last executing test programs: 13m44.330540918s ago: executing program 2 (id=511): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x1a0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x112b}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0xb, 0x1, 0x5, 0x0, 0x5, 0x5, 0x2, 0x401, 0x4]}, @NL80211_ATTR_FRAME={0x160, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @broadcast, @device_a, @random="f42373e702e5", {0xc, 0x7}}, 0xfffffffffffffff8, @random=0x6, 0x206, @void, @val={0x1, 0x3, [{0x16, 0x1}, {0x36}, {0x9}]}, @void, @val={0x4, 0x6, {0x2, 0x81, 0x1, 0x5}}, @val={0x6, 0x2, 0x1}, @void, @void, @void, [{0xdd, 0x3b, "566ebbd216c59befb6de1b116590ee8196989601126a21b20440b01809aa70b9fc289696f6f36594b0ecc9ca1838fa309fba1d9041c9a2da0d077a"}, {0xdd, 0x3b, "02f26d54bd8d0e1a67d5d9433de63bda12996bbdedb1220468dc8ea078b64f91c5d003684219ce2935317eb29450a0f5f1c85808b4b81f6a1e9088"}, {0xdd, 0x10, "ecb3e1e8562d1644b0e2f19e9b062356"}, {0xdd, 0x99, "a3e1fc1d89f4503e80371c624fe3bdbabcdee24ec0c1f04187c63ea277d40cfd18ad5cf58baed686fc4de6850651886757a4527ae845c42af674393ebf65bb78eea1ee6f66c9c44107c083695aa905ea95aa927af73b0cabe168ff8cb499d8a5c2e8d5fe5de20d54c757c6c434855f30271b9ed425b36327a10e09a1f8f2f3509dfec57fc9b7779f358833bcde911db8ad7c2f4316a5b93ecd"}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m42.966028329s ago: executing program 2 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0xfec00000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x0, 0xb, 0x1000000000000e, 0xed, 0x280000000, 0x2fff, 0xfffffffffffffffc, 0x7, 0x81, 0x6, 0x4, 0x5, 0x2000000000000009, 0xc, 0x96b], 0x50000, 0x180cd2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m41.2010956s ago: executing program 2 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x800e805) read$eventfd(r1, &(0x7f0000000040), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) 13m40.942228945s ago: executing program 2 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 13m40.609212326s ago: executing program 2 (id=536): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xa, 0x4, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x18, 0x491, 0x8d3, 0x200006, 0x800a, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x5, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m38.650265843s ago: executing program 2 (id=540): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xa, 0xfff2}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1a}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x40001}]}}]}, 0x44}}, 0x20004055) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c1"], 0x200) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x4, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x13}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7a, 0x8001, [0x800005, 0x9, 0x4, 0x4]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xa}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0xa8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m37.973978915s ago: executing program 32 (id=540): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xa, 0xfff2}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1a}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x40001}]}}]}, 0x44}}, 0x20004055) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c1"], 0x200) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x4, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x13}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7a, 0x8001, [0x800005, 0x9, 0x4, 0x4]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xa}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0xa8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.265330621s ago: executing program 4 (id=4888): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x4, 0x0, 0x7, 0xc4, 0x1, 0xff, 0x6, 0xc, 0x8, 0x9}, {0x8, 0xaef2, 0xa, 0xc, 0xc, 0x1, 0x8, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x100000, 0x7, 0xc, 0xf, 0x3, 0x4, 0x0, 0xfb, 0x72, 0x15, 0x1, 0x3, 0x2}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x8, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x167a, 0x2, 0xfff, 0xe, 0x4, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x202380}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.773234964s ago: executing program 4 (id=4893): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 8.369311242s ago: executing program 4 (id=4898): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 7.26727261s ago: executing program 4 (id=4909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000980)="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", 0x631}], 0x2, 0x0, 0x0, 0x2c}, 0x4000) 6.973425805s ago: executing program 4 (id=4912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 6.672187178s ago: executing program 4 (id=4916): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x140, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 3.693709985s ago: executing program 5 (id=4942): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {0x0}, {&(0x7f0000001cc0)=""/174, 0xae}, {&(0x7f0000001e80)=""/4094, 0xffe}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000018c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/4105, 0x1009}], 0xb}, 0x40016002) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 3.374731245s ago: executing program 5 (id=4943): r0 = socket$inet_icmp(0x2, 0x2, 0x1) fgetxattr(r0, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0) 2.95719921s ago: executing program 5 (id=4947): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2.643794791s ago: executing program 0 (id=4949): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x597e, 0x9, 0x0, {0x5, 0x0, 0xbdd6, 0x401, 0x10000, 0x5, 0x9d1f, 0x5, 0x8, 0x2000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000"], 0x50) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 2.468093814s ago: executing program 3 (id=4951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 2.208480233s ago: executing program 0 (id=4952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000480)=[@code={0xa, 0x8c, {"c74424006703bdaac744240288c6992fc7442406000000000f011c24450fae5f3467f2476c470fe0086464660f3882930000c0fec744240028000000c74424020d000000c7442406000000000f011424b9180200000f3264402500700000c4e2252f0748b8375fd9b1000000000f23d80f21f835800000000f23f8"}}], 0x8c}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x4, 0x6000, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.163334327s ago: executing program 1 (id=4953): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {0x0}, {&(0x7f0000001cc0)=""/174, 0xae}, {&(0x7f0000001e80)=""/4094, 0xffe}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000018c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/4105, 0x1009}], 0xb}, 0x40016002) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 2.162014386s ago: executing program 5 (id=4954): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xa, 0xfff2}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124"], 0x200) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.134773402s ago: executing program 3 (id=4955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a", 0x97}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x7b, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x3, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdffff7ffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x12, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x3, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.902494756s ago: executing program 1 (id=4956): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x4, 0x4, 0xffff230c}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x880) 1.676152531s ago: executing program 0 (id=4957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.517164236s ago: executing program 3 (id=4958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000980)="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", 0x631}], 0x2, 0x0, 0x0, 0x2c}, 0x4000) 1.485071621s ago: executing program 5 (id=4959): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 1.181777293s ago: executing program 3 (id=4960): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.077230537s ago: executing program 0 (id=4961): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x64) 922.988094ms ago: executing program 1 (id=4962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000003600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000e7ffffff850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 873.221406ms ago: executing program 3 (id=4963): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0x2, 0x10, 0x0, 0xb, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x2, 0x7, '\x00', 0x6, 0x4080000000000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 747.064936ms ago: executing program 1 (id=4964): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) read$FUSE(r0, &(0x7f0000002a00)={0x2020}, 0x2020) 602.510213ms ago: executing program 1 (id=4965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 313.274169ms ago: executing program 0 (id=4966): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000001cc0)=""/174, 0xae}, {&(0x7f0000001e80)=""/4094, 0xffe}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000018c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/4105, 0x1009}], 0xa}, 0x40016002) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 312.977109ms ago: executing program 5 (id=4967): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x402, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) readv(r0, &(0x7f0000000a00)=[{&(0x7f0000003880)=""/4082, 0xff2}], 0x1) 286.363534ms ago: executing program 1 (id=4968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a", 0x97}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x7b, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x3, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdffff7ffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x12, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x3, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 244.466658ms ago: executing program 3 (id=4969): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xa, 0xfff2}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124"], 0x200) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=4970): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x21) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) fallocate(r0, 0x0, 0x9, 0x10001) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) kernel console output (not intermixed with test programs): d problems! [ 694.902540][T15091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.920549][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3223'. [ 695.066076][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 695.086390][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 695.124321][T15091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.149187][T15091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.170305][T15091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.191641][T15091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.412101][T14791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.426893][T14791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.480295][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 695.554389][ T5810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.610146][ T5810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.669630][T15419] device syzkaller0 entered promiscuous mode [ 695.680055][ T26] audit: type=1326 audit(1772480100.027:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 695.702462][T14797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 695.799696][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.829086][ T26] audit: type=1326 audit(1772480100.067:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 695.920974][T14214] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 695.974155][ T26] audit: type=1326 audit(1772480100.067:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 695.978965][T15443] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xaa [ 696.002165][ T26] audit: type=1326 audit(1772480100.067:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 696.115436][ T26] audit: type=1326 audit(1772480100.067:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 696.229607][ T26] audit: type=1326 audit(1772480100.067:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 696.345924][ T26] audit: type=1326 audit(1772480100.067:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 696.467496][ T26] audit: type=1326 audit(1772480100.067:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 696.624916][ T26] audit: type=1326 audit(1772480100.067:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 696.771857][ T26] audit: type=1326 audit(1772480100.067:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15431 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1e4699c799 code=0x7ffc0000 [ 696.839560][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.159686][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.899105][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.600644][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.924444][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.248476][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.959437][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.204584][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.999268][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.171706][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 702.039408][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.196786][T15535] device syzkaller0 entered promiscuous mode [ 703.084306][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.239294][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.269221][T14214] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 703.720123][T14791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.127115][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.314774][T14214] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 705.000303][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.168998][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.215578][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.289282][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.245056][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.416787][T14214] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 708.279471][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.936376][ T26] kauditd_printk_skb: 374 callbacks suppressed [ 708.936392][ T26] audit: type=1326 audit(1772480113.277:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 709.036084][ T26] audit: type=1326 audit(1772480113.317:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 709.086512][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 709.116700][ T26] audit: type=1326 audit(1772480113.317:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 709.256977][ T26] audit: type=1326 audit(1772480113.317:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 709.319170][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.327382][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.395206][ T26] audit: type=1326 audit(1772480113.317:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 709.480207][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.514063][ T26] audit: type=1326 audit(1772480113.317:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 709.624189][ T26] audit: type=1326 audit(1772480113.317:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 709.722464][ T26] audit: type=1326 audit(1772480113.317:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 709.797281][T15668] device veth0 entered promiscuous mode [ 709.817391][ T26] audit: type=1326 audit(1772480113.317:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 709.850718][T15667] device veth0 left promiscuous mode [ 709.913398][ T26] audit: type=1326 audit(1772480113.317:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.0.