'. [ 507.849498][T11615] kvm [11614]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 508.034449][T11615] kvm [11614]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 508.047105][T11615] kvm [11614]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 508.130454][ T4328] net_ratelimit: 4 callbacks suppressed [ 508.130474][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.144317][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.437095][T11653] xt_TCPMSS: Only works on TCP SYN packets [ 509.247763][T11662] loop5: detected capacity change from 0 to 32768 [ 509.320797][T11662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2195 (11662) [ 509.675704][T11662] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 509.684774][T11662] BTRFS info (device loop5): use zlib compression, level 3 [ 509.692052][T11662] BTRFS info (device loop5): turning on sync discard [ 509.698975][T11662] BTRFS info (device loop5): using free space tree [ 509.705840][T11662] BTRFS info (device loop5): has skinny extents [ 509.743999][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.752231][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.407381][T11662] BTRFS info (device loop5): enabling ssd optimizations [ 510.957719][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 510.957793][ T26] audit: type=1800 audit(2000000067.510:98): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2195" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 511.006407][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.014644][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.022877][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.031118][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.044301][T11728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.052660][T11728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.820161][T11791] device syzkaller0 entered promiscuous mode [ 513.662810][T11806] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 513.922127][T11822] device syzkaller0 entered promiscuous mode [ 513.939477][T11822] tipc: Started in network mode [ 513.948080][T11822] tipc: Node identity f2514634b232, cluster identity 4711 [ 513.980571][T11822] tipc: Enabled bearer , priority 0 [ 514.032700][T11822] tipc: Resetting bearer [ 514.214080][ T4238] net_ratelimit: 59 callbacks suppressed [ 514.214101][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.228134][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.353715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.362051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.372115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.419466][T11827] loop3: detected capacity change from 0 to 40427 [ 514.429217][T11820] tipc: Resetting bearer [ 514.459373][T11820] tipc: Disabling bearer [ 514.476397][T11825] tipc: Enabled bearer , priority 10 [ 514.809558][T11827] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 514.817505][T11827] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 514.924489][T11827] F2FS-fs (loop3): invalid crc value [ 514.963028][T11827] F2FS-fs (loop3): Found nat_bits in checkpoint [ 515.025120][T11827] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 515.032298][T11827] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 515.529493][T11853] device syzkaller0 entered promiscuous mode [ 515.735885][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.744175][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.108358][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b0de000: rx timeout, send abort [ 516.192429][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b0de000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 516.347899][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.356153][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.364388][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.142072][T11888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2257'. [ 520.157905][T10132] net_ratelimit: 9 callbacks suppressed [ 520.157924][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.171790][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.409205][T11897] loop3: detected capacity change from 0 to 512 [ 521.424097][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.432347][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.865674][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.873924][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.882084][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.890298][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.378846][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.387023][ T4685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.710116][T11897] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 523.607284][T11931] tipc: Enabled bearer , priority 10 [ 526.223866][T11938] net_ratelimit: 4 callbacks suppressed [ 526.223886][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.238041][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.626661][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.634963][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.643098][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.651315][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.673857][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.682254][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.691475][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.884646][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.300059][T11981] loop5: detected capacity change from 0 to 512 [ 528.328224][T11980] tipc: Enabled bearer , priority 0 [ 528.345067][T11980] device syzkaller0 entered promiscuous mode [ 528.380497][T11980] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 528.420891][T11980] tipc: Resetting bearer [ 528.494995][T11981] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 528.510769][T11975] tipc: Resetting bearer [ 528.563670][T11975] tipc: Disabling bearer [ 528.598671][T11981] EXT4-fs error (device loop5): ext4_init_orphan_info:621: comm syz.5.2289: orphan file block 0: bad magic [ 528.632897][T11981] EXT4-fs (loop5): mount failed [ 528.671345][ T26] audit: type=1326 audit(2000000085.230:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.1.2292" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd97cf2019 code=0x0 [ 529.029992][T11993] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 530.742945][T12040] tipc: Enabled bearer , priority 0 [ 530.899449][T12040] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 530.938065][T12040] tipc: Resetting bearer [ 530.988126][T12044] device syzkaller0 entered promiscuous mode [ 531.000126][T12044] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 531.079222][T12038] tipc: Resetting bearer [ 531.272042][T12038] tipc: Disabling bearer [ 531.778973][T12074] kcapi: manufacturer command 4294967295 unknown. [ 532.851728][T12109] binder: BINDER_SET_CONTEXT_MGR already set [ 532.858008][T12109] binder: 12104:12109 ioctl 4018620d 200000004a80 returned -16 [ 536.000357][ T26] audit: type=1326 audit(2000000092.560:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd97cf2019 code=0x7ffc0000 [ 536.372327][ T26] audit: type=1326 audit(2000000092.590:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd97cf2019 code=0x7ffc0000 [ 536.527125][ T26] audit: type=1326 audit(2000000092.590:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd97cf2019 code=0x7ffc0000 [ 536.551440][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.648294][ T26] audit: type=1326 