last executing test programs: 1m48.499602056s ago: executing program 1 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket(0x10, 0x803, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x53b}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x2c}}, 0x18) 1m48.4959956s ago: executing program 1 (id=446): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x10, @any, 0x0, 0x1}, 0xe) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xfd}], 0x1, 0x61, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000001817000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) (async) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) (async) tkill(r0, 0x12) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000280)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x64, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4f19, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "1088558ac196ebf6058c31838408abd8c37b9e0a41c4eb7880c1ed23dda63930", "ac5fad7a6ce1f10461b1291316cf5fce", {"f12cf0df7bbc3bbe0b2255df9ee40d2b", "8fa637ad379375161040d60929af7e3c"}}}}}}}}}, 0x9e) ptrace(0x8, r0) (async) ptrace(0x4207, r0) 1m48.489905501s ago: executing program 1 (id=447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003240)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="433df4e6f0b92bf3d3a02a40740b3fda71dc52edb0e59267874b53150085a11152c29991e88d5b1dddcfbca1663393b108", 0x31}, {&(0x7f0000000300)="bafd", 0x2}], 0x2, 0x0, 0x0, 0x4040c04}], 0x1, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) 1m48.489373009s ago: executing program 1 (id=448): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x10}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0xc001, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r1}, 0xc) r2 = socket$inet(0x2, 0x800, 0x3) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000140)='/dev/input/mice\x00', &(0x7f0000000180)='],\xf9.\x00', &(0x7f00000001c0)='![$-!\x00', &(0x7f0000000200)='F%!@z\'+\'}!+\x00', &(0x7f0000000240)=':*\x00', &(0x7f0000000280)='/dev/input/mice\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='/dev/dlm-control\x00']}, &(0x7f00000003c0), 0x100) sendto$inet(r2, &(0x7f0000000400)="7597f8fe479383c7ec3d75479b440eccb1aaa934fef33d4c09e5e90861565317690ca4f090230f84525724ed294b86d01e9164d0652be6d68db5e4dbb242c16f46f15c7c80047196ef9527cfa70cc6620f6167b74d751b6fccb9bc1b0911bde98e3630b5b43c6feb5e2f046ed72588a5b6d39f1f8c3a5f141d5a603ebfa15f8ba35ee998162927e30281408d1986e64456855c5fcc0167370c3c9f9efe389466979ac70f038093075e2304f4c01140ad24dcb605466bcd1c6a54d3469fa321a37bcab8e750a0ab04a1e3ff116b8c86bac1e8c4e171eb5174ee10769279bee1e8ae", 0xe1, 0x20000820, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000580)={&(0x7f0000000540)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000700)={r3, r4, r6, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000740)={{0x2b, @local, 0x4e21, 0x4, 'rr\x00', 0x0, 0x1, 0x6a}, {@multicast2, 0x4e24, 0x2, 0x8, 0x7fff}}, 0x44) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0], 0x0, 0xb0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x16, 0xa, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@generic={0x9, 0x3, 0x8, 0xfff2, 0x568}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}]}, &(0x7f0000000840)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000880)=""/12, 0x41100, 0x58, '\x00', 0x0, @fallback=0x6, r1, 0x8, &(0x7f00000008c0)={0x8, 0x7}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x4, 0x1, 0x101}, 0x10, r7, r0, 0x3, 0x0, &(0x7f0000000c40)=[{0x3, 0x1, 0xd, 0xf}, {0x0, 0x1, 0x3, 0x6}, {0x3, 0x2, 0x4, 0xb}], 0x10, 0x9}, 0x94) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000e40)={0x48, 0x8, r0, 0x0, 0x3, 0x267343, 0xe6, &(0x7f0000000d40)="aaf3c9e981d07b99a86bc59ee036b8cfd554cd8f7fc59a0fe11bab9a8715330a290b08a806220801875ad50c4741a74190668e2b3237b178acb91d4cdb896abca49dca3f4428f799eea75ac463d688b32bdb7c7145868fa1dffed9169ac9b810037201f7e69100d06110f67d0e827ad081cc2865adc4ff1995c1e618e7aeebf59cad6db5906aa44a35c7ea1eca0c212b545fe8e5a71188c1bf745968bbe2c17f5c7668f8dd68455ceef89592d7dcdb310903a8596bbedfaccd16f3d664439179599112c0fbe86442fb906d0c92b3360bbab85674bae90a4840ac918ddaf7717dacc5b54e1d05", 0x10000}) r9 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$TCGETS2(r9, 0x802c542a, &(0x7f0000000ec0)) r10 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000f40)={0x0, 0xa, [{r0, 0x0, 0x1000000000000, 0x3000}, {r1, 0x0, 0x4000, 0x8000}, {r9, 0x0, 0xfffffffff0000000, 0x1000000}, {r0, 0x0, 0xfffffffff0002000, 0xfffffffdf0002000}, {r1, 0x0, 0xfffffffff0016000, 0x10000}, {r0, 0x0, 0x10000, 0xfffffffffffff000}, {r1, 0x0, 0xfffffffffffff000, 0x1000000000000}, {r0, 0x0, 0x1000000, 0x1000}, {r1, 0x0, 0x10000}, {r0, 0x0, 0x100000000, 0x2000}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002840)={&(0x7f0000001040)={0x17cc, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfe, {0x15}, [@generic="3533f9dd2deb3db837c99d0b183bad1603254f5ff95b522d0575f47166554fa95a402e40bb25111126f119b9ede36de687790c79eb6c8180c0de5e54b79148b4bd5ab73e4dd5784cdc80dd5504b487e934ec9552f38b86de81eb12da20fa799619a8b339e2ee8f2f9ed6f49e37cf57f7230a", @nested={0xc5, 0x8b, 0x0, 0x1, [@generic="6d9836fea08e75e380b9d71335c381d5e86b09b6c8afbb723c854760080767bd203647ddffe708bc521c25230af19d4a56ad840fd406239f29f5062ad04516d4ed194cd5a05518d225f60375f40950962eaddefd08df8b757c", @generic="172c666b446140d56205622dbc227a5f0aad0595c845242458098aff5c56ab9bb52ed1ad18eeb64ed723c8e5d8b3c82ec4cbba184b01f42ad02bf233edf090b9ade84d8993c0f6ef38e1cad7ebd6713b93529c0e1e7faf0ebebf80c020f3429db3400216", @nested={0x4, 0x7e}]}, @nested={0x186, 0xf5, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x4}, @generic="45d73ef7822dc2f424247f687d310e9daf0b38008868fa950bb8cacb18967c4e043dd7815729ee655f", @generic="75fc167abe2c1d726cca8418776b581a60bc714c317ed21389e9749630c2a7f9907e11917f8cc5d45ecab224ed07b16e69fc17ee9cbda722f206f61df42e0c14f77ff20df64b584de110883ef1be03c8efb8", @generic="70a9e09d77ff1a974a1dee6c76fcce0bede5a57613750bda73750f1fbb2c0cabeaa456406c4d63bf2f0973839fb03c825c83e9b0fab4d6ae46b3289bc545afa04ff80e52757fd99ae36348a0d93af1bd1f745be232842e0ab3a3fb06b34263c0a149d89eafc50325611d7bb14282d354de45f06b6dbd3f0017cead3ebeb996a1b665dea32169dc32b031e9498895c29aab2d8da1dd6df134df4a907aa42327569ceea6e70fe2070ff7244c4cd975dba2bbcf20351584a6a3ad39c69f517cf3d0c2e0a45ba1b61a6b6af6dff8e1a8842752794caaa29128cf13b037", @typed={0x8, 0x3a, 0x0, 0x0, @fd=r10}, @nested={0x4, 0xf4}, @typed={0x8, 0x41, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xde}]}, @typed={0xc, 0xf6, 0x0, 0x0, @u64=0x4}, @nested={0x241, 0x82, 0x0, 0x1, [@generic="d98e2ba09cc970e257c1e11d820e1a71ad54db52ce4da0598db20702915f87e1109b1c9834311bfc235e5e846909c9bd45b2623eef2443e4bcada105a18d0e1b094a58f042102fc355a5c8e0deefc33c985664f23eb23d795c1ae20f11b7f1c9472a6e2f4f982f52ef65bdf4d1a661246f3cb4e2fac7c4da0bb8db522849098d2f1f7467bb3a8459c0", @nested={0x4, 0x5e}, @generic="029587a59888f2eadae75ecc9596dff5d38c5e23a0ff0ea0f468cd25d84f1f401184e297cbe4af5107ae25944993d3746a689efcd7130487dbafd5d2fc9f3fb3bbdbfbe883d063a104e29d3a0250f99f13ac5748d208bc9d6ace2151adac09d9a51c27bbf8ae84a27ebc31352ff4febef1b291c9523eb70fdc45dea36ae9595c36e0f6c5f1f2d8ae289a30e9ccf334cd3ba2226a5c11110cc0b51d1312b2125c731fdb46f9c9368a0d1b61f23a8bc15427432bd219ba3622a831a2219f01edfaebfb8aa6bd7aa1eb0a1a477a52830a62", @typed={0xc9, 0x163, 0x0, 0x0, @binary="d8d6ac6ef547c21bd2eb95d41b60c919f7d510eedc601de604c069a2eb6b8bd64fcb668f5b5b9fcde47313d67052583aacdbba982ac0f0fb67dc92e0c49e0b67630dbff5a19164b94c39ba3e042b9796cc8bb5dee8ef9506af29d67feb58cd411cb0a77b54890d5283bbfd2812ed704f1dc5d483193e79c6c9574eccccdd0e9b99ea897e7f62d6e0b068b08bed436380af4c23a0e419e09a2c3d4a14a1ae216e598a42050de9691dc7c4297e78b0ca43d7880326c38cd3f7114ddce7532923938ad0ab43d6"}, @typed={0x14, 0x5f, 0x0, 0x0, @ipv6=@local}]}, @generic="0cbcb5c584c8b20164cb1ddfaedc9d5cf34961c245fb1203f6c2cf186d09a4176ace7c3ed967e7d4df3511646f9530ef33b1f00486f6f3d3d0cc53cc2c259ba9db867e9eb83e3abacc9b7e65be7312db72ed435bcee77e8fbc34233b7ebda7b0ab2dd44497ede95517b30cd002b358a6da0a32cd5aff9260af5b5f853560ae5e2a7bb80e925e9165c196c341bd4fb8b6059f60c0887ba10968ecd3fa3cdc563dde1c344036f63be6c0541bd4006b61e040b7a7c46c672e81697452ee34035067bf2be1ac31a6879b43e0", @generic="31f722f966a85d4702a21e1579785207199fd72d0653609f15d42742d97f68cee0941d3f89580cc1cd8d21a4e3e939769d90d8c6cb64d9db59e756af3b5740d432769f4fae3a72f6baf8a70022bdcf71772edb140226a6a1e866fc5c52f9af0e33fb97f018f7176ec334da08ad70b487daf142003f71a5219a09a6e52c4073a8721e65df65949900aa78c67c20c3c291918dcd11959575fdef867f7cb7201fc5247a22519638ef8c113f6c5f799042790fd56e7a455df7a531ac0156f61d7b5721f5", @generic="44d105686e7f4221b3a9457db85aa1702b371053e23065c48ba1deb0ef2dae30756eed12b0d3108144173bddfe42a4dec20e277a272422fad80c3a6dbe8f6beac27878bc5b65833276fc4ceb07770d5133e97af7aa1e739f87cad6c317c8ea1b77a37d64ea574180534531262e61ea1c97f3a5ac560ba006bac9e9de4e1bc50a2ee588277d883ac81bf2", @generic="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", @nested={0x8f, 