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f66a159c799 code=0x7ffc0000 [ 710.360416][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.605880][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 710.759626][T14791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.431339][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.721284][T15718] netlink: 'syz.1.3311': attribute type 1 has an invalid length. [ 712.280817][T15732] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3318'. [ 712.322586][T15732] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 712.372817][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.439206][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.246091][T15756] netlink: 'syz.4.3327': attribute type 1 has an invalid length. [ 713.479178][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.149767][T14214] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 714.519061][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.745600][T15782] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.753219][T15782] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.259239][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.407876][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.584951][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.603024][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.723165][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.753185][T15815] loop1: detected capacity change from 0 to 256 [ 716.390120][T15782] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.399818][T15782] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.409337][T15782] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.418812][T15782] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.520193][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.612008][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.251958][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 717.529960][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 717.529977][ T26] audit: type=1326 audit(1772480121.877:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15850 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cd59c799 code=0x7ffc0000 [ 717.598884][ T26] audit: type=1326 audit(1772480121.907:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15850 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cd59c799 code=0x7ffc0000 [ 717.639187][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.663036][ T26] audit: type=1326 audit(1772480121.917:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15850 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa4cd59c799 code=0x7ffc0000 [ 717.732698][ T26] audit: type=1326 audit(1772480122.037:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4cd55cfce code=0x7ffc0000 [ 717.780176][ T26] audit: type=1326 audit(1772480122.037:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15850 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cd59c799 code=0x7ffc0000 [ 717.832353][ T26] audit: type=1326 audit(1772480122.047:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15850 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cd59c799 code=0x7ffc0000 [ 717.922571][ T26] audit: type=1326 audit(1772480122.227:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa4cd59c799 code=0x7ffc0000 [ 718.119004][T15861] device syzkaller0 entered promiscuous mode [ 718.440118][ T4307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.525836][T15875] loop3: detected capacity change from 0 to 128 [ 718.610818][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 718.675794][T15875] FAT-fs (loop3): Filesystem has been set read-only [ 718.688896][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.751080][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 718.803504][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 718.848901][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 718.908812][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 718.917335][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 718.948975][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 718.972253][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 718.994254][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.014404][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.036281][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.047786][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.075848][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.088890][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.127681][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.179229][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.209011][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.236984][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.252466][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.268967][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.301932][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.365561][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.393796][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.412693][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.446116][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.466000][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.507681][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.523221][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.552292][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.566904][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.593978][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.610010][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.618511][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.667992][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.689575][T15875] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 719.722013][T15797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.731003][ T26] audit: type=1800 audit(1772480124.067:481): pid=15875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3360" name="file1" dev="loop3" ino=1048620 res=0 errno=0 [ 719.822644][T15875] syz.3.3360 (15875) used greatest stack depth: 19824 bytes left [ 720.361399][T14791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.789299][T15797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.253457][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 721.479062][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.810169][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.846642][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.452550][T15919] loop1: detected capacity change from 0 to 128 [ 723.509082][ T26] audit: type=1800 audit(1772480127.847:482): pid=15919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3372" name="file1" dev="loop1" ino=1048621 res=0 errno=0 [ 723.533575][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'. [ 723.568637][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'. [ 723.761834][T15929] loop4: detected capacity change from 0 to 128 [ 723.897879][T15797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.008067][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3378'. [ 724.519208][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.693555][T15963] loop1: detected capacity change from 0 to 16 [ 724.764778][T15963] erofs: (device loop1): mounted with root inode @ nid 36. [ 724.919610][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.093753][T15974] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 725.114052][T15974] overlayfs: failed to set xattr on upper [ 725.141646][T15974] overlayfs: ...falling back to index=off,metacopy=off. [ 725.191356][T15979] netlink: 'syz.1.3393': attribute type 27 has an invalid length. [ 725.480058][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.763212][T15979] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.770792][T15979] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.871370][T16001] loop4: detected capacity change from 0 to 256 [ 725.993631][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.012808][ T26] audit: type=1804 audit(1772480130.357:483): pid=16001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3400" name="/newroot/31/file0/file0" dev="loop4" ino=1048623 res=1 errno=0 [ 726.079060][ T26] audit: type=1804 audit(1772480130.357:484): pid=16001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3400" name="/newroot/31/file0/file0" dev="loop4" ino=1048623 res=1 errno=0 [ 726.119810][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.482302][T15979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.534145][T15979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.790630][T15979] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.799842][T15979] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.814423][T15979] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.829003][T15979] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.957648][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3399'. [ 727.027592][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.373616][T16016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3406'. [ 727.424939][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3406'. [ 727.559051][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.049019][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.089212][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.129278][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.528852][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.600395][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.159080][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.879905][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.205642][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.239168][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.639231][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.279185][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.390681][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 734.402677][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 734.411263][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 734.421510][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 734.429178][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 734.436638][ T4273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 734.770953][T16124] device syzkaller0 entered promiscuous mode [ 735.324636][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.724212][T14794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.359157][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.526385][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 736.697638][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.403601][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.641527][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.439164][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.617624][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 739.064570][T16111] hsr0 speed is unknown, defaulting to 1000 [ 739.487909][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.721481][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.526443][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.689166][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 740.847798][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.559144][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.607021][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.625210][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.634686][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.644700][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.768360][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.776777][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 743.488672][T16173] device syzkaller0 entered promiscuous mode [ 744.150841][T16111] chnl_net:caif_netlink_parms(): no params data found [ 744.425927][T16111] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.480316][T16111] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.535997][T16111] device bridge_slave_0 entered promiscuous mode [ 744.571746][T16111] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.608092][T16111] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.659407][T16111] device bridge_slave_1 entered promiscuous mode [ 744.759171][T15822] net_ratelimit: 2 callbacks suppressed [ 744.759188][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.787920][T16111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.841857][T16111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.981495][T16111] team0: Port device team_slave_0 added [ 745.041909][T16111] team0: Port device team_slave_1 added [ 745.150235][T16111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.190320][T16111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.290171][T16111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.322552][T16111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.347624][T16111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.488161][T16111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.649981][T16111] device hsr_slave_0 entered promiscuous mode [ 745.665425][T16111] device hsr_slave_1 entered promiscuous mode [ 745.707019][T16111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.728848][T16111] Cannot create hsr debugfs directory [ 745.803136][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.833732][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.170320][T16237] device syzkaller0 entered promiscuous mode [ 746.197557][T16238] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 