audit(2000000092.590:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd97cf1cab code=0x7ffc0000 [ 536.675386][ T26] audit: type=1326 audit(2000000092.590:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd97cf1cab code=0x7ffc0000 [ 537.650533][T12170] loop5: detected capacity change from 0 to 256 [ 537.697702][T12170] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 537.743129][ T26] audit: type=1326 audit(2000000092.590:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd97cf1cab code=0x7ffc0000 [ 537.767577][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.024312][ T26] audit: type=1326 audit(2000000092.590:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd97cf1cab code=0x7ffc0000 [ 538.048549][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.126106][ T26] audit: type=1326 audit(2000000092.590:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd97cf1cab code=0x7ffc0000 [ 538.203784][ T26] audit: type=1326 audit(2000000092.590:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd97cf1cab code=0x7ffc0000 [ 538.295977][ T26] audit: type=1326 audit(2000000092.590:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.1.2343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd97cf1cab code=0x7ffc0000 [ 538.320103][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.362275][T12185] loop6: detected capacity change from 0 to 2048 [ 538.704056][T12193] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.913052][T12199] netlink: 'syz.5.2364': attribute type 10 has an invalid length. [ 539.006416][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.013981][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.150261][T12199] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.157469][T12199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.166132][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.173276][T12199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.346271][T12199] .`: (slave bridge0): Enslaving as an active interface with an up link [ 539.354928][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2364'. [ 539.394601][T12202] device bridge_slave_1 left promiscuous mode [ 540.234141][T12202] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.813987][T12202] device bridge_slave_0 left promiscuous mode [ 540.820297][T12202] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.879881][T12202] .`: (slave bridge0): Releasing backup interface [ 541.387687][T12247] overlayfs: failed to clone upperpath [ 541.503860][T12257] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 541.513101][T12257] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 541.590420][T12257] loop3: detected capacity change from 0 to 128 [ 542.516026][T12269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (39424 ns). Using initial count to start timer. [ 543.238203][T12287] xt_TCPMSS: Only works on TCP SYN packets [ 543.333201][T12283] netlink: 'syz.0.2392': attribute type 29 has an invalid length. [ 543.880947][T12303] loop3: detected capacity change from 0 to 8192 [ 544.423775][T11760] Bluetooth: hci2: command 0x0406 tx timeout [ 544.759095][T12315] device syzkaller0 entered promiscuous mode [ 544.869753][T12313] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 545.695997][T12336] loop5: detected capacity change from 0 to 4096 [ 545.764901][T12336] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 546.018146][T12336] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 546.064050][T12336] ntfs3: loop5: Failed to load $Extend. [ 546.140833][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 546.140851][ T26] audit: type=1326 audit(2000000102.700:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 546.171380][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.215623][ T26] audit: type=1326 audit(2000000102.770:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838dcab code=0x7ffc0000 [ 546.239999][ T26] audit: type=1326 audit(2000000102.770:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838dcab code=0x7ffc0000 [ 546.265671][ T26] audit: type=1326 audit(2000000102.770:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838dcab code=0x7ffc0000 [ 546.314538][ T26] audit: type=1326 audit(2000000102.770:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838dcab code=0x7ffc0000 [ 546.476245][ T26] audit: type=1326 audit(2000000102.770:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838dcab code=0x7ffc0000 [ 546.577279][T11751] Bluetooth: hci2: command 0x0405 tx timeout [ 546.592430][ T26] audit: type=1326 audit(2000000102.770:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838dcab code=0x7ffc0000 [ 546.708991][ T26] audit: type=1326 audit(2000000102.770:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838dcab code=0x7ffc0000 [ 546.799485][ T26] audit: type=1326 audit(2000000102.770:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838dcab code=0x7ffc0000 [ 546.906010][ T26] audit: type=1326 audit(2000000102.770:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.0.2410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838dcab code=0x7ffc0000 [ 546.981972][T12362] tipc: Enabling of bearer rejected, already enabled [ 547.887463][T12393] device syzkaller0 entered promiscuous mode [ 547.908306][T12398] ip6t_srh: unknown srh match flags FF3F [ 549.017888][T12411] device syzkaller0 entered promiscuous mode [ 550.543325][T12436] device syzkaller0 entered promiscuous mode [ 550.719341][T12455] loop3: detected capacity change from 0 to 64 [ 551.610294][T12467] Invalid ELF header magic: != ELF [ 552.305733][T12478] loop6: detected capacity change from 0 to 512 [ 553.008395][T12482] device syzkaller0 entered promiscuous mode [ 553.656738][T12505] hugetlbfs: syz.1.2471 (12505): Using mlock ulimits for SHM_HUGETLB is deprecated [ 555.600000][T12574] loop3: detected capacity change from 0 to 2048 [ 555.749647][T12579] device syzkaller0 entered promiscuous mode [ 555.786899][T12574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.024396][T12585] bond0: (slave netdevsim0): Releasing backup interface [ 556.155331][T12585] bond1: (slave macvlan2): Releasing active interface [ 556.287078][T12585] team0: Port device bridge0 removed [ 557.142083][T12604] device vlan0 entered promiscuous mode [ 557.419572][T12612] device syzkaller0 entered promiscuous mode [ 558.684087][T12650] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2522'. [ 559.119061][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'. [ 560.976708][T12698] loop5: detected capacity change from 0 to 16 [ 561.128484][T12698] erofs: (device loop5): mounted with root inode @ nid 36. [ 562.190556][T12730] loop3: detected capacity change from 0 to 1024 [ 562.499089][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2552'. [ 562.500975][T12730] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 563.660746][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.667860][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.699102][T12762] loop5: detected capacity change from 0 to 40427 [ 564.847397][T12762] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 564.855241][T12762] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 564.914944][T12762] F2FS-fs (loop5): Found nat_bits in checkpoint [ 564.955908][T12762] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 564.962989][T12762] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 565.781691][T12783] device wg0 entered promiscuous mode [ 565.853806][T12783] team0: Device wg0 is of different type [ 565.992664][T12783] net_ratelimit: 5 callbacks suppressed [ 