0x1, 0x0, 0x1, [@generic="d3c0755888b8e625753cbd4391eae78dd992813fb8d9b8f0685530336cc0ffed7211ff60638916b56402d830a4134ac0451c6276972397f76fd2381f1d0fcfe4bf5c3775ff731824c079f06634cd4638b060c1ac5773128b8be8eb29015cd279bcd3643a2d2edbc57b50f66b88bbc9f015f398368ba90a1d9a8be82764fc330ef19227d8a592143a16292e"]}]}, 0x17cc}, 0x1, 0x0, 0x0, 0x4840}, 0x40811) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f00000028c0)=0x1) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000002980)={&(0x7f0000002900)=[0x0, 0x0, 0x0], &(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r5, 0xe0e0e0e0}) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f00000029c0)=0x894) futex_waitv(&(0x7f0000003800)=[{0x6, &(0x7f0000002a00)=0x401, 0x2}, {0x4, &(0x7f0000002a40)=0x401, 0x2}, {0x3ff, &(0x7f0000002a80)=0x7fffffffffffffff, 0x82}, {0x80000000, &(0x7f0000002ac0)=0x9, 0x82}, {0x5, &(0x7f0000002b00)=0x8000000000000000, 0x2}, {0x3, &(0x7f0000002b40)=0x1, 0x2}, {0x0, &(0x7f0000002b80)=0x6, 0x2}, {0x77f, &(0x7f0000002bc0)=0x6, 0x2}, {0xe7, &(0x7f0000002c00)=0x6, 0x2}, {0xa, &(0x7f0000002c40)=0x7, 0x82}, {0x2, &(0x7f0000002c80), 0x2}, {0x5, &(0x7f0000002cc0)=0x7e, 0x2}, {0x8000000000000000, &(0x7f0000002d00)=0x10001, 0x2}, {0x200, &(0x7f0000002d40)=0x7, 0x2}, {0x7f, &(0x7f0000002d80)=0x9, 0x2}, {0xd7, &(0x7f0000002dc0)=0xcd, 0x2}, {0x1, &(0x7f0000002e00)=0x8001, 0x82}, {0xd7, &(0x7f0000002e40)=0x7, 0x82}, {0x9, &(0x7f0000002e80)=0x7ff, 0x2}, {0x0, &(0x7f0000002ec0)=0x7, 0x2}, {0x5c, &(0x7f0000002f00)=0x7, 0x82}, {0x5, &(0x7f0000002f40)=0x8, 0x2}, {0x8, &(0x7f0000002f80), 0x80}, {0xe00000, &(0x7f0000002fc0)=0x8, 0x2}, {0x2, &(0x7f0000003000), 0x82}, {0x9, &(0x7f0000003040)=0xf4, 0x7fd24341a24bcab1}, {0xffffffffffffffff, &(0x7f0000003080)=0x4, 0x82}, {0xf2, &(0x7f00000030c0)=0x4, 0x2}, {0x80000000, &(0x7f0000003100)=0x3, 0x82}, {0x7, &(0x7f0000003140)=0x9, 0x82}, {0x3, &(0x7f0000003180), 0x2}, {0x7, &(0x7f00000031c0)=0x3b, 0x82}, {0x0, &(0x7f0000003200)=0x9, 0x2}, {0xfffffffffffffeff, &(0x7f0000003240)=0x8, 0x82}, {0x4, &(0x7f0000003280)=0x101, 0x2}, {0x4, &(0x7f00000032c0)=0x200, 0x82}, {0x4, &(0x7f0000003300)=0xfffffffffffffffa, 0x83}, {0xee, &(0x7f0000003340)=0x9, 0x82}, {0xfffffffffffffff8, &(0x7f0000003380)=0x4, 0x82}, {0x1, &(0x7f00000033c0)=0x6, 0x82}, {0x3ff, &(0x7f0000003400)=0x8, 0x2}, {0x3, &(0x7f0000003440)=0x401, 0x2}, {0x8, &(0x7f0000003480)=0x2, 0x2}, {0x1, &(0x7f00000034c0)=0xf9d, 0x2}, {0x0, &(0x7f0000003500)=0x8, 0x2}, {0x1ff, &(0x7f0000003540)=0x8, 0x2}, {0x3, &(0x7f0000003580)=0x3}, {0x1, &(0x7f00000035c0)=0x2, 0x82}, {0x2, &(0x7f0000003600)=0x8, 0x82}, {0x7fff, &(0x7f0000003640)=0x6, 0x2}, {0x4, &(0x7f0000003680)=0x80000001, 0x82}, {0x0, &(0x7f00000036c0)=0xa, 0x82}, {0x10001, &(0x7f0000003700)=0x5, 0x2}, {0xffffffffffffffff, &(0x7f0000003740)=0x1, 0x82}, {0x1, &(0x7f0000003780)=0x2}, {0x3, &(0x7f00000037c0)=0x100, 0x82}], 0x38, 0x0, &(0x7f0000003d40), 0x1) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003d80), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000003dc0)={{0x1, 0x1, 0x18, r10, {0x0}}, './file0\x00'}) getgroups(0x1, &(0x7f0000003e00)=[0xee01]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f0000003e40)={{0x1, 0x1, 0x18, r2, {r13, r14}}, './file0\x00'}) fsetxattr$security_evm(r12, &(0x7f0000003e80), &(0x7f0000003ec0)=@v2={0x3, 0x1, 0x14, 0x1, 0x22, "737f872240d936575ba3a93b704562f57eb7f731618fd49de799ed7fc0a5b293129e"}, 0x2b, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r15, 0x4010942a, &(0x7f0000003f00)={0x1, 0x6}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000003fc0)={@loopback}, 0x14) 1m48.487517441s ago: executing program 1 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0c009900c60000001e0000000a0006000802110000000000040067001c00330008010000ffe28baa7a3c6ea0ffffff8a43848811000001ff"], 0x54}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000314010000000000000000000900020073797a32000000000800410072786500140033006272696467655f736c6176655f3000000900020073797a32000000000800410073697700140033006e6574706369300000000000000000000900020073797a310000000008004100727865001400330076657468315f746f5f626f6e640000000900020073797a30000000000800410072786500140033007465616d3000001800000000000000000900020073797a3200000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000090) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000710025042dbd70007f00000007000000", @ANYRES32=r8, @ANYBLOB="0ccc3b04587796faf8b6143ad9b96e4d0001800800010063000100f015778a2b7f55ee9297413d02d5d7ddb4295ea460b225c6e919c61e1d20c30532c6fab611e0fb482a1ab79d34ca0b367f82592c5e36576a8bf5902d88a08853215fcc191d2a194ba92ee555eca78508bb3e4eddb9e91b8c1804837eddc892e79eb7f93c9e0eaceace56769c96ca19ee7b8f05d65916b77cb4d83bb26424989d2d2b8c3e"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1m46.791154938s ago: executing program 1 (id=458): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200003, 0x200, 0x0, 0x7}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0000000000000019b70800000000a7b09059bcad5b9d0000bc82000000000000a6020000f8ffeaffb703000008000000ac0300fdff000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5}, 0x14) syz_emit_ethernet(0xcd9, &(0x7f0000002500)=ANY=[], 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x4000000, 0xf, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c76657273696f2e3d3970323030302e75be001672e9ae8b2da31b8ee2ba1979cd20d7b84fe63cd385b08f68a8f9a400f9cfd5c4916ee69876a08a0100bfe4ea838b7ea525d49edec890a58a97688c1a59d6ecc51673d4245f1506f9be0b6bc6"]) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000cc0)={0x9, "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"}) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)) 25.975178334s ago: executing program 32 (id=458): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200003, 0x200, 0x0, 0x7}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0000000000000019b70800000000a7b09059bcad5b9d0000bc82000000000000a6020000f8ffeaffb703000008000000ac0300fdff000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5}, 0x14) syz_emit_ethernet(0xcd9, &(0x7f0000002500)=ANY=[], 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x4000000, 0xf, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c76657273696f2e3d3970323030302e75be001672e9ae8b2da31b8ee2ba1979cd20d7b84fe63cd385b08f68a8f9a400f9cfd5c4916ee69876a08a0100bfe4ea838b7ea525d49edec890a58a97688c1a59d6ecc51673d4245f1506f9be0b6bc6"]) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000cc0)={0x9, "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"}) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)) 4.017452296s ago: executing program 5 (id=770): r0 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) socket(0x15, 0x5, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) 3.96432365s ago: executing program 5 (id=773): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)={[{@fat=@check_normal}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@fat=@errors_continue}, {@utf8}, {@utf8}, {@fat=@discard}, {@rodir}, {@utf8no}, {@fat=@quiet}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2be, &(0x7f0000002880)="$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") r0 = socket(0x2b, 0x80801, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 3.934509731s ago: executing program 5 (id=774): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x4, 0x1002, 0x80000000}}) 3.861798218s ago: executing program 5 (id=777): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x80001, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0xcd2}}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_on}, {@index_off}]}) syz_open_dev$video4linux(&(0x7f0000000000), 0x876, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x876, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x4, 0x40, "516e5401595402ec901ceb14d0e1fb6c29a3cccda7c3fd02", {0x2, 0xe4}, 0xffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x55eb471eb70fd60d) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000001340)={0x400, 0x3, 0x1, 0xd3, &(0x7f00000010c0)=""/211, 0x0, 0x0, 0x0, 0x0}) 3.797443743s ago: executing program 5 (id=779): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x96) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x80, 0x8001030, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) getdents64(r2, &(0x7f0000000000)=""/59, 0x3b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000c}, 0x40004) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000140)={0x1, 0x1800000}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r4, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) sendfile(r2, r2, 0x0, 