746.647930][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.839482][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.020388][T16254] device syzkaller0 entered promiscuous mode [ 747.251997][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.258905][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.411786][T16111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 747.448399][T16111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 747.558613][T16111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 747.574064][T16111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 747.879642][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.888539][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.896704][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.903108][T16111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.913054][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.984055][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 748.020949][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 748.063399][T16111] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.117567][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 748.140566][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.158355][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.165583][ T5640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.199153][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.217673][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.255351][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.300138][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.307342][ T5640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.364641][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 748.384799][T16271] device syzkaller0 entered promiscuous mode [ 748.443349][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.490141][T16276] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 748.543882][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 748.609540][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 748.626475][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 748.637093][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 748.646369][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 748.663515][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 748.677698][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.714230][T16111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.733374][T16111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 748.783700][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.793222][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 748.812687][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.867420][T16286] device syzkaller0 entered promiscuous mode [ 750.000984][T16111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.030657][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.038300][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.046376][T14443] net_ratelimit: 2 callbacks suppressed [ 750.046391][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.413921][T16327] device syzkaller0 entered promiscuous mode [ 750.837135][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3502'. [ 750.929885][T16335] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 751.036792][T16335] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 751.079402][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.156650][T16340] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 751.302721][T16349] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 751.393492][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 751.427107][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 751.502677][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 751.531027][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 751.590226][T16111] device veth0_vlan entered promiscuous mode [ 751.601119][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 751.626813][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 751.656164][T16111] device veth1_vlan entered promiscuous mode [ 751.740382][T14810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 751.798690][T14810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 751.849371][T14810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 751.861263][T14810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 751.879790][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.900311][T16111] device veth0_macvtap entered promiscuous mode [ 751.930382][T16111] device veth1_macvtap entered promiscuous mode [ 751.990331][T16111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.021218][T16111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.078956][T16111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.118845][T16111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.120797][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.139178][T16111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.168788][T16111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.200978][T16111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.218494][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 752.273962][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 752.294178][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 752.331552][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 752.359878][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.384556][T16111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.425623][T16111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.478799][T16111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.508844][T16111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.540490][T16111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.571519][T16111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.612173][T16111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.644397][T14797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 752.673864][T14797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 752.711494][T16111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.740705][T16111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.769541][T16111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.798891][T16111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.160076][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.202576][T16384] device syzkaller0 entered promiscuous mode [ 754.199903][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.282516][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.939318][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.247150][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.280489][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.319260][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.490541][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.969043][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.367373][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.708858][T14805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.716747][T14805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.814494][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 758.870178][T14794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.889459][T14794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.913061][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 759.399323][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.670077][T16469] device syzkaller0 entered promiscuous mode [ 760.039257][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.439243][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.684096][T16498] ip_vti0: Master is either lo or non-ether device [ 761.009273][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.101756][T16504] device syzkaller0 entered promiscuous mode [ 761.266777][T16488] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 761.484701][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.694752][T16520] loop1: detected capacity change from 0 to 256 [ 762.322706][T16542] device syzkaller0 entered promiscuous mode [ 762.331456][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 762.519172][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.625516][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.293311][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 763.559412][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.930824][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 763.971684][T16598] device syzkaller0 entered promiscuous mode [ 764.050556][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.508029][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 764.599310][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.159754][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.447008][T16639] device syzkaller0 entered promiscuous mode [ 765.639241][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.601095][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 766.679196][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.090062][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.115938][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 767.729098][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.359979][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.748593][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 768.759217][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.151829][T16742] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3637'. [ 769.805481][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.808966][T14214] Bluetooth: hci5: command 0x0406 tx timeout [ 770.129073][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.194866][T16776] device syzkaller0 entered promiscuous mode [ 770.211121][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.252255][T16776] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 770.839347][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.061268][T14214] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 771.879960][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.542664][T16849] loop5: detected capacity change from 0 to 128 [ 772.919300][T14443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.159431][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.959249][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.134363][T16888] loop4: detected capacity change from 0 to 128 [ 774.232473][T16888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3687'. [ 774.691138][T14214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 774.701662][T14214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 774.713820][T14214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 774.723269][T14214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 774.731575][T14214] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 774.739097][T14214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.788676][T16897] hsr0 speed is unknown, defaulting to 1000 [ 774.918948][T14214] Bluetooth: hci2: command 0x0406 tx timeout [ 775.007406][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.400373][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.602836][T16897] chnl_net:caif_netlink_parms(): no params data found [ 775.994314][T16897] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.039355][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.048138][T16897] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.079615][T16897] device bridge_slave_0 entered promiscuous mode [ 776.111442][T16897] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.120124][T16897] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.139863][T16897] device bridge_slave_1 entered promiscuous mode [ 776.205215][T16897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.209105][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.238447][T16897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.350111][T16897] team0: Port device team_slave_0 added [ 776.377167][T16897] team0: Port device team_slave_1 added [ 776.432392][T16897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.449745][T16897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.506715][T16897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.539250][T16897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.554552][T16897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.639087][T16897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.737493][T16897] device hsr_slave_0 entered promiscuous mode [ 776.757914][T16897] device hsr_slave_1 entered promiscuous mode [ 776.770389][T16897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.788283][T16897] Cannot create hsr debugfs directory [ 776.839517][T14214] Bluetooth: hci0: command 0x0409 tx timeout [ 777.079528][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.119462][T16897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.287150][T16897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.431178][T16897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.574773][T16897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.987849][T16897] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 778.042290][T16897] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 778.119227][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.141744][T16897] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 778.192504][T16897] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 778.621949][T16897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.680658][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 778.698007][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 778.723283][T16897] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.765217][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 778.807534][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 778.849560][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.856803][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.889182][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 778.915766][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 778.919120][T14214] Bluetooth: hci0: command 0x041b tx timeout [ 778.933971][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 778.981416][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.988636][ T5640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.080926][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 779.104761][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 779.135245][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 779.159278][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.192853][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 779.227248][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 