565.992685][T12783] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 567.471724][T12815] VFS: file-max limit 0 reached [ 569.172706][T12834] tipc: Enabling of bearer rejected, already enabled [ 569.421148][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2585'. [ 569.526846][T12846] loop3: detected capacity change from 0 to 128 [ 569.863091][T12846] trusted_key: encrypted_key: insufficient parameters specified [ 570.225092][T12850] loop5: detected capacity change from 0 to 8192 [ 570.230127][T12853] loop6: detected capacity change from 0 to 1764 [ 570.321297][T12859] loop3: detected capacity change from 0 to 2048 [ 574.269380][T12888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2603'. [ 574.744392][ T4685] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 575.020169][T12903] loop5: detected capacity change from 0 to 128 [ 575.169096][T12903] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 575.239487][ T4685] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 575.258682][ T4685] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.300792][ T4685] usb 4-1: config 0 has no interface number 0 [ 577.297839][ T4685] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 577.321439][ T4685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.358355][ T4685] usb 4-1: Product: syz [ 577.385739][ T4685] usb 4-1: Manufacturer: syz [ 577.407883][ T4685] usb 4-1: SerialNumber: syz [ 577.643160][ T4685] usb 4-1: config 0 descriptor?? [ 577.691422][ T4685] usb 4-1: can't set config #0, error -71 [ 577.721778][ T4685] usb 4-1: USB disconnect, device number 8 [ 578.291820][T12930] device syzkaller0 entered promiscuous mode [ 578.801306][T12932] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2612'. [ 580.356285][T12942] loop3: detected capacity change from 0 to 256 [ 580.406598][T12940] configfs-gadget gadget: uvc: uvc_function_bind() [ 580.522254][T12940] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 580.609833][T12940] udc dummy_udc.0: failed to start g1: -22 [ 582.747994][T12975] ksmbd: Unknown IPC event: 3, ignore. [ 586.144512][T12989] fuse: root generation should be zero [ 586.439359][T13002] loop5: detected capacity change from 0 to 2048 [ 586.578128][T13002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.488853][T13023] loop5: detected capacity change from 0 to 512 [ 587.756118][T13023] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 587.809051][T13023] UDF-fs: Scanning with blocksize 512 failed [ 587.912145][T13023] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 587.933647][T13023] UDF-fs: Scanning with blocksize 1024 failed [ 587.970548][T13023] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 587.985510][T13023] UDF-fs: Scanning with blocksize 2048 failed [ 588.034955][T13023] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 588.660301][T13023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.983403][T13103] loop3: detected capacity change from 0 to 8192 [ 592.379899][T13115] loop6: detected capacity change from 0 to 128 [ 594.925050][T13157] loop3: detected capacity change from 0 to 512 [ 595.000578][T13157] EXT4-fs (loop3): Ignoring removed nobh option [ 595.023749][T13157] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 595.265750][T13157] EXT4-fs (loop3): 1 truncate cleaned up [ 595.271469][T13157] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 595.714766][T13173] futex_wake_op: syz.6.2699 tries to shift op by 144; fix this program [ 597.178750][T13193] overlayfs: conflicting lowerdir path [ 598.010126][T13210] device syzkaller0 entered promiscuous mode [ 598.157755][T13213] device syzkaller0 entered promiscuous mode [ 598.627195][T13221] loop3: detected capacity change from 0 to 32768 [ 599.580705][T13221] XFS (loop3): Mounting V5 Filesystem [ 600.569594][T13221] XFS (loop3): Ending clean mount [ 600.674106][T13221] XFS (loop3): Quotacheck needed: Please wait. [ 601.041657][T13262] loop5: detected capacity change from 0 to 8192 [ 601.070136][T13221] XFS (loop3): Quotacheck: Done. [ 602.056381][ T4189] XFS (loop3): Unmounting Filesystem [ 605.003787][T11751] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 605.474012][T11751] usb 6-1: Using ep0 maxpacket: 16 [ 605.602767][T11751] usb 6-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 605.636839][T11751] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.403407][T11751] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.413109][T11751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.563650][T11751] usb 6-1: Product: syz [ 606.583560][T11751] usb 6-1: Manufacturer: syz [ 606.783547][T11751] usb 6-1: SerialNumber: syz [ 607.234014][T11751] usb 6-1: 0:2 : does not exist [ 607.324583][T11751] usb 6-1: USB disconnect, device number 2 [ 607.653023][T13328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2749'. [ 607.867571][ T4588] udevd[4588]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.309429][T13336] fuse: Unknown parameter '0x0000000000000004' [ 609.056357][T13350] device syzkaller0 entered promiscuous mode [ 609.144335][T13347] loop3: detected capacity change from 0 to 8192 [ 609.342445][T13361] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2762'. [ 610.341841][T13375] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2766'. [ 611.668129][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2776'. [ 611.995327][T13406] loop3: detected capacity change from 0 to 8192 [ 613.151387][T13424] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 613.324497][T13429] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 613.443302][T13424] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 613.494426][T13429] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 613.510414][T13436] netlink: 'syz.3.2784': attribute type 4 has an invalid length. [ 613.526806][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2788'. [ 613.556770][T13437] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 613.714319][T13424] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 613.795185][T13424] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 613.913111][T13441] device syzkaller0 entered promiscuous mode [ 614.167069][T13444] device syzkaller0 entered promiscuous mode [ 615.750017][T13473] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2801'. [ 616.800759][T13492] loop5: detected capacity change from 0 to 32768 [ 617.627153][T13492] XFS (loop5): Mounting V5 Filesystem [ 617.713401][T13511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2814'. [ 617.775317][T13492] XFS (loop5): Ending clean mount [ 617.792216][T13492] XFS (loop5): Quotacheck needed: Please wait. [ 617.856342][T13492] XFS (loop5): Quotacheck: Done. [ 618.000309][ T26] kauditd_printk_skb: 142 callbacks suppressed [ 618.000326][ T26] audit: type=1800 audit(2000000002.040:296): pid=13492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2809" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 618.176819][ T8547] XFS (loop5): Unmounting Filesystem [ 619.972157][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'. [ 620.066566][T13545] loop6: detected capacity change from 0 to 64 [ 620.126445][T13546] tipc: Enabling of bearer rejected, already enabled [ 620.193296][T13548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2828'. [ 621.490585][T13561] syz.5.2832 (13561): drop_caches: 2 [ 622.056111][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2840'. [ 622.455786][T13597] loop6: detected capacity change from 0 to 8 [ 622.472086][T13573] loop5: detected capacity change from 0 to 8192 [ 623.671459][T13607] loop3: detected capacity change from 0 to 2048 [ 623.753256][T13607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.354010][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.360360][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.879186][T13637] CIFS: Attempting to mount \\127.0.0.1\share [ 625.481751][T13646] syz.6.2862 (13646): drop_caches: 2 [ 625.615519][T13637] CIFS: VFS: Error connecting to socket. Aborting operation. [ 625.644086][T13637] CIFS: VFS: cifs_mount failed w/return code = -4 [ 625.852062][T13650] loop6: detected capacity change from 0 to 8192 [ 626.190491][T13660] device syzkaller0 entered promiscuous mode [ 627.642498][T13689] netlink: 'syz.1.2877': attribute type 29 has an invalid length. [ 627.795069][T13689] netlink: 'syz.1.2877': attribute type 29 has an invalid length. [ 627.842481][T13691] netlink: 'syz.1.2877': attribute type 29 has an invalid length. [ 627.924417][T13692] loop6: detected capacity change from 0 to 32768 [ 628.149737][T13695] device syzkaller0 entered promiscuous mode [ 628.243805][T13692] XFS (loop6): Mounting V5 Filesystem [ 628.319981][T13692] XFS (loop6): Ending clean mount [ 628.328056][T13692] XFS (loop6): Quotacheck needed: Please wait. [ 628.393335][T13692] XFS (loop6): Quotacheck: Done. [ 628.704668][ T26] audit: type=1800 audit(2000000001.490:297): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2878" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0 [ 628.869931][ T9768] XFS (loop6): Unmounting Filesystem [ 628.931914][T13722] loop3: detected capacity change from 0 to 256 [ 629.017398][T13722] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 629.038847][ T26] audit: type=1800 audit(2000000001.940:298): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2887" name="file1" dev="loop3" ino=1048704 res=0 errno=0 [ 629.103700][T13722] attempt to access beyond end of device [ 629.103700][T13722] loop3: rw=16777216, want=6471, limit=256 [ 629.154633][T13722] attempt to access beyond end of device [ 629.154633][T13722] loop3: rw=16777216, want=11351, limit=256 [ 629.175167][T13722] attempt to access beyond end of device [ 629.175167][T13722] loop3: rw=16777216, want=13399, limit=256 [ 629.195242][T13722] attempt to access beyond end of device [ 629.195242][T13722] loop3: rw=16777216, want=15447, limit=256 [ 629.221669][T13722] attempt to access beyond end of device [ 629.221669][T13722] loop3: rw=16777216, want=18951, limit=256 [ 629.248303][T13722] attempt to access beyond end of device [ 629.248303][T13722] loop3: rw=16777216, want=22559, limit=256 [ 629.288754][T13722] attempt to access beyond end of device [ 629.288754][T13722] loop3: rw=16777216, want=25775, limit=256 [ 629.317630][T13722] attempt to access beyond end of device [ 629.317630][T13722] loop3: rw=16777216, want=29871, limit=256 [ 629.339784][T13722] attempt to access beyond end of device [ 629.339784][T13722] loop3: rw=16777216, want=32943, limit=256 [ 629.778269][T13731] netlink: 'syz.5.2890': attribute type 4 has an invalid length. [ 630.487221][T13746] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 631.103730][T11751] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 631.313582][T11751] usb 7-1: device descriptor read/64, error -71 [ 631.461422][T13754] device syzkaller0 entered promiscuous mode [ 631.591221][T11751] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 631.803671][T11751] usb 7-1: device descriptor read/64, error -71 [ 632.152872][T11751] usb usb7-port1: attempt power cycle [ 632.875407][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'. [ 633.024234][T11751] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 633.114597][T11751] usb 7-1: device descriptor read/8, error -71 [ 633.393797][T11751] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 633.743862][T11751] usb 7-1: device not accepting address 5, error -71 [ 633.763321][T11751] usb usb7-port1: unable to enumerate USB device [ 634.974501][T13819] loop3: detected capacity change from 0 to 16 [ 635.019352][T13819] erofs: (device loop3): mounted with root inode @ nid 36. [ 635.587576][T13828] loop3: detected capacity change from 0 to 8192 [ 635.850567][T13849] misc userio: Invalid payload size [ 635.860769][T13849] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2932'. [ 636.827847][T13854] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 636.836935][T13854] FAT-fs (loop3): Filesystem has been set read-only [ 637.558298][T13857] loop6: detected capacity change from 0 to 8192 [ 637.818947][T13867] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 637.828668][T13867] FAT-fs (loop6): Filesystem has been set read-only [ 638.755276][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 638.824212][T13893] tmpfs: Bad value for 'mpol' [ 638.938999][T13891] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 639.767056][T13909] device syzkaller0 entered promiscuous mode [ 640.335446][T13926] netlink: 'syz.6.2961': attribute type 4 has an invalid length. [ 641.501783][T13944] ipt_REJECT: ECHOREPLY no longer supported. [ 641.510864][T13944] IPv6: NLM_F_CREATE should be specified when creating new route [ 642.309150][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2974'. [ 642.318698][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2974'. [ 642.327846][T13963] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2974'. [ 642.341461][T13961] netlink: 'syz.3.2973': attribute type 4 has an invalid length. [ 642.798755][T13972] netlink: 'syz.6.2977': attribute type 4 has an invalid length. [ 643.417001][T13984] UBIFS error (pid: 13984): cannot open "", error -22 [ 644.258045][T14006] loop6: detected capacity change from 0 to 8192 [ 644.846356][T14017] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 644.855460][T14017] FAT-fs (loop6): Filesystem has been set read-only [ 645.160853][T11763] Bluetooth: hci0: command 0x0401 tx timeout [ 645.171597][T14016] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 647.122615][T14035] tipc: Started in network mode [ 647.127844][T14035] tipc: Node identity 4, cluster identity 4711 [ 647.134635][T14035] tipc: Node number set to 4 [ 648.131629][T14053] loop6: detected capacity change from 0 to 8192 [ 648.404277][T14056] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 648.413181][T14056] FAT-fs (loop6): Filesystem has been set read-only [ 650.349996][T14094] loop5: detected capacity change from 0 to 8192 [ 650.759305][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3020'. [ 651.146160][T14107] device syzkaller0 entered promiscuous mode [ 652.242693][T14131] loop6: detected capacity change from 0 to 8192 [ 655.583366][T14166] netlink: 'syz.3.3043': attribute type 4 has an invalid length. [ 655.985336][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3046'. [ 656.291409][T14176] loop3: detected capacity change from 0 to 8192 [ 657.343970][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3058'. [ 657.349684][T14207] loop5: detected capacity change from 0 to 128 [ 659.053143][ T4238] Bluetooth: Error in BCSP hdr checksum [ 659.902806][T14242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3070'. [ 659.932171][T14233] loop3: detected capacity change from 0 to 8192 [ 659.989959][T11763] Process accounting resumed [ 660.005229][T14245] Process accounting resumed [ 660.743694][T11763] Bluetooth: hci5: command 0x1003 tx timeout [ 660.762717][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 661.437255][T14276] netlink: 'syz.3.3082': attribute type 4 has an invalid length. [ 661.521213][T14282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3085'. [ 