0x400) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x2d03de) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x54, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2c}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2d4, 0x60}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x4024004) 3.413746334s ago: executing program 5 (id=786): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) (fail_nth: 2) 3.396270992s ago: executing program 33 (id=786): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) (fail_nth: 2) 1.292858742s ago: executing program 3 (id=829): r0 = userfaultfd(0x1) (async) r1 = userfaultfd(0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ff7000/0x3000)=nil, 0x3000}}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000522000/0x4000)=nil, 0x4000}, 0x3}) (async) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000080)=0x3e, 0x4) (async) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) (async) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 1.263841637s ago: executing program 2 (id=830): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000500)=ANY=[@ANYBLOB="6e66732c696f636861727365743d69736f383835392d372c726f6469722c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d810e000000000000616d653d77696e6e742c756e695f786c6174653d312c636865636b3d6e6f726d616c2c636f6465706167653d313235352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c696f636861727365743d6575632d6a702c726f6469722c696f636861727365743d6d61637475726b6973682c756e695f786c6174653d312c00"], 0x2, 0x289, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101000, 0x8) ioprio_set$uid(0x3, 0x0, 0x0) r2 = eventfd2(0xe, 0x801) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x160, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x96}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x48000}, 0x40) read$eventfd(r2, &(0x7f0000000000), 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="62737115f491d174c9f6125222456be48c771162bde5a34bd11009c6659dedf1ccc1a38233cc280e", 0x28) write$P9_RREAD(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xe1) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x1}], 0x1f4, &(0x7f0000000240)={0x0, 0x989680}) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000500)=ANY=[@ANYBLOB="6e66732c696f636861727365743d69736f383835392d372c726f6469722c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d810e000000000000616d653d77696e6e742c756e695f786c6174653d312c636865636b3d6e6f726d616c2c636f6465706167653d313235352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c696f636861727365743d6575632d6a702c726f6469722c696f636861727365743d6d61637475726b6973682c756e695f786c6174653d312c00"], 0x2, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101000, 0x8) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) eventfd2(0xe, 0x801) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r1) (async) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x160, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x96}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) read$eventfd(r2, &(0x7f0000000000), 0x8) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="62737115f491d174c9f6125222456be48c771162bde5a34bd11009c6659dedf1ccc1a38233cc280e", 0x28) (async) write$P9_RREAD(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xe1) (async) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x1}], 0x1f4, &(0x7f0000000240)={0x0, 0x989680}) (async) 1.231219016s ago: executing program 0 (id=831): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "af90151a5dd598c6a6f07a701cc150dd4f2639568ea6baa1edc5b8c720c51d5c438f08f1377c60f83d32830646581c116f58f00751fea1d8862e29ad015b0985", 0x28}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x31}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x61, 0x65, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x33]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$link(0x8, r1, r2) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x61, 0x35, 0x32, 0x66, 0x33, 0x0, 0x62, 0x34, 0x37, 0x36, 0x39, 0x64, 0x36, 0x33, 0x64, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x2b}, 0x48, r0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) 1.230829614s ago: executing program 3 (id=832): syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @value=0x4}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000008400000005000000fba70000020000005ddb432c4ec0896f15f479b33406c9a66ecd28c530f31cd5536ed9adf9baa4aee904db9ec1b25aed9e075589349e2ffec8728319d38d3b1737c3ccbe7fa85c5441e62399d4f704978b9ab93438aeb9f0c0b13f306c7ef5b04f977494"], 0x18, 0x40000}], 0x1, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) inotify_init1(0x800) r6 = syz_io_uring_setup(0x3d9d, &(0x7f0000000400)={0x0, 0x8f6b, 0x2, 0xfffffffe, 0x3cc}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0x4, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0}}) io_uring_enter(r6, 0x8320f, 0x58e7, 0x3c, 0x0, 0x47) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) 1.129620548s ago: executing program 0 (id=833): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000019c0)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="a510dd9e390f6f14972a5477c9424ff108ce68c125b1c0fc73933f426bc823c5b2f34e128bd8882535f4ea54ac8015e7fe09625e6e171384eef2001ba3803f30f126a7b85480d26eeea71e54b2f2f4efbfced6c6dc675c538ebf23ef2a13428004e179f32274bed0b5a0504cdfeef257e2f3ccee345eddd0c0821f36feaa14704fe202798a2a16f8c873ad90a824e82e0063457b5fa4cd01", @ANYRESDEC, @ANYRES16, @ANYRES32], 0x205bd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) 1.129065833s ago: executing program 0 (id=834): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4044802) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1001000000000000100100000b"], 0x120}, 0x4000000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @remote, 0x6}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0x2, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x8, 0x806}, &(0x7f0000000140)=0x90) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @local}, 0x14) 1.07494265s ago: executing program 0 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2001}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9) 1.001617775s ago: executing program 0 (id=837): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x12, 0x8, 0xbba}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) (async, rerun: 32) unshare(0x2c020400) (rerun: 32) getdents64(r2, &(0x7f0000000140)=""/53, 0x35) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x4, &(0x7f0000000600)={[{@grpquota}, {@noload}, {@discard}, {@nodiscard}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xda5}}, {@noinit_itable}, {@orlov}]}, 0x0, 0x62c, &(0x7f0000000b40)="$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") (async, rerun: 64) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x0) (async, rerun: 64) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4b8d7b15cf12b397, 0x0) getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) (async, rerun: 64) r5 = socket(0x2, 0x2, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x2, {@in6_addr=@loopback={0xe000000000000000}, 0x800}}}]}, 0x38}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r10, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r11, &(0x7f0000000000), 0x0}, 0x20) 996.68432ms ago: executing program 2 (id=839): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x206, 0x2, 0xf7, 0x8, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x2b, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x44004001}, 0x4004) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)) 942.74444ms ago: executing program 0 (id=841): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffff, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@utf8}, {@fat=@usefree}, {@utf8no}, {@uni_xlateno}, {@fat=@sys_immutable}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x532}}, {@shortname_mixed}, {@numtail}, {@utf8no}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$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") file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) mount(0x0, &(0x7f0000000000)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0xb}}, 0x20) syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xc3, 0xc6, 0x45, 0x8, 0x1519, 0x443, 0x7439, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf4, 0xc0, 0x15, "", [{{0x9, 0x4, 0xf5, 0x5, 0x0, 0x2, 0xd, 0x0, 0x3}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x459}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@random="1ab6f17df651", @random="18fbb984c1f1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @loopback, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x59, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x6}]}}}}}}}}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 805.6992ms ago: executing program 2 (id=842): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x218243, 0x48) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x100000001, 