779.250002][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.263349][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 779.293194][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 779.337057][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 779.368399][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 779.402601][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3722'. [ 779.454323][T16897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 779.496080][T16897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 779.534336][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 779.548322][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 780.199631][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.558312][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 780.566828][T14214] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 780.572918][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 780.655367][T16897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.770144][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 780.805088][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 780.870910][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 780.908049][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 780.953196][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 780.999134][T14214] Bluetooth: hci0: command 0x040f tx timeout [ 781.012574][T16897] device veth0_vlan entered promiscuous mode [ 781.044572][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 781.084299][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 781.146146][T16897] device veth1_vlan entered promiscuous mode [ 781.160083][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.187045][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 781.239434][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.286978][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 781.325976][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 781.367253][T16897] device veth0_macvtap entered promiscuous mode [ 781.408203][T16897] device veth1_macvtap entered promiscuous mode [ 781.460473][T16897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.514687][T16897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.557897][T16897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.585191][T16897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.616490][T16897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.655014][T16897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.682037][T16897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.707815][T16897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.749617][T16897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.759777][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 781.775511][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 781.789961][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 781.814204][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 781.864448][T16897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.905648][T16897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.946004][T16897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.976996][T16897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.990256][T17077] loop1: detected capacity change from 0 to 764 [ 782.003980][T16897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.028863][T16897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.047263][T14214] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 782.070438][T16897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.070463][T16897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.072084][T16897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.073281][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 782.074030][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 782.087757][T16897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.087858][T16897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.087886][T16897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.087914][T16897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.279564][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.279665][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.413481][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.413507][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.421354][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 782.488874][ T5640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.488897][ T5640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.489243][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 783.080812][T14214] Bluetooth: hci0: command 0x0419 tx timeout [ 783.319472][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.359894][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.874321][T17158] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 784.919228][T17152] device syzkaller0 entered promiscuous mode [ 785.324095][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.401468][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.279866][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.440983][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.489440][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.562517][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.366116][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.528621][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.567822][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.759165][T17183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3772'. [ 789.796726][T17183] vxcan1: Master is either lo or non-ether device [ 790.021041][T17195] loop5: detected capacity change from 0 to 256 [ 790.351012][T17202] loop3: detected capacity change from 0 to 128 [ 790.441067][T17202] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 790.487726][T17202] FAT-fs (loop3): Filesystem has been set read-only [ 790.539683][T17202] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 790.599078][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.937618][T17218] device syzkaller0 entered promiscuous mode [ 791.402799][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.650484][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.040609][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.685654][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.324082][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.728329][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.455001][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.759812][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.808346][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.020844][T17218] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 796.130023][T17232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3788'. [ 796.783873][T17280] loop0: detected capacity change from 0 to 128 [ 796.839225][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.304002][T17287] loop0: detected capacity change from 0 to 128 [ 797.371264][ T26] audit: type=1800 audit(1772480457.706:485): pid=17287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3806" name="file2" dev="loop0" ino=1048634 res=0 errno=0 [ 797.394013][T17287] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 797.417612][T17287] FAT-fs (loop0): Filesystem has been set read-only [ 797.444698][T17287] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 797.480351][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.482022][T17287] syz.0.3806: attempt to access beyond end of device [ 797.482022][T17287] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 797.820670][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.889032][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.439356][T14794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.919068][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.959867][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.529096][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.999112][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.047558][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.080047][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.552197][T17301] device syzkaller0 entered promiscuous mode [ 803.569632][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.589309][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.973911][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3827'. [ 804.119273][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.190096][T17364] overlayfs: failed to resolve './file0': -2 [ 804.200951][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.261646][T14214] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 805.166100][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.199404][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.609972][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.711602][T17415] overlayfs: failed to resolve './file0': -2 [ 807.239155][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.286619][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.680940][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.687324][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.320168][T14794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.339466][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.648975][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.939749][T17388] device syzkaller0 entered promiscuous mode [ 809.957679][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3844'. [ 809.967717][T14794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.359239][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.426245][T17430] loop3: detected capacity change from 0 to 764 [ 810.500693][T17181] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 810.730321][T17439] overlayfs: failed to resolve './file0': -2 [ 810.759223][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 810.777963][T14214] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 811.197971][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3861'. [ 811.399019][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.447509][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.689079][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.481475][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.565893][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.089192][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.639132][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.730812][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.739867][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.702889][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.716802][T17471] device syzkaller0 entered promiscuous mode [ 817.027081][T14214] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 817.735356][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.818442][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 818.599265][T14214] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 818.760260][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.788902][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.070516][T17560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3891'. [ 819.799903][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.759231][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.839275][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.849138][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.808928][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.889118][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.919118][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.712115][T17563] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 823.724207][T17563] bond1: (slave vcan0): Error -95 calling set_mac_address [ 823.746849][T17566] tipc: Enabling of bearer rejected, failed to enable media [ 823.759421][T17567] device syzkaller0 entered promiscuous mode [ 823.959383][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.006619][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 824.614386][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 824.839073][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.854761][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3906'. [ 824.944981][T17624] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 824.999561][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.014815][T17624] bond1: (slave vcan0): Error -95 calling set_mac_address [ 826.071511][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.602220][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.610407][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.079293][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.235585][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 827.880075][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.122077][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.167890][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.204997][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.291241][T17645] tipc: Enabling of bearer rejected, failed to enable media [ 830.308072][T17646] device syzkaller0 entered promiscuous mode [ 830.626796][T14214] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 830.790812][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3921'. [ 830.919516][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.947239][T17690] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 830.965016][T17690] bond1: (slave vcan1): Error -95 calling set_mac_address [ 831.055982][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 831.230707][T17703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3926'. [ 831.249030][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.279191][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.360016][T14794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.370398][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.319266][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.984645][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.361808][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.408761][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.439026][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.754322][T17733] tipc: Enabling of bearer rejected, failed to enable media [ 836.779786][T17736] device syzkaller0 entered promiscuous mode [ 836.808822][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3937'. [ 836.867269][T17757] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 836.879684][T17757] bond2: (slave vcan0): Error -95 calling set_mac_address [ 836.999005][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.197408][T14214] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 837.215903][T17771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3941'. [ 