661.883577][T14289] loop5: detected capacity change from 0 to 8192 [ 662.325165][T14297] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 662.334189][T14297] FAT-fs (loop5): Filesystem has been set read-only [ 663.594830][T11760] Bluetooth: hci5: command 0x1001 tx timeout [ 663.601524][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 663.895249][T14302] loop3: detected capacity change from 0 to 8192 [ 664.664823][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3096'. [ 664.851536][T14321] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 664.861608][T14321] FAT-fs (loop3): Filesystem has been set read-only [ 665.580286][T14326] loop6: detected capacity change from 0 to 8 [ 665.644322][T14326] SQUASHFS error: Unable to read directory block [631:26] [ 665.783683][T11763] Bluetooth: hci5: command 0x1009 tx timeout [ 666.540156][T14339] loop3: detected capacity change from 0 to 8192 [ 666.813534][T14353] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 666.822419][T14353] FAT-fs (loop3): Filesystem has been set read-only [ 667.359843][T14360] netlink: 'syz.5.3108': attribute type 4 has an invalid length. [ 667.463121][T14368] fuse: Bad value for 'fd' [ 667.757500][T14369] block device autoloading is deprecated and will be removed. [ 668.150449][T14366] netlink: 'syz.3.3111': attribute type 4 has an invalid length. [ 668.490086][T14365] loop6: detected capacity change from 0 to 8192 [ 668.745098][T14387] overlayfs: missing 'lowerdir' [ 670.980844][T14420] netlink: 'syz.3.3130': attribute type 4 has an invalid length. [ 672.329445][T14438] loop3: detected capacity change from 0 to 8192 [ 674.158050][T14438] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 674.220596][T14438] REISERFS (device loop3): using ordered data mode [ 674.250779][T14438] reiserfs: using flush barriers [ 674.266392][T14449] loop6: detected capacity change from 0 to 8192 [ 674.291328][T14438] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 674.381355][T14438] REISERFS (device loop3): checking transaction log (loop3) [ 674.511687][T14438] REISERFS (device loop3): Using r5 hash to sort names [ 674.617673][T14438] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 674.795214][T14455] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 674.804122][T14455] FAT-fs (loop6): Filesystem has been set read-only [ 676.202967][T14475] loop3: detected capacity change from 0 to 8192 [ 678.174215][T14500] netlink: 'syz.6.3155': attribute type 4 has an invalid length. [ 679.344993][T14510] device syzkaller0 entered promiscuous mode [ 679.867784][T14521] netlink: 'syz.6.3165': attribute type 4 has an invalid length. [ 681.110679][T14535] team0: Port device wg0 added [ 681.642554][T14531] loop3: detected capacity change from 0 to 8192 [ 682.225345][T14542] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 682.234431][T14542] FAT-fs (loop3): Filesystem has been set read-only [ 683.074834][T14554] netlink: 'syz.6.3176': attribute type 4 has an invalid length. [ 683.639014][T14559] Mass Storage Function, version: 2009/09/11 [ 683.645283][T14559] LUN: removable file: (no medium) [ 683.653175][T14559] LUN: removable file: (no medium) [ 686.003081][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.009653][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.433600][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3185'. [ 687.727924][T14591] netlink: 'syz.6.3189': attribute type 4 has an invalid length. [ 687.861284][T14593] fuse: Bad value for 'fd' [ 688.773550][ T4291] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 688.950890][T14611] fuse: Bad value for 'fd' [ 690.100919][ T4291] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 690.120475][ T4291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.161594][ T4291] usb 6-1: Product: syz [ 690.180642][ T4291] usb 6-1: Manufacturer: syz [ 690.221298][ T4291] usb 6-1: SerialNumber: syz [ 690.272930][ T4291] usb 6-1: config 0 descriptor?? [ 690.600877][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'. [ 690.619124][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'. [ 690.629269][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'. [ 690.888429][T11763] usb 6-1: USB disconnect, device number 3 [ 692.847567][T14677] tipc: Enabling of bearer rejected, already enabled [ 693.282405][T14682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 693.293851][T14682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 695.319209][T14703] netlink: 'syz.6.3232': attribute type 4 has an invalid length. [ 697.281334][T14737] team0: Device wg0 is of different type [ 697.336067][T14737] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 697.940152][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3245'. [ 698.326109][T14757] loop3: detected capacity change from 0 to 32768 [ 698.477543][T14764] loop5: detected capacity change from 0 to 512 [ 698.566668][T14764] EXT4-fs (loop5): Ignoring removed nobh option [ 698.598513][T14764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 698.676507][T14764] EXT4-fs (loop5): 1 truncate cleaned up [ 698.726832][T14764] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 698.958989][T14757] XFS (loop3): Mounting V5 Filesystem [ 699.336156][T14757] XFS (loop3): Ending clean mount [ 699.351076][T14757] XFS (loop3): Quotacheck needed: Please wait. [ 699.518218][T14757] XFS (loop3): Quotacheck: Done. [ 699.625346][T14789] loop5: detected capacity change from 0 to 1024 [ 699.737344][T14794] configfs-gadget gadget: uvc: uvc_function_bind() [ 699.744442][T14794] udc usbip-vudc.0: failed to start g1: -19 [ 699.759645][ T26] audit: type=1800 audit(2000000072.660:299): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3249" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 699.835422][T14789] EXT4-fs (loop5): Invalid want_extra_isize 7 [ 700.243625][ T4189] XFS (loop3): Unmounting Filesystem [ 700.878039][T14809] overlayfs: missing 'lowerdir' [ 700.920219][T14809] loop6: detected capacity change from 0 to 1024 [ 701.077910][T14809] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 701.127784][T14809] EXT4-fs (loop6): invalid journal inode [ 701.133770][T14809] EXT4-fs (loop6): can't get journal size [ 701.154200][T14809] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #2: comm syz.6.3263: blocks 48-48 from inode overlap system zone [ 701.171546][T14809] EXT4-fs (loop6): failed to initialize system zone (-117) [ 701.179082][T14809] EXT4-fs (loop6): mount failed [ 701.636152][T14819] loop6: detected capacity change from 0 to 4096 [ 702.834862][T14832] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3269'. [ 704.851793][ T26] audit: type=1326 audit(2000000077.750:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.018447][ T26] audit: type=1326 audit(2000000077.750:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.043617][ T26] audit: type=1326 audit(2000000077.750:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.071685][ T26] audit: type=1326 audit(2000000077.750:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.119800][ T26] audit: type=1326 audit(2000000077.750:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.161832][T14845] batman_adv: batadv0: Adding interface: wlan0 [ 705.169420][ T26] audit: type=1326 audit(2000000077.750:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.318741][ T26] audit: type=1326 audit(2000000077.750:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.344212][ T26] audit: type=1326 audit(2000000077.750:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.369065][T14845] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.394799][ T26] audit: type=1326 audit(2000000077.750:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.420990][ T26] audit: type=1326 audit(2000000077.750:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.6.3271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de395d019 code=0x7ffc0000 [ 705.563689][T14845] batman_adv: batadv0: Interface activated: wlan0 [ 705.571205][T14845] batadv0: mtu less than device minimum [ 705.585149][T14845] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 705.598193][T14845] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 705.611114][T14845] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 705.624101][T14845] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 705.636996][T14845] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 705.649915][T14845] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 705.662869][T14845] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 705.675819][T14845] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 705.688821][T14845] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.548977][T14913] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3296'. [ 708.663786][ T4291] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 709.279865][T14924] loop6: detected capacity change from 0 to 8 [ 709.484012][T14924] SQUASHFS error: xz decompression failed, data probably corrupt [ 709.492083][T14924] SQUASHFS error: Failed to read block 0x108: -5 [ 709.498641][T14924] SQUASHFS error: Unable to read metadata cache entry [106] [ 709.506042][T14924] SQUASHFS error: Unable to read inode 0x11f [ 709.878664][ T4291] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 709.898234][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.927046][ T4291] usb 4-1: Product: syz [ 709.931285][ T4291] usb 4-1: Manufacturer: syz [ 709.978605][ T4291] usb 4-1: SerialNumber: syz [ 710.396605][T14953] loop6: detected capacity change from 0 to 8 [ 710.419543][T14953] SQUASHFS error: Unable to read directory block [631:26] [ 710.605997][T14959] loop5: detected capacity change from 0 to 128 [ 710.853575][ T4291] net_ratelimit: 10 callbacks suppressed [ 710.853601][ T4291] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 710.892560][ T4291] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 710.900287][T14959] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 710.912713][ T4291] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 710.923165][ T4291] lan78xx: probe of 4-1:1.0 failed with error -32 [ 710.953693][T14959] ext4 filesystem being mounted at /332/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 712.109323][ T4291] usb 4-1: USB disconnect, device number 9 [ 712.253344][T14992] loop5: detected capacity change from 0 to 64 [ 712.363780][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 712.363801][ T26] audit: type=1800 audit(2000000085.240:330): pid=14992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3321" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 712.913886][T15003] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 713.079206][ T8547] hfs: node 4:3 still has 1 user(s)! [ 713.188913][T15009] loop3: detected capacity change from 0 to 32768 [ 713.324581][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3328'. [ 713.409300][T15009] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 713.912388][T15009] syz.3.3327 (15009) used greatest stack depth: 18304 bytes left [ 714.495756][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 715.087485][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3340'. [ 715.383520][T15032] CIFS: Attempting to mount \\127.0.0.1\share [ 715.502049][T15032] CIFS: VFS: Error connecting to socket. Aborting operation. [ 715.592502][T15032] CIFS: VFS: cifs_mount failed w/return code = -4 [ 716.699494][T15087] loop5: detected capacity change from 0 to 512 [ 716.762101][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 716.963053][T15087] EXT4-fs error (device loop5): ext4_fill_super:4872: inode #2: comm syz.5.3352: inode has both inline data and extents flags [ 717.246211][T15087] EXT4-fs (loop5): get root inode failed [ 717.289278][T15087] EXT4-fs (loop5): mount failed [ 718.480222][T15087] fuse: Unknown parameter '0x0000000000000005' [ 719.087258][T15123] device syzkaller0 entered promiscuous mode [ 720.641868][T15163] loop5: detected capacity change from 0 to 1024 [ 720.806577][T15163] 9pnet_virtio: no channels available for device syz [ 721.458953][T15185] netlink: 'syz.3.3381': attribute type 4 has an invalid length. [ 722.846847][T15211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3391'. [ 723.169034][T15216] Bluetooth: hci0: unsupported parameter 255 [ 723.260890][T15216] Bluetooth: hci0: unsupported parameter 255 [ 725.523565][T15251] loop6: detected capacity change from 0 to 16 [ 725.679773][T15251] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 726.371179][T15272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3411'. [ 727.012531][T15290] netlink: 'syz.6.3420': attribute type 4 has an invalid length. [ 728.474876][T15304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 729.516297][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3436'. [ 729.590323][T15336] tmpfs: Bad value for 'mpol' [ 729.786088][T15342] loop6: detected capacity change from 0 to 8192 [ 730.181135][T15344] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 730.190751][T15344] FAT-fs (loop6): Filesystem has been set read-only [ 731.293385][T15361] overlayfs: failed to clone upperpath [ 731.645048][T15375] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 732.404363][T15380] binder: 15376:15380 ioctl c00c6211 0 returned -22 [ 734.238377][T15399] loop6: detected capacity change from 0 to 8192 [ 734.514033][T15419] loop3: detected capacity change from 0 to 32768 [ 734.964058][T15419] XFS (loop3): Mounting V5 Filesystem [ 735.235927][T15419] XFS (loop3): Ending clean mount [ 735.258409][T15419] XFS (loop3): Quotacheck needed: Please wait. [ 735.643038][T15419] XFS (loop3): Quotacheck: Done. [ 735.846168][ T26] audit: type=1800 audit(2000000108.750:331): pid=15419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3467" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 736.159468][ T4189] XFS (loop3): Unmounting Filesystem [ 737.700274][T15456] loop6: detected capacity change from 0 to 8192 [ 739.120924][T15461] loop5: detected capacity change from 0 to 4096 [ 740.335493][T15489] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3487'. [ 740.372971][T15498] netlink: 'syz.6.3491': attribute type 4 has an invalid length. [ 740.492905][T15503] loop3: detected capacity change from 0 to 128 [ 740.610026][T15503] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 740.646677][T15503] ext4 filesystem being mounted at /631/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 740.860434][T15503] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 741.022217][T15495] loop5: detected capacity change from 0 to 8192 [ 741.077044][T15510] netlink: 'syz.6.3494': attribute type 4 has an invalid length. [ 741.149539][T15517] Device name cannot be null; rc = [-22] [ 741.156833][T15517] overlayfs: failed to clone lowerpath [ 741.177258][T15517] overlayfs: failed to clone lowerpath [ 742.872741][T15546] loop3: detected capacity change from 0 to 8192 [ 742.983362][T15549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3509'. [ 743.079263][T15552] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 743.088942][T15552] FAT-fs (loop3): Filesystem