0x0, 0x0, {0x5, 0x9, 0x1}}, {0x4, 0x3, 0x0, {0x1, 0x1, 0x2}}], 0x2, 0x20, 0xffff, 0x8}) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@loopback, @broadcast}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 761.479282ms ago: executing program 2 (id=844): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="e00000001000010000000000fcdbdf2565636228626c6f77666973682d67656e657269632900"], 0xe0}, 0x1, 0x0, 0x0, 0x28000004}, 0x4008004) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00028005000300010000000800014000000009080002400000000d20000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r4, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0xb}}, 0x4e9c0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x3c, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x4000884) sendmsg$NFT_BATCH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a090500ff33e6a2bb0000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x44) (async) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) (async) ioctl$COMEDI_INSNLIST(r7, 0x8010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x200}) 727.89214ms ago: executing program 6 (id=787): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x8, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='+', 0x1, 0x2cf2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x1, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x8, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) pwrite64(r2, &(0x7f0000000140)='+', 0x1, 0x2cf2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x40) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) (async) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async) 605.705002ms ago: executing program 2 (id=845): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x6211, &(0x7f0000000540)={0x0, 0xc6e6, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r3}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0xfc, 0x6, @local}, 0x14) 598.058407ms ago: executing program 6 (id=848): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x3000000, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 513.463599ms ago: executing program 6 (id=849): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1 1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x200) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003080101360000000000000000000000060002480000000005000300ff000000040004"], 0x28}}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)="7b496f79a6cf03d89b483e28762acf81c451f5b3766e3d74dff186f2d42699e13ff6c8e9f6c53ae6f1f68b4bf9c12873213bdf8153e8058f0da2aac8ed1a6af3c508a906d1532bb5eddb549308f103a1814e62d6220c8d9806d68dd91881c38ef46eca7f315de921adb97fc606cdc2e0ea9d250da8b465f9130ce3327ad546294fad9dd90399656bfda090ab61d6e9cdb744e3828b505ec665b8fdaa6a851aa362638851ae395e2e245a9d3ff674dc0e44a0908f5078eae5ad3d8c511ab6a8b2878a50ca393f958e5d9b", 0xca, r5}, 0x68) write(r4, &(0x7f00000001c0)='2\x00', 0x1) ioctl$COMEDI_SUBDINFO(r4, 0x80486402, &(0x7f00000003c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) sendmsg$sock(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1c0000005e0001000000000000000000000000000200000008000000", 0x1c}], 0x1}, 0x0) 337.664207ms ago: executing program 6 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8c08, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x10000000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfe56}}, 0x0) 327.527756ms ago: executing program 3 (id=851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x814) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xa4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7c}, {0xa, 0x4e21, 0x7fffffff, @mcast2, 0x401}, r4, 0x4}}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r5, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @rand_addr=0x64010102, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0xb42, @private, @dev={0xac, 0x14, 0x14, 0x21}}}}}}}, 0x0) 327.022947ms ago: executing program 4 (id=852): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x176e}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b405000000000000611034000000000063012000000000009500000000000000f4c32bf3df05a034da1b7fdcf645f3580fe49be316bdb665f1b42ff7ef474df46c0f44ef6fb5e031f7cfef720e05af49fad256a74dbc05ae220102a88002814a88e2fac93f6bba2d4d44db49d45e449d31fa52c326486bc1c908dd9b372f7a455c9566ed5ee0a65f3909cfe1219a0a38b416dc55927f32ab452e0ccaf193c27af10a12c42ef8a3199d0fad0a9521094cc7acdcdff80231586f968fab531515e8aaaa1d4a225592ebf062bba60775d0b7daa8ba68c0cd0642ce3efca015362a7b63f629629efb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 315.540597ms ago: executing program 6 (id=853): syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) (async) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) (async) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) (async) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) 241.640789ms ago: executing program 6 (id=854): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000880), 0x0) r1 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x8, 0x0, 0x4}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000000c0), 0x0, 0xc0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x67}) timer_create(0x3, 0x0, &(0x7f0000000400)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) dup(0xffffffffffffffff) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) 241.359764ms ago: executing program 3 (id=855): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x58, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) syz_emit_ethernet(0x8e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x58, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async) 166.057244ms ago: executing program 4 (id=856): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r6, 0x6, 0x0, 0x0, &(0x7f00000003c0)) r7 = gettid() move_pages(r7, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 130.669337ms ago: executing program 4 (id=857): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x6}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x800002, 0x7fff800800000}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x0, 0x1, 0xb7, 0x1}) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x5}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x1c, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0x4}, @typed={0x5, 0x0, 0x0, 0x0, @binary=')'}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060108000000000000000005000005050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080012"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xd, @private0, 0x2}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040), 0x8) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r5, 0x5}, &(0x7f00000002c0)=0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r5, 0x10}, 0x8) (rerun: 32) sendto$inet6(r1, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 59.211104ms ago: executing program 4 (id=858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 47.922007ms ago: executing program 3 (id=859): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.575934ms ago: executing program 3 (id=860): setns(0xc9, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f00000001c0), &(0x7f00000002c0), 0x4, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r4, 0x16, 0x0, @void}, 0x10) mount$binder(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x200002, &(0x7f0000000240)=ANY=[@ANYBLOB="73746174733d676c2c6d61783d30303030303030303030303030303030303030322c73746174733d676c6f62616c2c6d61736b3b4320e4b315efca41442c7063723d3830303030302f30303030653d6c6f7765726469722c6c615c2551dc54f563d7"]) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0xc, &(0x7f0000000000)=0x5402, 0x4) r6 = socket(0x8, 0x2, 0x0) setsockopt(r6, 0x105, 0x42020054, &(0x7f0000000200)="01000000", 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8ef, 0x17, 0x200, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r7, r7, 0x0, 0xb) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) r8 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r8, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ')+'}, {0x20, '[k'}, {0x20, 'no&\x80\x85\xfe\x19\x17y\xb2\x82\x81AR\x86lo-\xc5hX\xbbt\b\x86xookie'}, {0x20, 'B-+'}, {0x20, 'hostdata'}, {0x20, '*'}], 0xa, '\vT'}, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xe4) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}]}) 1.410923ms ago: executing program 4 (id=861): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000000)={0x8, 0xfffffffffffffffd, 0x6}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="182400000000000000000000000000001835a800", @ANYRES32, @ANYBLOB="0000000002000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x4b, 0xfffffffffffffffe, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdb8, 0x10, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000040)) 482.935µs ago: executing