837.406667][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.433337][T14214] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 837.479272][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.378833][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3950'. [ 838.451870][T17801] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 838.470976][T17801] bond2: (slave vcan1): Error -95 calling set_mac_address [ 838.519191][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.560494][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.039839][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.599248][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.639711][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.971031][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.679798][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.079123][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.239327][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.346773][T17817] tipc: Enabling of bearer rejected, failed to enable media [ 843.414112][T17818] device syzkaller0 entered promiscuous mode [ 843.719156][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.919052][T14214] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 844.089041][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 844.767771][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.908522][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 845.809036][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.120379][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.532841][T14214] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 846.849118][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.719722][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.879107][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.939051][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.999615][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.174390][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.959275][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.681983][T17978] overlayfs: missing 'lowerdir' [ 851.022092][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.099705][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 851.370347][T17986] overlayfs: missing 'lowerdir' [ 852.039721][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.203814][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.781719][T17903] tipc: Enabling of bearer rejected, failed to enable media [ 852.801989][T17907] device syzkaller0 entered promiscuous mode [ 853.079149][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.345234][T18013] overlayfs: missing 'lowerdir' [ 853.379908][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'. [ 853.479238][T14794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.614632][T18014] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 853.636783][T18014] bond3: (slave vcan0): Error -95 calling set_mac_address [ 853.707007][T18023] overlayfs: missing 'lowerdir' [ 854.031268][T14214] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 854.164050][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.745728][T18045] tipc: Enabling of bearer rejected, failed to enable media [ 854.762706][T14794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.769465][T18045] device syzkaller0 entered promiscuous mode [ 854.813353][T18045] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 855.155066][T18056] overlayfs: missing 'lowerdir' [ 855.239314][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.247489][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.363558][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4019'. [ 855.446874][T18062] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 855.447839][T18065] overlayfs: missing 'lowerdir' [ 855.465874][T18062] bond4: (slave vcan0): Error -95 calling set_mac_address [ 856.279301][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.572333][T18092] tipc: Enabling of bearer rejected, failed to enable media [ 856.609621][T18092] device syzkaller0 entered promiscuous mode [ 856.609652][T14214] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 856.630875][T18092] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 856.839881][T14214] Bluetooth: hci3: command 0x0406 tx timeout [ 856.918631][T18097] overlayfs: missing 'lowerdir' [ 857.126231][T18102] loop3: detected capacity change from 0 to 128 [ 857.161769][ T26] audit: type=1800 audit(1772480517.506:486): pid=18102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4033" name="file2" dev="loop3" ino=1048635 res=0 errno=0 [ 857.201852][T18102] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 857.234576][T18102] FAT-fs (loop3): Filesystem has been set read-only [ 857.262127][T18102] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 857.305476][T18108] overlayfs: missing 'lowerdir' [ 857.313074][T18102] syz.3.4033: attempt to access beyond end of device [ 857.313074][T18102] loop3: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 857.334324][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.448358][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4036'. [ 857.627250][T18115] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 857.670438][T18115] bond2: (slave vcan1): Error -95 calling set_mac_address [ 858.193561][T18138] overlayfs: missing 'lowerdir' [ 858.211902][T18136] tipc: Enabling of bearer rejected, failed to enable media [ 858.273219][T18139] device syzkaller0 entered promiscuous mode [ 858.288114][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.296931][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.306090][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.322053][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.332035][T18136] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 858.901920][T18152] overlayfs: missing 'lowerdir' [ 858.911274][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 859.084460][T18158] loop3: detected capacity change from 0 to 128 [ 859.239264][T14810] net_ratelimit: 1 callbacks suppressed [ 859.239282][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.399338][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.460033][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4053'. [ 859.982788][T18178] overlayfs: missing 'lowerdir' [ 860.144104][T18185] tipc: Enabling of bearer rejected, failed to enable media [ 860.187589][T18185] device syzkaller0 entered promiscuous mode [ 860.221406][T18185] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 860.446160][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.519309][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.565931][T18197] overlayfs: missing 'lowerdir' [ 860.631708][T18199] loop3: detected capacity change from 0 to 128 [ 860.939860][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4068'. [ 861.229068][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 861.407804][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.489495][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.114890][T18241] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 862.125543][T18234] device syzkaller0 entered promiscuous mode [ 862.146417][T18241] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 862.541625][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.241046][ T26] audit: type=1326 audit(1772480523.586:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 863.329448][ T26] audit: type=1326 audit(1772480523.616:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 863.429065][ T26] audit: type=1326 audit(1772480523.616:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 863.527297][ T26] audit: type=1326 audit(1772480523.616:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 863.550173][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 863.550638][T18277] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 863.568451][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.576808][T18277] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 863.615659][ T26] audit: type=1326 audit(1772480523.616:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 863.639795][ T26] audit: type=1326 audit(1772480523.616:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 863.676407][ T26] audit: type=1326 audit(1772480523.616:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 863.699730][ T26] audit: type=1326 audit(1772480523.616:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 863.719205][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.739653][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.771079][ T26] audit: type=1326 audit(1772480523.616:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 863.829782][ T26] audit: type=1326 audit(1772480523.616:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.0.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 864.369410][T14797] net_ratelimit: 1 callbacks suppressed [ 864.369430][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.599479][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.965207][T18314] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 864.999110][T18314] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 865.221421][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 865.572938][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.647643][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.427155][T18341] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 866.457463][T18341] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 866.679468][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.839179][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.904048][T18355] overlayfs: missing 'lowerdir' [ 867.497331][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 867.721960][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.632510][T18394] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 868.656717][T18394] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 868.769239][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.501110][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.510252][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.539196][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.540411][T18406] overlayfs: missing 'lowerdir' [ 869.801037][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.121662][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.125850][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.127997][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.740777][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 870.759259][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.839052][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.859750][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 871.888995][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.599792][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.615869][T18445] overlayfs: missing 'lowerdir' [ 872.636888][T18447] device syzkaller0 entered promiscuous mode [ 872.668495][T18447] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 872.919280][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.996762][T18455] fuse: Bad value for 'fd' [ 873.143076][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 873.369199][T18460] device syzkaller0 entered promiscuous mode [ 874.361562][T18500] overlayfs: missing 'workdir' [ 874.616779][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 875.029143][T15822] net_ratelimit: 1 callbacks suppressed [ 875.029163][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.639178][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.865111][T18506] fuse: Bad value for 'fd' [ 875.880556][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.086495][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.519315][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.166530][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 877.169492][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.200250][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.679188][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.013574][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 879.248087][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.457531][T18534] overlayfs: missing 'lowerdir' [ 879.632414][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 880.279142][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.537077][T18539] overlayfs: missing 'workdir' [ 880.694620][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 880.999348][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.024694][T18558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4178'. [ 881.196190][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 881.319527][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.404932][T18569] overlayfs: missing 'lowerdir' [ 881.671953][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 881.671969][ T26] audit: type=1326 audit(1772480542.016:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 881.719412][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.732892][T18571] device syzkaller0 entered promiscuous mode [ 881.787396][ T26] audit: type=1326 audit(1772480542.016:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 881.859694][ T26] audit: type=1326 audit(1772480542.016:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 881.987017][ T26] audit: type=1326 audit(1772480542.016:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4df2f9e007 code=0x7ffc0000 [ 882.048876][ T26] audit: type=1326 audit(1772480542.016:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 882.117562][ T26] audit: type=1326 audit(1772480542.016:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 882.236839][ T26] audit: type=1326 audit(1772480542.026:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 882.284267][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.349581][ T26] audit: type=1326 audit(1772480542.026:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 882.379394][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.417435][ T26] audit: type=1326 audit(1772480542.026:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 882.533258][ T26] audit: type=1326 audit(1772480542.026:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18572 comm="syz.0.