has been set read-only [ 743.688848][T15561] batman_adv: batadv0: Adding interface: macvtap1 [ 743.696037][T15561] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.722015][T15561] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 743.869935][T15564] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 743.965728][T15561] batman_adv: batadv0: Removing interface: macvtap1 [ 744.537035][T15575] loop3: detected capacity change from 0 to 8192 [ 745.612920][T15597] loop5: detected capacity change from 0 to 64 [ 745.689458][T15594] loop6: detected capacity change from 0 to 8192 [ 745.914214][T15603] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 745.922545][T15603] FAT-fs (loop6): Filesystem has been set read-only [ 746.377812][T15610] hub 8-0:1.0: USB hub found [ 746.382980][T15610] hub 8-0:1.0: 1 port detected [ 747.289056][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.298943][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.527686][T15621] netlink: 'syz.6.3534': attribute type 4 has an invalid length. [ 750.112632][T15645] loop6: detected capacity change from 0 to 8192 [ 752.410974][T15687] loop5: detected capacity change from 0 to 8192 [ 752.487245][T15685] loop3: detected capacity change from 0 to 16 [ 752.849083][T15685] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 754.692372][T15735] loop3: detected capacity change from 0 to 2048 [ 754.732533][T15737] netlink: 'syz.6.3577': attribute type 4 has an invalid length. [ 755.383112][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.404045][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.411666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 755.885956][T15762] device wg0 entered promiscuous mode [ 755.892228][T15762] team0: Device wg0 is of different type [ 755.961893][T15762] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 756.196506][ T26] audit: type=1326 audit(2000000129.100:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 756.361180][ T26] audit: type=1326 audit(2000000129.100:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 756.423302][ T26] audit: type=1326 audit(2000000129.100:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 756.458669][ T26] audit: type=1326 audit(2000000129.100:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 756.525332][ T26] audit: type=1326 audit(2000000129.100:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 756.557289][ T26] audit: type=1326 audit(2000000129.120:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 756.723528][ T26] audit: type=1326 audit(2000000129.120:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 756.768778][ T26] audit: type=1326 audit(2000000129.120:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 756.943011][T15778] input: syz0 as /devices/virtual/input/input7 [ 756.980738][ T26] audit: type=1326 audit(2000000129.120:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 757.013639][ T26] audit: type=1326 audit(2000000129.120:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15767 comm="syz.0.3586" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160838e019 code=0x7ffc0000 [ 757.063103][T15788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.163769][T15788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.914346][T15788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.925155][T15788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.432084][T15806] device syz_tun left promiscuous mode [ 758.437893][T15806] bridge0: port 4(syz_tun) entered disabled state [ 758.625171][T15806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 758.642557][T15806] device team0 left promiscuous mode [ 758.651548][T15806] device team_slave_0 left promiscuous mode [ 758.688774][T15806] device team_slave_1 left promiscuous mode [ 758.717841][T15806] bridge0: port 5(team0) entered disabled state [ 758.801830][T15806] batman_adv: batadv0: Interface deactivated: dummy0 [ 758.830189][T15806] batman_adv: batadv0: Removing interface: dummy0 [ 759.073340][T15806] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 759.112102][T15806] device bridge_slave_0 left promiscuous mode [ 759.133838][T15806] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.158767][T15806] device bridge_slave_1 left promiscuous mode [ 759.170148][T15806] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.182560][T15806] team0: Port device team_slave_0 removed [ 759.194624][T15806] team0: Port device team_slave_1 removed [ 759.206514][T15806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.215135][T15806] batman_adv: batadv0: Interface deactivated: wlan0 [ 759.221994][T15806] batman_adv: batadv0: Removing interface: wlan0 [ 759.239974][T15806] device vxlan0 left promiscuous mode [ 759.247059][T15806] bridge0: port 3(vxlan0) entered disabled state [ 759.280170][T15806] team0: Port device bridge3 removed [ 759.944504][T15829] misc userio: Invalid payload size [ 760.714389][T15840] loop3: detected capacity change from 0 to 8192 [ 761.199268][T15852] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 761.253238][T15852] FAT-fs (loop3): Filesystem has been set read-only [ 765.430735][T15934] loop6: detected capacity change from 0 to 8192 [ 765.798801][T15937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 765.817609][T15937] FAT-fs (loop6): Filesystem has been set read-only [ 766.626213][T15951] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 768.107610][T15974] loop3: detected capacity change from 0 to 8 [ 768.332519][ T9998] [ 768.334906][ T9998] ============================================ [ 768.341104][ T9998] WARNING: possible recursive locking detected [ 768.347294][ T9998] syzkaller #0 Not tainted [ 768.351730][ T9998] -------------------------------------------- [ 768.358043][ T9998] kworker/u4:0/9998 is trying to acquire lock: [ 768.364236][ T9998] ffff888078ec9218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x1e69/0x2e50 [ 768.376721][ T9998] [ 768.376721][ T9998] but task is already holding lock: [ 768.384114][ T9998] ffff8880613e9258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x108d/0x2e50 [ 768.396417][ T9998] [ 768.396417][ T9998] other info that might help us debug this: [ 768.404507][ T9998] Possible unsafe locking scenario: [ 768.404507][ T9998] [ 768.411988][ T9998] CPU0 [ 768.415299][ T9998] ---- [ 768.418631][ T9998] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 768.425601][ T9998] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 768.432577][ T9998] [ 768.432577][ T9998] *** DEADLOCK *** [ 768.432577][ T9998] [ 768.440771][ T9998] May be due to missing lock nesting notation [ 768.440771][ T9998] [ 768.449122][ T9998] 9 locks held by kworker/u4:0/9998: [ 768.454438][ T9998] #0: ffff8880758d0938 ((wq_completion)bond1#4){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 768.465195][ T9998] #1: ffffc9000318fd00 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 768.477439][ T9998] #2: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 768.486903][ T9998] #3: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 768.496531][ T9998] #4: ffff8880613e9258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x108d/0x2e50 [ 768.509254][ T9998] #5: ffff888025c88c98 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x162/0x4a0 [ 768.518941][ T9998] #6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 768.528393][ T9998] #7: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 768.538449][ T9998] #8: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 768.548070][ T9998] [ 768.548070][ T9998] stack backtrace: [ 