program 4 (id=862): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x5, 0x1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 0s ago: executing program 2 (id=863): r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="a24306c4b3d36ef997268f6dd40d32b4a6bf88384900f19c53566dcd212d4eeb715f88345f20ebf271e6d323d00eca654b81ad773318fb94508a02d55690dd258535115fb705ca66543d7b0f23ebc4d870b4145584f3d5211ce6c6522dffe9490c86a67dcb161fc8ffea307f850ec5401a51f73478141549e64f955be9e0bfbb", 0x80, 0xfffffffffffffffa) (async) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', ',\xb0%', 0x20, 0x7fff, 0x20, [0x31, 0x64]}, 0x31, r1) (async) r2 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000240)=0x3, 0x5, 0x7) (async) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x3, &(0x7f0000ffb000/0x3000)=nil, 0x5) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x8, 0x4, 0x7, 0x834}, {0x8001, 0x0, 0xfe, 0x81}, {0x0, 0x6, 0x21, 0xe1a}, {0x6a7, 0xd, 0x5, 0x7fff}, {0x7, 0x7, 0x7, 0x8ea6}]}) (async) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000) (async) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) keyctl$instantiate(0xc, r1, &(0x7f0000000400)=@encrypted_new={'new ', 'default', 0x20, 'user:', '@@,^*C+*-$:', 0x20, 0x1}, 0x32, r2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000640)={r4, &(0x7f0000000540)='(%.\x00', 0x48382, &(0x7f0000000580)={@align=0x100000000, {0x1, 0x9249, 0x3, 0xc1}}, 0xf7, &(0x7f00000005c0), &(0x7f0000000600)=0x7}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000680)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2}) (async) map_shadow_stack(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x15, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0xba, &(0x7f00000007c0)=""/186, 0x41000, 0x2, '\x00', 0x0, @xdp=0x25, r6, 0x8, &(0x7f0000000880)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0xb72, 0x4}, 0x10, 0x0, r6, 0x5, &(0x7f0000000900)=[r6, r6], &(0x7f0000000940)=[{0x4, 0x5, 0x3, 0x3}, {0x5, 0x2, 0x10, 0x2}, {0x3, 0x5, 0x6, 0x5}, {0x5, 0x4, 0x3, 0x5}, {0x2, 0x5, 0xf, 0x3}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@fallback=r5, 0x15, 0x0, 0x1000, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r3, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000c40)=[0x0], &(0x7f0000000c80)=[0x0, 0x0], 0x0, 0x2f, &(0x7f0000000cc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@map=r6, r7, 0x28, 0x38, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000f00)={0x2, 'veth0_macvtap\x00', 0x4}, 0x18) r10 = getpid() pipe2(&(0x7f0000000f40), 0x80800) (async) syz_clone3(&(0x7f0000001100)={0xcb96fe474116281c, &(0x7f0000000f80)=0xffffffffffffffff, &(0x7f0000000fc0), &(0x7f0000001000)=0x0, {0x2d}, &(0x7f0000001040)=""/62, 0x3e, &(0x7f0000001080)=""/56, &(0x7f00000010c0)=[r10, r10, r10, r10], 0x4}, 0x58) write(r11, &(0x7f0000001180)="4a62e25f00ec234eaa4ac7915f8541735171bd6e3deff4e51693b12e148a", 0x1e) (async) r13 = getpgid(r12) (async) r14 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r13, r10, 0x7, r11, &(0x7f00000011c0)={r14, r7, 0x1000}) kernel console output (not intermixed with test programs): parsing attributes in process `syz.0.192'. [ 45.998781][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 45.998943][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 46.182608][ T5658] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 46.407679][ T5660] Dev loop2: unable to read RDB block 7 [ 46.407721][ T5660] loop2: AHDI p1 p2 p3 [ 46.407733][ T5660] loop2: partition table partially beyond EOD, truncated [ 46.407825][ T5660] loop2: p1 start 4177526783 is beyond EOD, truncated [ 46.407836][ T5660] loop2: p2 start 1702059890 is beyond EOD, truncated [ 46.473746][ T5677] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 46.495360][ T5677] bond1: entered promiscuous mode [ 46.496616][ T5677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.506846][ T5677] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 46.508718][ T5677] overlayfs: failed to set xattr on upper [ 46.510049][ T5677] overlayfs: ...falling back to redirect_dir=nofollow. [ 46.511709][ T5677] overlayfs: ...falling back to uuid=null. [ 46.512111][ T5668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.203'. [ 46.517746][ T5677] evm: overlay not supported [ 46.584378][ T5688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 46.584412][ T5688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.208'. [ 46.598032][ T5688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.641077][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.669121][ T5694] ip_tables: iptables: counters copy to user failed while replacing table [ 46.672591][ T5696] EXT4-fs: inline encryption not supported [ 46.686106][ T5696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.723660][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.799238][ T5700] loop4: [ICS] [ 46.829386][ T4728] Bluetooth: hci0: Malformed LE Event: 0x1d [ 46.922013][ T5719] tipc: Started in network mode [ 46.923026][ T5719] tipc: Node identity 887766554433221100ffeeddccbbaa99, cluster identity 1 [ 47.012677][ T5722] EXT4-fs: inline encryption not supported [ 47.015061][ T5722] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.015089][ T5722] EXT4-fs (loop4): Test dummy encryption mode enabled [ 47.020607][ T5722] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002] [ 47.020897][ T5722] System zones: 0-5 [ 47.023544][ T5722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.034845][ T5722] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 47.067767][ T5728] EXT4-fs: quotafile must be on filesystem root [ 47.127940][ T5728] input: syz1 as /devices/virtual/input/input5 [ 47.149755][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.383801][ T5746] set_capacity_and_notify: 9 callbacks suppressed [ 47.383846][ T5746] loop1: detected capacity change from 0 to 1024 [ 47.441551][ T5746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.451519][ T5746] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.226: bg 0: block 112: padding at end of block bitmap is not set [ 47.455617][ T5746] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 47.455665][ T5746] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.455665][ T5746] [ 47.455676][ T5746] EXT4-fs (loop1): Total free blocks count 0 [ 47.455686][ T5746] EXT4-fs (loop1): Free/Dirty block details [ 47.455696][ T5746] EXT4-fs (loop1): free_blocks=0 [ 47.455712][ T5746] EXT4-fs (loop1): dirty_blocks=64 [ 47.455718][ T5746] EXT4-fs (loop1): Block reservation details [ 47.455724][ T5746] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 47.458404][ T5746] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.226: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.467689][ T4713] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 47.468656][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.491610][ T5755] loop1: detected capacity change from 0 to 512 [ 47.887268][ T5765] qrtr: Invalid version 176 [ 48.009957][ T5785] team0 (unregistering): Port device team_slave_0 removed [ 48.341186][ T5785] team0 (unregistering): Port device team_slave_1 removed [ 48.432985][ T5791] loop1: detected capacity change from 0 to 2048 [ 48.451568][ T5837] process 'syz.4.234' launched '/dev/fd/9' with NULL argv: empty string added [ 48.475181][ T4728] Bluetooth: hci1: command tx timeout [ 48.481289][ T5791] loop1: p2 < > p3 < p5 > p4 [ 48.482502][ T5791] loop1: partition table partially beyond EOD, truncated [ 48.486640][ T5791] loop1: p2 start 4278190080 is beyond EOD, truncated [ 48.490338][ T5791] loop1: p4 size 8192 extends beyond EOD, truncated [ 48.491918][ T5791] loop1: p5 size 8192 extends beyond EOD, truncated [ 48.551307][ T5844] loop3: detected capacity change from 0 to 256 [ 48.576222][ T5846] netlink: 'syz.4.237': attribute type 16 has an invalid length. [ 48.578041][ T5846] netlink: 'syz.4.237': attribute type 17 has an invalid length. [ 48.618275][ T5846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.620266][ T5846] veth0_to_team: entered promiscuous mode [ 48.648798][ T5846] vlan2: entered promiscuous mode [ 48.649928][ T5846] hsr0: entered promiscuous mode [ 48.651108][ T5846] vlan2: entered allmulticast mode [ 48.652243][ T5846] hsr0: entered allmulticast mode [ 48.653284][ T5846] hsr_slave_0: entered allmulticast mode [ 48.654990][ T5846] hsr_slave_1: entered allmulticast mode [ 48.712054][ T5850] proc: Bad value for 'gid' [ 48.726486][ T5849] loop4: detected capacity change from 0 to 128 [ 48.726989][ T5849] ext4: Unknown parameter 'fowner' [ 48.804464][ T5856] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 48.804497][ T5856] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 48.939695][ T5875] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 49.245684][ T5878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 