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df2f9c799 code=0x7ffc0000 [ 882.656857][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 882.796054][T18609] overlayfs: missing 'workdir' [ 883.401614][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.957400][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 884.446626][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.759167][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.085458][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 885.487004][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.180144][T18635] overlayfs: missing 'workdir' [ 886.522927][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.759282][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.563099][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.801124][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.043304][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.141400][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4194'. [ 888.602222][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.659525][T18661] netlink: 'syz.5.4203': attribute type 12 has an invalid length. [ 889.456419][T18663] loop3: detected capacity change from 0 to 128 [ 889.640516][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.761012][T18667] device syzkaller0 entered promiscuous mode [ 889.779295][T18669] overlayfs: missing 'workdir' [ 889.832434][T18667] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 889.941051][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4211'. [ 890.275816][T18672] device syzkaller0 entered promiscuous mode [ 890.310396][T18686] netlink: 'syz.0.4213': attribute type 1 has an invalid length. [ 890.691952][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.838986][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.080939][T18701] loop0: detected capacity change from 0 to 128 [ 891.785331][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.521558][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.840143][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.080218][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.882478][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.890657][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.919335][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.765514][T18702] netlink: 'syz.1.4218': attribute type 12 has an invalid length. [ 895.853104][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4225'. [ 895.997186][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.028522][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 896.075825][T18726] device syzkaller0 entered promiscuous mode [ 896.187059][T18726] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 896.258844][T18732] netlink: 'syz.4.4227': attribute type 1 has an invalid length. [ 896.690646][T18746] loop4: detected capacity change from 0 to 128 [ 896.919217][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.019175][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.057588][T18757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4238'. [ 898.002855][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 898.045606][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.075561][T18759] netlink: 'syz.3.4236': attribute type 12 has an invalid length. [ 898.116770][T18768] device syzkaller0 entered promiscuous mode [ 898.279321][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.079499][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.093226][T18787] device syzkaller0 entered promiscuous mode [ 899.103333][T18787] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 899.293512][T18812] netlink: 'syz.3.4246': attribute type 1 has an invalid length. [ 899.527273][T18814] bond2: (slave bridge2): making interface the new active one [ 899.591222][T18814] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 899.742116][T18816] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 899.870898][T18829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4252'. [ 899.969358][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.034260][T18835] device syzkaller0 entered promiscuous mode [ 900.120186][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.728794][T18853] device syzkaller0 entered promiscuous mode [ 900.751194][T18853] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 900.870891][T18859] netlink: 'syz.4.4265': attribute type 1 has an invalid length. [ 900.887959][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 900.933001][T18865] loop5: detected capacity change from 0 to 16 [ 901.051915][T18865] erofs: (device loop5): mounted with root inode @ nid 36. [ 901.094721][T18863] bond6: (slave bridge2): making interface the new active one [ 901.128604][T18863] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 901.142832][T18865] syz.5.4264: attempt to access beyond end of device [ 901.142832][T18865] loop5: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 901.166827][T18867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4266'. [ 901.173382][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.200466][T18865] syz.5.4264: attempt to access beyond end of device [ 901.200466][T18865] loop5: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 901.226703][T18873] syz.5.4264: attempt to access beyond end of device [ 901.226703][T18873] loop5: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 901.329950][T18873] syz.5.4264: attempt to access beyond end of device [ 901.329950][T18873] loop5: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 901.635088][T18880] device syzkaller0 entered promiscuous mode [ 901.746313][T18881] device syzkaller0 entered promiscuous mode [ 902.197892][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'. [ 902.227117][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.239102][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'. [ 902.312629][T18902] device syzkaller0 entered promiscuous mode [ 902.319000][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 902.374379][T18902] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 902.598009][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4280'. [ 903.239009][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.319168][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.569116][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.909812][T18938] device syzkaller0 entered promiscuous mode [ 904.078558][T18947] device syzkaller0 entered promiscuous mode [ 904.578929][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4295'. [ 904.604857][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.820723][T18964] program syz.1.4290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 905.668757][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.709838][T18986] device syzkaller0 entered promiscuous mode [ 905.905605][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 906.098102][T18997] device syzkaller0 entered promiscuous mode [ 906.146303][T18999] block device autoloading is deprecated and will be removed. [ 906.181909][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4310'. [ 906.285130][T14075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.688580][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.877712][T19022] program syz.1.4315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 907.391373][T19035] device syzkaller0 entered promiscuous mode [ 907.630932][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 907.719258][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.142592][T19057] device syzkaller0 entered promiscuous mode [ 908.769735][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.974508][T19080] device syzkaller0 entered promiscuous mode [ 909.089814][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 909.159206][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.348971][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.510905][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 909.791251][T19105] loop3: detected capacity change from 0 to 256 [ 909.809322][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.891760][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 909.891777][ T26] audit: type=1800 audit(1772480570.236:576): pid=19105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4346" name="bus" dev="loop3" ino=1048636 res=0 errno=0 [ 909.980477][T19108] device syzkaller0 entered promiscuous mode [ 910.665146][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 910.819918][T19116] device syzkaller0 entered promiscuous mode [ 910.839689][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.879209][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.931266][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 912.096909][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 912.359063][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.374488][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.929580][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.938368][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.947542][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.957988][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.919155][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 914.039328][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.929112][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.079303][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.131227][T19209] overlayfs: upper fs does not support file handles, falling back to index=off. [ 917.161879][ T4363] net_ratelimit: 2 callbacks suppressed [ 917.161898][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.039307][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.049571][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.058457][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.123140][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.439012][T15812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.548582][T19172] device syzkaller0 entered promiscuous mode [ 918.588788][T19214] tipc: Started in network mode [ 918.593743][T19214] tipc: Node identity c61e5183e886, cluster identity 4711 [ 918.636336][T19214] tipc: Enabled bearer , priority 0 [ 918.648135][T19221] tipc: Resetting bearer [ 919.159869][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.535233][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 919.936651][T19244] loop0: detected capacity change from 0 to 512 [ 919.991371][T19244] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 920.039485][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.199405][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.826382][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 921.249525][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.281415][ T4363] net_ratelimit: 1 callbacks suppressed [ 922.281435][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.251130][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.330852][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.880331][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.890464][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.900582][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.519978][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.574911][T19212] tipc: Disabling bearer [ 924.594307][T15812] tipc: Node number set to 781734275 [ 924.609209][T19272] netlink: 'syz.0.4392': attribute type 1 has an invalid length. [ 924.838433][T19274] bond5: (slave bridge2): making interface the new active one [ 924.872516][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 924.895773][T19274] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 924.919134][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.999833][T19275] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 925.159212][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 925.316035][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 925.799723][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.840788][T19308] device syzkaller0 entered promiscuous mode [ 925.959305][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.289345][T19320] loop0: detected capacity change from 0 to 256 [ 926.321971][T19317] tipc: Started in network mode [ 926.342073][T19317] tipc: Node identity f241686a3a2b, cluster identity 4711 [ 926.354458][T19320] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 926.373672][T19317] tipc: Enabled bearer , priority 0 [ 926.399186][T19315] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 926.440189][T19320] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 926.460988][T19316] tipc: Resetting bearer [ 926.494835][T19327] netlink: 'syz.5.4409': attribute type 1 has an invalid length. [ 926.713030][T19313] tipc: Disabling bearer [ 926.742254][T19330] qfq: no options [ 926.802194][T19327] bond1: (slave gretap1): making interface the new active one [ 926.840661][T19327] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 927.079805][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 927.357712][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 927.558922][ T951] net_ratelimit: 1 callbacks suppressed [ 927.558943][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.882876][T19361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4419'. [ 928.045914][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 928.046359][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.495524][T19376] tipc: Started in network mode [ 928.538813][T19376] tipc: Node identity 3a3c1b1ec60d, cluster identity 4711 [ 928.580265][T19376] tipc: Enabled bearer , priority 0 [ 928.606626][T19376] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 928.631751][T19376] tipc: Resetting bearer [ 928.669104][T19383] netlink: 'syz.5.4426': attribute type 1 has an invalid length. [ 928.849775][T19374] tipc: Disabling bearer [ 928.886783][T19387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4426'. [ 928.976224][T19383] bond2: (slave bridge1): making interface the new active one [ 929.000046][T19383] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 929.007518][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.079079][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.654326][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 929.782163][T19410] device syzkaller0 entered promiscuous mode [ 930.119272][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.200820][T19425] netlink: 'syz.0.4439': attribute type 1 has an invalid length. [ 930.258567][T19425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4439'. [ 930.363134][T19425] bond6: (slave bridge3): making interface the new active one [ 930.373109][T19425] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 930.603198][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.159136][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.459068][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 931.560797][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.565732][ T4696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.568109][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.645464][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 932.199982][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.622426][T19479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4460'. [ 932.652969][T19479] netlink: 'syz.1.4460': attribute type 2 has an invalid length. [ 933.009393][T19487] device