768.553988][ T9998] CPU: 0 PID: 9998 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 768.561564][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 768.571654][ T9998] Workqueue: bond1 bond_alb_monitor [ 768.576913][ T9998] Call Trace: [ 768.580227][ T9998] [ 768.583292][ T9998] dump_stack_lvl+0x188/0x250 [ 768.588148][ T9998] ? show_regs_print_info+0x20/0x20 [ 768.593390][ T9998] ? load_image+0x410/0x410 [ 768.597999][ T9998] __lock_acquire+0x1247/0x7b50 [ 768.602914][ T9998] ? lock_chain_count+0x20/0x20 [ 768.607813][ T9998] ? unwind_next_frame+0x11ec/0x1cf0 [ 768.613168][ T9998] ? verify_lock_unused+0x140/0x140 [ 768.618705][ T9998] ? mark_lock+0x94/0x320 [ 768.629689][ T9998] ? deref_stack_reg+0xd0/0x120 [ 768.635087][ T9998] ? unwind_next_frame+0x11ec/0x1cf0 [ 768.640600][ T9998] ? mark_lock+0x94/0x320 [ 768.644973][ T9998] lock_acquire+0x19e/0x400 [ 768.649848][ T9998] ? __dev_queue_xmit+0x1e69/0x2e50 [ 768.656504][ T9998] ? read_lock_is_recursive+0x10/0x10 [ 768.662740][ T9998] ? rcu_read_lock_bh_held+0x76/0xf0 [ 768.668519][ T9998] ? rcu_read_lock_held+0x40/0x40 [ 768.673890][ T9998] ? __alloc_skb+0xf4/0x750 [ 768.679690][ T9998] ? verify_lock_unused+0x140/0x140 [ 768.685296][ T9998] ? iptunnel_xmit+0x4a1/0x8b0 [ 768.690448][ T9998] _raw_spin_lock+0x2a/0x40 [ 768.695092][ T9998] ? __dev_queue_xmit+0x1e69/0x2e50 [ 768.700651][ T9998] __dev_queue_xmit+0x1e69/0x2e50 [ 768.705764][ T9998] ? __kasan_kmalloc+0xc6/0xe0 [ 768.710670][ T9998] ? __kasan_kmalloc+0xaf/0xe0 [ 768.715485][ T9998] ? dev_queue_xmit+0x20/0x20 [ 768.720680][ T9998] ? mark_lock+0x94/0x320 [ 768.725193][ T9998] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 768.731378][ T9998] ? lock_chain_count+0x20/0x20 [ 768.736375][ T9998] ? rcu_lock_acquire+0x30/0x30 [ 768.742146][ T9998] ? ip_finish_output2+0x8c1/0x10e0 [ 768.747508][ T9998] ? ip_finish_output2+0xa77/0x10e0 [ 768.752965][ T9998] ip_finish_output2+0xc77/0x10e0 [ 768.758037][ T9998] ? ip_fragment+0x210/0x210 [ 768.762671][ T9998] ? ip_frag_next+0x607/0xaa0 [ 768.767389][ T9998] ip_do_fragment+0x914/0x1bf0 [ 768.772197][ T9998] ? ip_fragment+0x210/0x210 [ 768.778583][ T9998] ip_output+0x2ba/0x3e0 [ 768.782881][ T9998] iptunnel_xmit+0x4a1/0x8b0 [ 768.787518][ T9998] ip_tunnel_xmit+0x1b4a/0x22f0 [ 768.792418][ T9998] ? ip4_dst_hoplimit+0x2a0/0x2a0 [ 768.797484][ T9998] ? gre_build_header+0x250/0x8e0 [ 768.802637][ T9998] erspan_xmit+0x9b9/0x15a0 [ 768.807320][ T9998] dev_hard_start_xmit+0x297/0x7d0 [ 768.812496][ T9998] sch_direct_xmit+0x24d/0x4a0 [ 768.817303][ T9998] ? do_raw_spin_lock+0x2f0/0x2f0 [ 768.822441][ T9998] ? mrp_pdu_append_vecattr_event+0x1650/0x1650 [ 768.828734][ T9998] __dev_queue_xmit+0x1694/0x2e50 [ 768.833919][ T9998] ? dev_queue_xmit+0x20/0x20 [ 768.838641][ T9998] ? __netdev_alloc_skb+0x121/0x4c0 [ 768.843884][ T9998] ? __alloc_skb+0x750/0x750 [ 768.848544][ T9998] ? memset+0x1e/0x40 [ 768.852568][ T9998] ? alb_send_lp_vid+0x387/0x660 [ 768.857662][ T9998] alb_send_learning_packets+0x125/0x2d0 [ 768.863339][ T9998] ? bond_alb_monitor+0x1770/0x1770 [ 768.868722][ T9998] ? netdev_lower_get_next_private_rcu+0x9b/0xf0 [ 768.875120][ T9998] bond_alb_monitor+0x3a6/0x1770 [ 768.880104][ T9998] ? bond_alb_xmit+0x40/0x40 [ 768.884747][ T9998] ? _raw_spin_unlock_irq+0x1f/0x40 [ 768.890071][ T9998] process_one_work+0x867/0xff0 [ 768.894973][ T9998] ? worker_detach_from_pool+0x240/0x240 [ 768.900862][ T9998] ? lockdep_hardirqs_off+0x70/0x100 [ 768.906454][ T9998] ? _raw_spin_lock_irq+0xb7/0xf0 [ 768.911607][ T9998] ? _raw_spin_lock_irqsave+0x100/0x100 [ 768.917367][ T9998] ? wq_worker_running+0x97/0x170 [ 768.922438][ T9998] worker_thread+0xad7/0x12a0 [ 768.927342][ T9998] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 768.933656][ T9998] kthread+0x42e/0x520 [ 768.937888][ T9998] ? rcu_lock_release+0x20/0x20 [ 768.942781][ T9998] ? kthread_blkcg+0xd0/0xd0 [ 768.947538][ T9998] ret_from_fork+0x1f/0x30 [ 768.952216][ T9998] [ 769.405523][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 769.415108][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 769.422722][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.432919][ T4202] Workqueue: hci3 hci_rx_work [ 769.437774][ T4202] Call Trace: [ 769.441092][ T4202] [ 769.444146][ T4202] dump_stack_lvl+0x188/0x250 [ 769.448867][ T4202] ? show_regs_print_info+0x20/0x20 [ 769.454112][ T4202] ? load_image+0x410/0x410 [ 769.458680][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 769.463903][ T4202] ? hci_conn_add_sysfs+0xd1/0x1e0 [ 769.469133][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 769.473841][ T4202] ? kthread+0x42e/0x520 [ 769.478126][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 769.483365][ T4202] kobject_add_internal+0x5ba/0xcd0 [ 769.488742][ T4202] kobject_add+0x160/0x230 [ 769.493201][ T4202] ? kobject_init+0x1c0/0x1c0 [ 769.497913][ T4202] ? __raw_spin_lock_init+0x41/0x100 [ 769.503235][ T4202] ? klist_children_get+0x50/0x50 [ 769.508370][ T4202] ? get_device_parent+0x121/0x3e0 [ 769.513517][ T4202] device_add+0x470/0x1050 [ 769.517969][ T4202] ? device_initialize+0x2a5/0x4d0 [ 769.523119][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 769.528096][ T4202] le_conn_complete_evt+0xc2e/0x14d0 [ 769.533469][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 769.538621][ T4202] ? lock_acquire+0xc8/0x400 [ 769.543268][ T4202] ? __mutex_trylock_common+0x15c/0x260 [ 769.548851][ T4202] hci_le_meta_evt+0x285/0x3ca0 [ 769.553743][ T4202] ? hci_event_packet+0x363/0x1310 [ 769.558886][ T4202] ? __mutex_lock_common+0x435/0x2400 [ 769.564348][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 769.569414][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 769.575520][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 769.581230][ T4202] ? lock_release+0xb5/0x8a0 [ 769.585859][ T4202] ? mutex_unlock+0x10/0x10 [ 769.590402][ T4202] ? skb_dequeue+0x120/0x150 [ 769.595060][ T4202] ? do_raw_spin_lock+0x128/0x2f0 [ 769.600152][ T4202] ? lock_chain_count+0x20/0x20 [ 769.605063][ T4202] ? __rwlock_init+0x140/0x140 [ 769.609879][ T4202] hci_event_packet+0xe0b/0x1310 [ 769.614865][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 769.619747][ T4202] ? rcu_lock_release+0x20/0x20 [ 769.625905][ T4202] ? rcu_is_watching+0x11/0xa0 [ 769.630713][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 769.635988][ T4202] hci_rx_work+0x255/0xa10 [ 769.640453][ T4202] process_one_work+0x867/0xff0 [ 769.645384][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 769.651055][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 769.656124][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 769.661741][ T4202] ? wq_worker_running+0x97/0x170 [ 769.666805][ T4202] worker_thread+0xad7/0x12a0 [ 769.671529][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 769.677467][ T4202] kthread+0x42e/0x520 [ 769.681571][ T4202] ? rcu_lock_release+0x20/0x20 [ 769.686460][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 769.691085][ T4202] ret_from_fork+0x1f/0x30 [ 769.695548][ T4202] [ 769.703699][ T4202] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 769.717173][ T4202] Bluetooth: hci3: failed to register connection device [ 769.910602][T15990] netlink: 'syz.1.3655': attribute type 2 has an invalid length. [ 770.168495][T15974] SQUASHFS error: xz decompression failed, data probably corrupt [ 770.176514][T15974] SQUASHFS error: Failed to read block 0x108: -5 [ 770.182883][T15974] SQUASHFS error: Unable to read metadata cache entry [106] [ 770.191299][T15974] SQUASHFS error: Unable to read inode 0x11f