49.248636][ T5878] bond2: (slave bond3): making interface the new active one [ 49.250871][ T5878] bond2: (slave bond3): Enslaving as an active interface with an up link [ 49.260878][ T5875] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 49.263955][ T5875] bond4 (unregistering): Released all slaves [ 49.306571][ T5888] veth1_macvtap: left promiscuous mode [ 49.307864][ T5888] macsec0: entered promiscuous mode [ 49.327285][ T5888] veth1_macvtap: entered promiscuous mode [ 49.330755][ T5888] macsec0: left promiscuous mode [ 49.418096][ T5897] loop2: detected capacity change from 0 to 512 [ 49.421256][ T5897] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 49.802745][ T5900] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.006729][ T5898] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.092071][ T5908] PKCS7: Unknown OID: [5] (bad) [ 50.092100][ T5908] PKCS7: Only support pkcs7_signedData type [ 50.144440][ T5913] loop4: detected capacity change from 0 to 1024 [ 50.174195][ T5913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.179083][ T5921] loop2: detected capacity change from 0 to 512 [ 50.181033][ T5921] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.367553][ T5933] syzkaller0: entered promiscuous mode [ 50.368775][ T5933] syzkaller0: entered allmulticast mode [ 50.376231][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.376347][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.376556][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.376685][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.376824][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.376890][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.377027][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.377449][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.377598][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.377676][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.377810][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.377872][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.378003][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.378064][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.378191][ T5919] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 50.378280][ T5919] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 50.392566][ T5919] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 50.393433][ T5919] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 50.393846][ T5919] FAT-fs (loop2): error, clusters badly computed (1 != 2) [ 50.734967][ T5948] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 50.980930][ T5817] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:13: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.986382][ T5817] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 50.989084][ T5817] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.989084][ T5817] [ 50.991847][ T4712] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 50.995456][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.038258][ T5955] loop4: detected capacity change from 0 to 512 [ 51.038648][ T5955] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.151017][ T5958] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: comm syz.4.270: Attempting to read directory block (0) that is past i_size (3) [ 51.338608][ T5960] loop1: detected capacity change from 0 to 1024 [ 51.340826][ T5960] EXT4-fs: Ignoring removed orlov option [ 51.344432][ T5960] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 51.482103][ T5964] EXT4-fs (loop1): 1 orphan inode deleted [ 51.601135][ T5977] IPVS: Unknown mcast interface: syzkaller0 [ 51.646762][ T5980] __nla_validate_parse: 13 callbacks suppressed [ 51.646808][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.2.275'. [ 51.647250][ T5980] Cannot find add_set index 0 as target [ 51.699210][ T4833] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.707465][ T4833] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.720820][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 51.855237][ T5990] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 51.883757][ T5992] fuse: Bad value for 'fd' [ 51.941658][ T5996] netlink: 'syz.4.281': attribute type 17 has an invalid length. [ 51.941940][ T5996] netlink: 'syz.4.281': attribute type 16 has an invalid length. [ 51.942208][ T5996] netlink: 152 bytes leftover after parsing attributes in process `syz.4.281'. [ 51.972241][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 52.083486][ T6007] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 52.093797][ T6007] EXT4-fs (loop1): 1 truncate cleaned up [ 52.406618][ T6017] set_capacity_and_notify: 2 callbacks suppressed [ 52.407720][ T6017] loop3: detected capacity change from 0 to 512 [ 52.473338][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 52.476309][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 52.478504][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 52.480607][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 52.482527][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 52.485601][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 52.506453][ T6030] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 52.596664][ T6021] loop1: detected capacity change from 0 to 32768 [ 52.657993][ T6021] loop1: [ICS] p1 p2 p3 p4 [ 52.658110][ T6021] loop1: p1 start 283205 is beyond EOD, truncated [ 52.658144][ T6021] loop1: p2 start 65535 is beyond EOD, truncated [ 52.658165][ T6021] loop1: p3 start 6823984 is beyond EOD, truncated [ 52.658184][ T6021] loop1: p4 start 1667592992 is beyond EOD, truncated [ 52.960829][ T6021] syzkaller0: entered promiscuous mode [ 52.960870][ T6021] syzkaller0: entered allmulticast mode [ 52.993358][ T6057] loop4: detected capacity change from 0 to 1024 [ 53.095125][ T6062] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 53.299797][ T6057] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.298: lblock 3 mapped to illegal pblock 3 (length 3) [ 53.305873][ T6057] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 53.308577][ T6057] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.308577][ T6057] [ 53.314177][ T6057] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm syz.4.298: lblock 8 mapped to illegal pblock 8 (length 5) [ 53.321058][ T6057] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 53.324608][ T6057] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.324608][ T6057] [ 53.336715][ T5823] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 112: padding at end of block bitmap is not set [ 53.342366][ T5823] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 53.342405][ T5823] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.342405][ T5823] [ 53.342421][ T5823] EXT4-fs (loop4): Total free blocks count 0 [ 53.342437][ T5823] EXT4-fs (loop4): Free/Dirty block details [ 53.342452][ T5823] EXT4-fs (loop4): free_blocks=0 [ 53.342478][ T5823] EXT4-fs (loop4): dirty_blocks=64 [ 53.356288][ T4712] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 53.469778][ T6076] loop3: detected capacity change from 0 to 1024 [ 53.472357][ T6076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.472734][ T6076] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.480458][ T6074] loop2: detected capacity change from 0 to 512 [ 53.486885][ T6072] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 53.487367][ T6076] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.487997][ T6076] EXT4-fs error (device loop3): ext4_quota_enable:7232: comm syz.3.303: inode #17152: comm syz.3.303: iget: illegal inode # [ 53.488019][ T6076] loop3: lost filesystem error report for type 5 error -117 [ 53.488285][ T6074] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 53.488393][ T6074] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.488639][ T6076] EXT4-fs (loop3): Remounting filesystem read-only [ 53.488654][ T6076] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix. [ 53.491734][ T6076] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 53.491987][ T6074] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 53.495017][ T6074] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 53.496187][ T6074] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 53.496214][ T6074] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.496662][ T6074] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.304: couldn't read orphan inode 13 (err -117) [ 53.496677][ T6074] loop2: lost filesystem error report for type 5 error -117 [ 53.565543][ T6085] loop1: detected capacity change from 0 to 4096 [ 53.628664][ T6085] EXT4-fs (loop1): Test dummy encryption mode enabled [ 53.647071][ T6085] EXT4-fs (loop1): shut down requested (1) [ 53.651803][ T6085] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #12: comm syz.1.306: directory missing '..' [ 