syzkaller0 entered promiscuous mode [ 933.094305][T19491] Disabled LAPIC found during irq injection [ 933.239197][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.647291][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.084043][T19525] program syz.5.4471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 934.279237][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.588067][T19533] netlink: 'syz.1.4474': attribute type 12 has an invalid length. [ 934.759463][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.805490][T19543] netlink: 'syz.0.4477': attribute type 1 has an invalid length. [ 935.009844][T19544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4477'. [ 935.102249][T19548] bond7: (slave bridge4): making interface the new active one [ 935.151312][T19548] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 935.319067][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.557190][T19564] loop4: detected capacity change from 0 to 128 [ 935.770354][T19570] device syzkaller0 entered promiscuous mode [ 936.370084][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.627648][T19591] loop2: detected capacity change from 0 to 7 [ 936.650853][T19591] Dev loop2: unable to read RDB block 7 [ 936.659965][T19591] loop2: AHDI p1 p2 p3 [ 936.679043][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.689787][T19591] loop2: partition table partially beyond EOD, truncated [ 936.719116][T19591] loop2: p1 start 1601398130 is beyond EOD, truncated [ 936.764748][T19591] loop2: p2 start 1702059890 is beyond EOD, truncated [ 937.239851][T19609] netlink: 'syz.0.4494': attribute type 1 has an invalid length. [ 937.319223][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.356066][T19614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4494'. [ 937.409313][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.870595][T19631] tipc: Started in network mode [ 937.875560][T19631] tipc: Node identity 124c2a1b3635, cluster identity 4711 [ 937.940977][T19631] tipc: Enabled bearer , priority 0 [ 937.976728][T19634] device syzkaller0 entered promiscuous mode [ 938.045893][T19631] tipc: Resetting bearer [ 938.081102][T19630] tipc: Resetting bearer [ 938.250391][T19630] tipc: Disabling bearer [ 938.467336][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.490249][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.504852][T19672] ipt_CLUSTERIP: Please specify destination IP [ 939.719674][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.879799][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.148458][T19696] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 940.539196][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.301823][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 941.559002][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.454919][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.511956][T19750] loop3: detected capacity change from 0 to 256 [ 942.570636][T19749] loop1: detected capacity change from 0 to 256 [ 942.599108][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.759875][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.785602][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 943.640015][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.421029][T19786] Disabled LAPIC found during irq injection [ 944.679388][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.639476][ T4696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.745543][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.798941][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.255721][T19816] netlink: 'syz.4.4569': attribute type 1 has an invalid length. [ 946.759293][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.798962][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.111669][T19859] netlink: 'syz.1.4583': attribute type 1 has an invalid length. [ 948.199919][ T4696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.839275][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.847456][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.477424][T19896] loop0: detected capacity change from 0 to 256 [ 949.878979][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.067057][T19913] loop4: detected capacity change from 0 to 764 [ 950.416062][T19913] hsr0 speed is unknown, defaulting to 1000 [ 950.809191][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 950.920116][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.400082][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.879394][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.958981][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.317041][T19977] netlink: 'syz.5.4620': attribute type 1 has an invalid length. [ 952.999219][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.759769][T20006] device syzkaller0 entered promiscuous mode [ 954.039419][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.919130][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.079197][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.477321][T20052] device syzkaller0 entered promiscuous mode [ 955.821892][T20056] loop4: detected capacity change from 0 to 8192 [ 956.118991][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.189957][T20069] netlink: 'syz.4.4656': attribute type 1 has an invalid length. [ 956.316467][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4656'. [ 956.400566][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4656'. [ 956.439410][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.562170][T20069] bond10: (slave bridge3): making interface the new active one [ 956.580066][T20069] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 956.706617][T20076] device syzkaller0 entered promiscuous mode [ 957.159412][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.799484][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.958899][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.199095][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.238485][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 959.239223][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.292234][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.705982][T20136] loop1: detected capacity change from 0 to 128 [ 961.000011][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.324481][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.479365][T14794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.011356][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 962.359045][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.399446][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.559935][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.044429][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.213526][T20182] loop4: detected capacity change from 0 to 256 [ 964.354582][ T26] audit: type=1804 audit(1772480624.696:577): pid=20183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4684" name="/newroot/306/file0/file1" dev="loop4" ino=1048646 res=1 errno=0 [ 964.439098][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.295347][T20124] netlink: 'syz.5.4669': attribute type 1 has an invalid length. [ 965.320172][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4669'. [ 965.330424][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4669'. [ 965.445760][T20154] tipc: Enabled bearer , priority 0 [ 965.459726][T20155] device syzkaller0 entered promiscuous mode [ 965.488774][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.499965][T20167] tipc: Resetting bearer [ 965.524062][T20150] tipc: Resetting bearer [ 965.532315][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 965.650067][T20150] tipc: Disabling bearer [ 965.885636][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 966.351927][T20213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4694'. [ 966.465185][T20213] device macvtap1 entered promiscuous mode [ 966.506858][T20213] device gretap0 entered promiscuous mode [ 966.516600][T20219] loop2: detected capacity change from 0 to 7 [ 966.529356][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.554098][T20219] Dev loop2: unable to read RDB block 7 [ 966.576053][T20219] loop2: AHDI p1 p2 p3 [ 966.586099][T20219] loop2: partition table partially beyond EOD, truncated [ 966.614565][T20219] loop2: p1 start 1601398130 is beyond EOD, truncated [ 966.637124][T20219] loop2: p2 start 1702059890 is beyond EOD, truncated [ 966.759563][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.869968][T20223] device syzkaller0 entered promiscuous mode [ 967.079059][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.325221][T20228] netlink: 'syz.0.4700': attribute type 1 has an invalid length. [ 967.451507][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4700'. [ 967.559490][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4700'. [ 967.570268][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.751087][T20236] bond9: (slave bridge5): making interface the new active one [ 967.786015][T20236] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 967.825825][T20241] tipc: Enabled bearer , priority 0 [ 967.856435][T20243] device syzkaller0 entered promiscuous mode [ 967.889763][T20243] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 967.939254][T20233] tipc: Resetting bearer [ 967.997349][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 968.018520][T20233] tipc: Disabling bearer [ 968.482997][T20274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4710'. [ 968.607585][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.653496][T20280] loop5: detected capacity change from 0 to 256 [ 969.226091][T20293] netlink: 'syz.3.4719': attribute type 1 has an invalid length. [ 969.263155][T20296] loop0: detected capacity change from 0 to 256 [ 969.269932][ T4273] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 969.319242][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.346830][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4719'. [ 969.390742][T20304] tipc: Enabled bearer , priority 0 [ 969.416123][T20304] device syzkaller0 entered promiscuous mode [ 969.462211][T20296] FAT-fs (loop0): Directory bread(block 64) failed [ 969.492749][T20296] FAT-fs (loop0): Directory bread(block 65) failed [ 969.500267][T20293] bond3: (slave bridge3): making interface the new active one [ 969.525562][T20296] FAT-fs (loop0): Directory bread(block 66) failed [ 969.530332][T20293] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 969.539546][T20296] FAT-fs (loop0): Directory bread(block 67) failed [ 969.557865][T20296] FAT-fs (loop0): Directory bread(block 68) failed [ 969.575114][T20296] FAT-fs (loop0): Directory bread(block 69) failed [ 969.586443][T20306] tipc: Resetting bearer [ 969.624912][T20296] FAT-fs (loop0): Directory bread(block 70) failed [ 969.639228][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.657692][T20296] FAT-fs (loop0): Directory bread(block 71) failed [ 969.664777][T20303] tipc: Resetting bearer [ 969.700034][T20296] FAT-fs (loop0): Directory bread(block 72) failed [ 969.717570][T20303] tipc: Disabling bearer [ 969.729907][T20296] FAT-fs (loop0): Directory bread(block 73) failed [ 970.119038][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.679089][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.802218][T20341] loop0: detected capacity change from 0 to 136 [ 971.719269][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.880273][ T4696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.727541][T20394] netlink: 'syz.4.4753': attribute type 1 has an invalid length. [ 972.769052][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.995415][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4753'. [ 973.115582][T20403] bond11: (slave bridge4): making interface the new active one [ 973.159411][ T951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.254870][T20403] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 973.801383][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.015065][T20434] loop2: detected capacity change from 0 to 7 [ 974.069210][T20434] Dev loop2: unable to read RDB block 7 [ 974.088866][T20434] loop2: AHDI p1 p2 p3 [ 974.093221][T20434] loop2: partition table partially beyond EOD, truncated [ 974.121563][T20434] loop2: p1 start 1601398130 is beyond EOD, truncated [ 974.141111][T20434] loop2: p2 start 1702059890 is beyond EOD, truncated [ 974.839098][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.080061][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.196042][T20463] device syzkaller0 entered promiscuous mode [ 975.417406][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 975.879183][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.013284][T20486] tipc: Enabled bearer , priority 0 [ 976.074118][T20489] device syzkaller0 entered promiscuous mode [ 976.129281][T20486] tipc: Resetting bearer [ 976.188983][T20484] tipc: Resetting bearer [ 976.198922][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.288818][T20484] tipc: Disabling bearer [ 976.697987][T20509] device syzkaller0 entered promiscuous mode [ 976.839706][T20514] loop2: detected capacity change from 0 to 7 [ 976.881235][T20514] Dev loop2: unable to read RDB block 7 [ 976.919357][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.943421][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.958924][T20514] loop2: AHDI p1 p2 p3 [ 976.963157][T20514] loop2: partition table partially beyond EOD, truncated [ 977.037377][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 977.039068][T20514] loop2: p1 start 1601398130 is beyond EOD, truncated [ 977.155117][T20514] loop2: p2 start 1702059890 is beyond EOD, truncated [ 977.329622][T20526] netlink: 'syz.3.4796': attribute type 1 has an invalid length. [ 977.595258][T20530] bond4: (slave bridge4): making interface the new active one [ 977.633153][T20530] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 977.959435][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.239052][T20548] tipc: Enabling of bearer rejected, failed to enable media [ 978.430232][T20555] device syzkaller0 entered promiscuous mode [ 978.501110][T20561] device syzkaller0 entered promiscuous mode [ 978.999134][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.239005][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.039142][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.123431][T20585] netlink: 'syz.0.4811': attribute type 1 has an invalid length. [ 980.431627][T20589] bond10: (slave bridge6): making interface the new active one [ 980.495912][T20589] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 980.839845][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.079034][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.490121][T20628] device syzkaller0 entered promiscuous mode [ 982.119239][T13108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.127483][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.287262][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.526846][T20646] netlink: 'syz.3.4829': attribute type 1 has an invalid length. [ 983.083626][T20651] tipc: Enabled bearer , priority 0 [ 983.084302][T20651] device syzkaller0 entered promiscuous mode [ 983.133916][T20651] tipc: Resetting bearer [ 983.150247][T20650] tipc: Resetting bearer [ 983.164122][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.364723][T20650] tipc: Disabling bearer [ 984.199121][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.249542][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.309547][T20691] overlayfs: missing 'lowerdir' [ 985.319617][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.961647][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.279363][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.511133][T20704] tipc: Enabled bearer , priority 0 [ 986.546845][T20704] device syzkaller0 entered promiscuous mode [ 986.640665][T20704] tipc: Resetting bearer [ 986.728120][T20703] tipc: Resetting bearer [ 986.962809][T20703] tipc: Disabling bearer [ 987.337569][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.879897][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.391972][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.400169][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.398981][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.651327][T20761] loop0: detected capacity change from 0 to 128 [ 990.177952][T20773] loop2: detected capacity change from 0 to 7 [ 990.439228][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.458788][T20773] Dev loop2: unable to read RDB block 7 [ 990.466883][T20782] loop4: detected capacity change from 0 to 256 [ 990.500359][T20773] loop2: AHDI p1 p2 p3 [ 990.578936][T20773] loop2: partition table partially beyond EOD, truncated [ 990.710024][T20773] loop2: p1 start 1601398130 is beyond EOD, truncated [ 990.761391][T20773] loop2: p2 start 1702059890 is beyond EOD, truncated [ 991.156202][ T4273] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 991.352480][T20807] loop0: detected capacity change from 0 to 128 [ 991.399283][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.479268][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.719772][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.156064][T20822] loop3: detected capacity change from 0 to 256 [ 992.519293][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.700050][T20836] loop2: detected capacity change from 0 to 7 [ 992.729317][T20836] Dev loop2: unable to read RDB block 7 [ 992.735044][T20836] loop2: AHDI p1 p2 p3 [ 992.761716][T20836] loop2: partition table partially beyond EOD, truncated [ 992.782686][T20836] loop2: p1 start 1601398130 is beyond EOD, truncated [ 992.822926][T20836] loop2: p2 start 1702059890 is beyond EOD, truncated [ 992.832504][T20842] loop0: detected capacity change from 0 to 1764 [ 993.000780][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.007443][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.014587][T14794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.377037][ T4273] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 993.558960][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.442780][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.618974][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.639011][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.007567][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 996.679235][T15790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.759332][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.343017][T20972] loop5: detected capacity change from 0 to 128 [ 997.479689][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.719105][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.123405][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.309871][T20989] device syzkaller0 entered promiscuous mode [ 998.338911][T20993] mmap: syz.3.4945 (20993) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 998.858838][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.362991][ T4273] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 999.900661][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.520641][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.925790][T15822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.312450][ T4273] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1001.410951][ T83] ================================================================== [ 1001.426335][ T83] BUG: KASAN: slab-out-of-bounds in drop_buffers+0x65/0x6a0 [ 1001.433746][ T83] Read of size 4 at addr ffff8880761b47e0 by task kswapd0/83 [ 1001.441149][ T83] [ 1001.443497][ T83] CPU: 1 PID: 83 Comm: kswapd0 Not tainted syzkaller #0 [ 1001.450465][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1001.460558][ T83] Call Trace: [ 1001.463867][ T83] [ 1001.466817][ T83] dump_stack_lvl+0x188/0x24e [ 1001.471599][ T83] ? __lock_acquire+0x7d10/0x7d10 [ 1001.476716][ T83] ? show_regs_print_info+0x12/0x12 [ 1001.481957][ T83] ? load_image+0x400/0x400 [ 1001.486532][ T83] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1001.492069][ T83] ? __virt_addr_valid+0x188/0x540 [ 1001.497343][ T83] ? __virt_addr_valid+0x465/0x540 [ 1001.502493][ T83] ? drop_buffers+0x65/0x6a0 [ 1001.507124][ T83] print_report+0xa8/0x210 [ 1001.511665][ T83] kasan_report+0x10b/0x140 [ 1001.516337][ T83] ? drop_buffers+0x65/0x6a0 [ 1001.520942][ T83] kasan_check_range+0x235/0x290 [ 1001.525887][ T83] drop_buffers+0x65/0x6a0 [ 1001.530316][ T83] try_to_free_buffers+0x205/0x520 [ 1001.535437][ T83] shrink_folio_list+0x2127/0x7aa0 [ 1001.540713][ T83] ? reclaim_clean_pages_from_list+0xb30/0xb30 [ 1001.546872][ T83] ? isolate_folios+0x568a/0x6330 [ 1001.551910][ T83] ? mark_lock+0x94/0x320 [ 1001.556245][ T83] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1001.562236][ T83] ? lock_chain_count+0x20/0x20 [ 1001.567092][ T83] ? reset_ctrl_pos+0x72b/0x7b0 [ 1001.571948][ T83] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1001.577168][ T83] ? lockdep_hardirqs_on+0x94/0x140 [ 1001.582370][ T83] evict_folios+0xa80/0x22a0 [ 1001.586962][ T83] ? verify_lock_unused+0x140/0x140 [ 1001.592178][ T83] ? folio_inc_gen+0x400/0x400 [ 1001.596946][ T83] ? __lock_acquire+0x7d10/0x7d10 [ 1001.601975][ T83] ? should_run_aging+0x486/0x550 [ 1001.607008][ T83] shrink_lruvec+0xc90/0x3d50 [ 1001.611694][ T83] ? mem_cgroup_shrink_node+0x710/0x710 [ 1001.617247][ T83] ? __lock_acquire+0x7d10/0x7d10 [ 1001.622282][ T83] ? __might_sleep+0xd0/0xd0 [ 1001.626934][ T83] ? percpu_ref_put+0x19/0x180 [ 1001.631742][ T83] ? mem_cgroup_calculate_protection+0x4c/0x3f0 [ 1001.637987][ T83] ? mem_cgroup_iter+0x37/0x4a0 [ 1001.642840][ T83] ? shrink_node+0x680/0x28d0 [ 1001.647538][ T83] ? kswapd+0x1c3e/0x3360 [ 1001.651960][ T83] ? kswapd+0xa4f/0x3360 [ 1001.656200][ T83] ? try_to_inc_max_seq+0x2831/0x2ae0 [ 1001.661579][ T83] ? kswapd_run+0x160/0x160 [ 1001.666102][ T83] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1001.671996][ T83] ? wake_bit_function+0x200/0x200 [ 1001.677114][ T83] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1001.683040][ T83] ? __kthread_parkme+0x162/0x1c0 [ 1001.688145][ T83] ? kthread+0x29d/0x330 [ 1001.692388][ T83] ? kswapd_run+0x160/0x160 [ 1001.696901][ T83] ? kthread_blkcg+0xd0/0xd0 [ 1001.701497][ T83] ? ret_from_fork+0x1f/0x30 [ 1001.706142][ T83] [ 1001.709168][ T83] [ 1001.711493][ T83] Allocated by task 4382: [ 1001.715832][ T83] kasan_set_track+0x4b/0x70 [ 1001.720431][ T83] __kasan_kmalloc+0x8e/0xa0 [ 1001.725025][ T83] __kmalloc+0xb0/0x240 [ 1001.729233][ T83] iomap_page_create+0x14a/0x600 [ 1001.734199][ T83] iomap_readpage_iter+0x240/0x8f0 [ 1001.739341][ T83] iomap_read_folio+0x332/0x8c0 [ 1001.744190][ T83] filemap_read_folio+0x16b/0x770 [ 1001.749349][ T83] do_read_cache_folio+0x2a0/0x760 [ 1001.754462][ T83] erofs_bread+0x18e/0x670 [ 1001.758939][ T83] erofs_namei+0x29c/0xf50 [ 1001.763364][ T83] erofs_lookup+0x14b/0x390 [ 1001.767867][ T83] path_openat+0xfce/0x2ee0 [ 1001.772385][ T83] do_filp_open+0x1f1/0x430 [ 1001.776889][ T83] do_sys_openat2+0x150/0x4b0 [ 1001.781698][ T83] __x64_sys_openat+0x135/0x160 [ 1001.786548][ T83] do_syscall_64+0x4c/0xa0 [ 1001.790968][ T83] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.796874][ T83] [ 1001.799205][ T83] The buggy address belongs to the object at ffff8880761b4780 [ 1001.799205][ T83] which belongs to the cache kmalloc-96 of size 96 [ 1001.813133][ T83] The buggy address is located 0 bytes to the right of [ 1001.813133][ T83] 96-byte region [ffff8880761b4780, ffff8880761b47e0) [ 1001.826769][ T83] [ 1001.829095][ T83] The buggy address belongs to the physical page: [ 1001.835503][ T83] page:ffffea0001d86d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880761b4b00 pfn:0x761b4 [ 1001.846957][ T83] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1001.854521][ T83] raw: 00fff00000000200 ffffea000123ae48 ffffea00009e3a88 ffff888017441780 [ 1001.863108][ T83] raw: ffff8880761b4b00 000000000020000d 00000001ffffffff 0000000000000000 [ 1001.871685][ T83] page dumped because: kasan: bad access detected [ 1001.878090][ T83] page_owner tracks the page as allocated [ 1001.883829][ T83] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4274, tgid 4274 (syz-executor), ts 77639610611, free_ts 75126244555 [ 1001.903565][ T83] post_alloc_hook+0x173/0x1a0 [ 1001.908417][ T83] get_page_from_freelist+0x1a1e/0x1ab0 [ 1001.913983][ T83] __alloc_pages+0x1ec/0x4f0 [ 1001.918582][ T83] alloc_slab_page+0x5d/0x160 [ 1001.923272][ T83] new_slab+0x87/0x2c0 [ 1001.927361][ T83] ___slab_alloc+0xbc6/0x1240 [ 1001.932079][ T83] __kmem_cache_alloc_node+0x1a0/0x260 [ 1001.937540][ T83] kmalloc_trace+0x26/0xe0 [ 1001.941968][ T83] dst_cow_metrics_generic+0x52/0x1b0 [ 1001.947377][ T83] icmp6_dst_alloc+0x2d8/0x460 [ 1001.952168][ T83] ndisc_send_skb+0x424/0x14e0 [ 1001.956961][ T83] addrconf_rs_timer+0x2d1/0x630 [ 1001.961903][ T83] call_timer_fn+0x1ac/0x670 [ 1001.966547][ T83] __run_timers+0x53e/0x800 [ 1001.971049][ T83] run_timer_softirq+0x63/0xf0 [ 1001.975816][ T83] handle_softirqs+0x2a1/0x930 [ 1001.980625][ T83] page last free stack trace: [ 1001.985297][ T83] free_unref_page_prepare+0x8b4/0x9a0 [ 1001.990771][ T83] free_unref_page+0x2e/0x3f0 [ 1001.995481][ T83] __unfreeze_partials+0x1a5/0x200 [ 1002.000612][ T83] put_cpu_partial+0x17c/0x250 [ 1002.005390][ T83] qlist_free_all+0x76/0xe0 [ 1002.009900][ T83] kasan_quarantine_reduce+0x144/0x160 [ 1002.015359][ T83] __kasan_slab_alloc+0x1e/0x80 [ 1002.020223][ T83] slab_post_alloc_hook+0x4b/0x480 [ 1002.025332][ T83] kmem_cache_alloc+0x123/0x2f0 [ 1002.030184][ T83] mas_alloc_nodes+0x2ec/0x890 [ 1002.035010][ T83] mas_preallocate+0x161/0x3c0 [ 1002.039774][ T83] vma_expand+0x27a/0x880 [ 1002.044155][ T83] mmap_region+0xbd2/0x1ca0 [ 1002.048660][ T83] do_mmap+0x964/0xfd0 [ 1002.052730][ T83] vm_mmap_pgoff+0x1c1/0x2d0 [ 1002.057348][ T83] ksys_mmap_pgoff+0x516/0x6f0 [ 1002.062121][ T83] [ 1002.064482][ T83] Memory state around the buggy address: [ 1002.070108][ T83] ffff8880761b4680: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1002.078197][ T83] ffff8880761b4700: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1002.086267][ T83] >ffff8880761b4780: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1002.094345][ T83] ^ [ 1002.101561][ T83] ffff8880761b4800: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1002.109633][ T83] ffff8880761b4880: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1002.117695][ T83] ================================================================== [ 1002.132329][T14801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.148508][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.185158][T21069] overlayfs: missing 'lowerdir' [ 1003.159063][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.280534][ T83] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1003.287802][ T83] CPU: 0 PID: 83 Comm: kswapd0 Not tainted syzkaller #0 [ 1003.294771][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1003.304857][ T83] Call Trace: [ 1003.308163][ T83] [ 1003.311115][ T83] dump_stack_lvl+0x188/0x24e [ 1003.315834][ T83] ? memcpy+0x3c/0x60 [ 1003.319882][ T83] ? show_regs_print_info+0x12/0x12 [ 1003.325135][ T83] ? load_image+0x400/0x400 [ 1003.329681][ T83] panic+0x2e5/0x730 [ 1003.333594][ T83] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1003.339769][ T83] ? bpf_jit_dump+0xd0/0xd0 [ 1003.344306][ T83] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1003.350338][ T83] ? _raw_spin_unlock+0x40/0x40 [ 1003.355220][ T83] check_panic_on_warn+0x80/0xa0 [ 1003.360322][ T83] ? drop_buffers+0x65/0x6a0 [ 1003.364947][ T83] end_report+0x66/0x110 [ 1003.369315][ T83] kasan_report+0x118/0x140 [ 1003.374024][ T83] ? drop_buffers+0x65/0x6a0 [ 1003.378646][ T83] kasan_check_range+0x235/0x290 [ 1003.383627][ T83] drop_buffers+0x65/0x6a0 [ 1003.388085][ T83] try_to_free_buffers+0x205/0x520 [ 1003.393220][ T83] shrink_folio_list+0x2127/0x7aa0 [ 1003.398350][ T83] ? reclaim_clean_pages_from_list+0xb30/0xb30 [ 1003.404518][ T83] ? isolate_folios+0x568a/0x6330 [ 1003.409580][ T83] ? mark_lock+0x94/0x320 [ 1003.413918][ T83] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1003.419909][ T83] ? lock_chain_count+0x20/0x20 [ 1003.424765][ T83] ? reset_ctrl_pos+0x72b/0x7b0 [ 1003.429633][ T83] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1003.434834][ T83] ? lockdep_hardirqs_on+0x94/0x140 [ 1003.440034][ T83] evict_folios+0xa80/0x22a0 [ 1003.444642][ T83] ? verify_lock_unused+0x140/0x140 [ 1003.449850][ T83] ? folio_inc_gen+0x400/0x400 [ 1003.454620][ T83] ? __lock_acquire+0x7d10/0x7d10 [ 1003.459649][ T83] ? should_run_aging+0x486/0x550 [ 1003.464683][ T83] shrink_lruvec+0xc90/0x3d50 [ 1003.469373][ T83] ? mem_cgroup_shrink_node+0x710/0x710 [ 1003.474949][ T83] ? __lock_acquire+0x7d10/0x7d10 [ 1003.479997][ T83] ? __might_sleep+0xd0/0xd0 [ 1003.484625][ T83] ? percpu_ref_put+0x19/0x180 [ 1003.489405][ T83] ? mem_cgroup_calculate_protection+0x4c/0x3f0 [ 1003.495655][ T83] ? mem_cgroup_iter+0x37/0x4a0 [ 1003.500512][ T83] ? shrink_node+0x680/0x28d0 [ 1003.505227][ T83] ? kswapd+0x1c3e/0x3360 [ 1003.509579][ T83] ? kswapd+0xa4f/0x3360 [ 1003.513822][ T83] ? try_to_inc_max_seq+0x2831/0x2ae0 [ 1003.519206][ T83] ? kswapd_run+0x160/0x160 [ 1003.524069][ T83] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1003.529964][ T83] ? wake_bit_function+0x200/0x200 [ 1003.535084][ T83] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1003.540984][ T83] ? __kthread_parkme+0x162/0x1c0 [ 1003.546018][ T83] ? kthread+0x29d/0x330 [ 1003.550259][ T83] ? kswapd_run+0x160/0x160 [ 1003.554765][ T83] ? kthread_blkcg+0xd0/0xd0 [ 1003.559360][ T83] ? ret_from_fork+0x1f/0x30 [ 1003.563993][ T83] [ 1003.567478][ T83] Kernel Offset: disabled [ 1003.571802][ T83] Rebooting in 86400 seconds..