53.663478][ T6092] loop2: detected capacity change from 0 to 512 [ 53.726196][ T6092] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 53.726268][ T6092] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 53.726776][ T6092] EXT4-fs (loop2): mount failed [ 53.809840][ T6112] loop4: detected capacity change from 0 to 1024 [ 53.810193][ T6112] EXT4-fs: Ignoring removed bh option [ 53.810221][ T6112] EXT4-fs: Ignoring removed bh option [ 53.816934][ T6112] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.903492][ T6112] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.312: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 53.909135][ T6112] EXT4-fs (loop4): Remounting filesystem read-only [ 53.965041][ T6123] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 54.247594][ T4799] kernel read not supported for file /mdstat (pid: 4799 comm: kworker/0:4) [ 54.463920][ T6156] netlink: 'syz.4.323': attribute type 10 has an invalid length. [ 54.471689][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.477459][ T6156] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 54.532617][ T6163] netlink: 'syz.1.328': attribute type 13 has an invalid length. [ 54.653097][ T6165] loop1: detected capacity change from 0 to 8192 [ 54.666136][ T6165] loop1: p1 p2 p3 p4[EZD] [ 54.667211][ T6165] loop1: partition table partially beyond EOD, truncated [ 54.667586][ T6165] loop1: p1 start 16384 is beyond EOD, truncated [ 54.667600][ T6165] loop1: p2 size 150994944 extends beyond EOD, truncated [ 54.668474][ T6165] loop1: p3 start 67108864 is beyond EOD, truncated [ 54.668489][ T6165] loop1: p4 size 33555584 extends beyond EOD, truncated [ 54.776902][ T6167] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 54.785759][ T6168] futex_wake_op: syz.1.329 tries to shift op by 32; fix this program [ 54.874948][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.996395][ T6174] Cannot find add_set index 0 as target [ 55.058761][ T6176] loop1: detected capacity change from 0 to 512 [ 55.066153][ T6176] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 55.073925][ T6176] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.333: iget: bad i_size value: 360287970189639680 [ 55.076873][ T6176] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.078181][ T6176] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.333: couldn't read orphan inode 15 (err -117) [ 55.078221][ T6176] loop1: lost filesystem error report for type 5 error -117 [ 55.088513][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 55.088967][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 55.118060][ T6176] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.121721][ T6176] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.333: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 55.143577][ T6176] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.333: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 55.274491][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.345104][ T6180] veth3: entered allmulticast mode [ 56.257033][ T6217] bridge0: port 3(gretap0) entered blocking state [ 56.259651][ T6217] bridge0: port 3(gretap0) entered disabled state [ 56.261224][ T6217] gretap0: entered allmulticast mode [ 56.263135][ T6217] gretap0: entered promiscuous mode [ 56.266696][ T6217] bridge0: port 3(gretap0) entered blocking state [ 56.266758][ T6217] bridge0: port 3(gretap0) entered forwarding state [ 56.275618][ T6219] bridge0: port 4(erspan0) entered blocking state [ 56.275842][ T6219] bridge0: port 4(erspan0) entered disabled state [ 56.275918][ T6219] erspan0: entered allmulticast mode [ 56.276399][ T6219] erspan0: entered promiscuous mode [ 56.278001][ T6219] bridge0: port 4(erspan0) entered blocking state [ 56.278024][ T6219] bridge0: port 4(erspan0) entered forwarding state [ 56.317911][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.385641][ T30] audit: type=1400 audit(56.370:4): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=6229 comm="syz.2.348" opid=6229 ocomm="syz.2.348" [ 56.488868][ T6239] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 56.503478][ T6248] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 56.579494][ T6256] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 56.811764][ T6248] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.354: bg 0: block 104: invalid block bitmap [ 56.811813][ T6248] loop2: lost filesystem error report for type 5 error -117 [ 56.814105][ T6248] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 56.814121][ T6248] loop2: lost filesystem error report for type 5 error -117 [ 56.814311][ T6248] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.354: invalid indirect mapped block 1 (level 1) [ 56.814326][ T6248] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.814946][ T6248] EXT4-fs (loop2): 1 truncate cleaned up [ 56.819753][ T6248] EXT4-fs error (device loop2): __ext4_iget:5533: inode #13: block 7962: comm syz.2.354: invalid block [ 56.821387][ T6248] EXT4-fs error (device loop2): __ext4_iget:5533: inode #13: block 7962: comm syz.2.354: invalid block [ 56.861277][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.861508][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.865193][ T6263] xt_nfacct: accounting object `syz1' does not exist [ 57.173899][ T6274] EXT4-fs (loop2): invalid first ino: 0 [ 57.214429][ T6274] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 57.400444][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.908975][ T6299] û: renamed from bond_slave_0 (while UP) [ 57.913068][ T6299] __nla_validate_parse: 33 callbacks suppressed [ 57.916138][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.917812][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.370'. [ 57.920034][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.370'. [ 57.957453][ T6305] overlayfs: missing 'lowerdir' [ 58.025783][ T6308] set_capacity_and_notify: 3 callbacks suppressed [ 58.026013][ T6308] loop4: detected capacity change from 0 to 8192 [ 58.028000][ T6308] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.314395][ T6316] loop4: detected capacity change from 0 to 512 [ 58.452399][ T6319] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:107: comm syz.4.376: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 58.458079][ T6319] EXT4-fs error (device loop4) in ext4_free_inode:363: Filesystem failed CRC [ 58.475548][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.828497][ T6323] loop0: detected capacity change from 0 to 128 [ 58.969069][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 59.114147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.141098][ T6334] loop2: detected capacity change from 0 to 4096 [ 59.141759][ T6334] EXT4-fs: inline encryption not supported [ 59.143700][ T6334] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.143721][ T6334] EXT4-fs (loop2): Test dummy encryption mode enabled [ 59.147788][ T6334] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 59.147828][ T6334] System zones: 0-5 [ 59.502921][ T6342] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 59.506314][ T6342] netlink: 52 bytes leftover after parsing attributes in process `syz.2.382'. [ 59.516318][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.559167][ T6351] bond1: entered promiscuous mode [ 59.560399][ T6351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.847051][ T6360] Cannot find add_set index 0 as target [ 60.130934][ T6374] loop0: detected capacity change from 0 to 1024 [ 60.135777][ T6374] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 60.138112][ T6374] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 60.140820][ T6374] EXT4-fs (loop0): invalid journal inode [ 60.307507][ T6378] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 60.549389][ T6381] loop4: detected capacity change from 0 to 512 [ 60.555912][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.564333][ T6381] loop4: detected capacity change from 0 to 512 [ 60.564732][ T6381] EXT4-fs: inline encryption not supported [ 60.564996][ T6381] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.565014][ T6381] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 60.565027][ T6381] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.565034][ T6381] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 60.585114][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 60.612199][ T6383] lo: Caught tx_queue_len zero misconfig [ 60.659275][ T6385] loop2: detected capacity change from 0 to 4096 [ 60.692274][ T6389] loop1: detected capacity change from 0 to 8192 [ 60.729675][ T6392] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 60.735529][ T6385] EXT4-fs (loop2): shut down requested (1) [ 60.737285][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.740004][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.748344][ T6389] loop1: p1 p2 p4 [ 60.752463][ T6389] loop1: p4 size 262144 extends beyond EOD, truncated [ 60.789511][ T6395] fuse: Unknown parameter '8a)ÀoMf²¶S‘C<6(xþ³)d3¦0x0000000000000004' [ 60.809131][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.813802][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 60.816288][ T4907] udevd[4907]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 60.954237][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.193577][ T6419] Injecting memory failure for pfn 0x13cdec at process virtual address 0x20000000 [ 61.206412][ T6419] Memory failure: 0x13cdec: recovery action for dirty LRU page: Recovered [ 61.914223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.284786][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.286029][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.396392][ T6433] bond0: Caught tx_queue_len zero misconfig [ 62.456093][ T6440] loop3: detected capacity change from 0 to 8 [ 62.456450][ T6440] squashfs: Unknown parameter '' [ 62.470847][ T6440] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 62.470885][ T6440] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 62.470895][ T6440] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 62.556000][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.035298][ T6452] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 63.055087][ T6454] loop2: detected capacity change from 0 to 512 [ 63.057404][ T6454] EXT4-fs (loop2): Test dummy encryption mode enabled [ 63.061884][ T6454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 63.061937][ T6454] System zones: 1-2, 4-12, 8-8 [ 63.062224][ T6454] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.414: iget: bad i_size value: 38620345925642 [ 63.062242][ T6454] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.063402][ T6454] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.414: couldn't read orphan inode 15 (err -117) [ 63.063423][ T6454] loop2: lost filesystem error report for type 5 error -117 [ 63.081754][ T15] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 63.082198][ T15] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 63.082212][ T15] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.082212][ T15] [ 63.082220][ T15] EXT4-fs (loop2): Total free blocks count 0 [ 63.082227][ T15] EXT4-fs (loop2): Free/Dirty block details [ 63.082306][ T15] EXT4-fs (loop2): free_blocks=0 [ 63.082322][ T15] EXT4-fs (loop2): dirty_blocks=1 [ 63.082333][ T15] EXT4-fs (loop2): Block reservation details [ 63.082340][ T15] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 63.091945][ T4720] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 63.118787][ T6458] loop2: detected capacity change from 0 to 8 [ 63.196355][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.197255][ T6460] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 63.197277][ T6460] netlink: 56 bytes leftover after parsing attributes in process `syz.2.416'. [ 63.202524][ T6466] binder: 6463:6466 ioctl c0306201 0 returned -14 [ 63.354428][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.508700][ T6495] syz.3.422 (6495): drop_caches: 2 [ 63.744567][ T6530] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 64.090495][ T6564] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 64.394513][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.411891][ T6570] loop4: detected capacity change from 0 to 8192 [ 64.419848][ T6570] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.476598][ T10] cfg80211: failed to load regulatory.db [ 64.478356][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.807811][ T6590] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 64.832454][ T6593] loop0: detected capacity change from 0 to 128 [ 64.847937][ T6593] EXT4-fs mount: 36 callbacks suppressed [ 64.848144][ T6593] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.866790][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 64.869665][ T6593] netlink: 36 bytes leftover after parsing attributes in process `syz.0.439'. [ 64.871788][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 64.873675][ T6593] netlink: 36 bytes leftover after parsing attributes in process `syz.0.439'. [ 64.912218][ T4714] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.946821][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.438'. [ 65.074703][ T6607] loop0: detected capacity change from 0 to 8192 [ 65.356474][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.474334][ T4806] net_ratelimit: 1 callbacks suppressed [ 66.474371][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.222017][ T6674] netlink: 52 bytes leftover after parsing attributes in process `syz.4.453'. [ 67.223584][ T6671] loop2: detected capacity change from 0 to 128 [ 67.279865][ T6683] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 67.325157][ T6671] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.345056][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.456'. [ 67.345147][ T6689] block nbd0: not configured, cannot reconfigure [ 67.717361][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.325585][ T6683] macvtap1: entered allmulticast mode [ 68.353233][ T6683] bond1: (slave bridge1): making interface the new active one [ 68.353676][ T6683] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 68.360323][ T6683] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 68.371200][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 68.406885][ T6694] infiniband syz2: set active [ 68.406926][ T6694] infiniband syz2: added bond_slave_0 [ 68.409071][ T6694] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 68.410662][ T6694] infiniband syz2: Couldn't open port 1 [ 68.418560][ T6694] RDS/IB: syz2: added [ 68.418675][ T6694] smc: adding ib device syz2 with port count 1 [ 68.418717][ T6694] smc: ib device syz2 port 1 has no pnetid [ 68.906167][ T4720] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.918249][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.918680][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.923949][ T6698] macvtap2: entered allmulticast mode [ 68.990005][ T6715] binder: 6714:6715 BC_INCREFS_DONE u0000000000000002 no match [ 68.990046][ T6715] binder: 6714:6715 got transaction to invalid handle, 2 [ 68.990317][ T6715] binder: 6714:6715 cannot find target node [ 68.990350][ T6715] binder: 6714:6715 transaction call to 0:0 failed 13/29201/-22, code 0 size 0-0 line 3252 [ 68.990839][ T4806] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.069376][ T6722] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.280725][ T6723] syz_tun: entered allmulticast mode [ 69.310483][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.463'. [ 69.319216][ T6730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 69.994615][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.068203][ T6757] loop2: detected capacity change from 0 to 512 [ 70.083070][ T6757] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.467: corrupted in-inode xattr: invalid ea_ino [ 70.083113][ T6757] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.085561][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 70.085577][ C1] EXT4-fs (loop2): initial error at time 70: ext4_iget_extra_inode:5180: inode 15 [ 70.085592][ C1] EXT4-fs (loop2): last error at time 70: ext4_iget_extra_inode:5180: inode 15 [ 70.088945][ T6757] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.467: couldn't read orphan inode 15 (err -117) [ 70.088969][ T6757] loop2: lost filesystem error report for type 5 error -117 [ 70.089498][ T6757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.116957][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.141582][ T6762] ip6gre1: entered allmulticast mode [ 70.142483][ T40] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.778522][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.474'. [ 71.034373][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.450149][ T6793] netlink: 'syz.4.479': attribute type 27 has an invalid length. [ 71.923658][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 71.925726][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 71.925774][ T6801] netlink: 'syz.2.481': attribute type 11 has an invalid length. [ 71.925788][ T6801] netlink: 'syz.2.481': attribute type 12 has an invalid length. [ 71.932409][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 71.932435][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 71.932460][ T6801] netlink: 'syz.2.481': attribute type 11 has an invalid length. [ 71.932468][ T6801] netlink: 'syz.2.481': attribute type 12 has an invalid length. [ 71.933342][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 71.933353][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 71.933366][ T6801] netlink: 'syz.2.481': attribute type 11 has an invalid length. [ 71.933374][ T6801] netlink: 'syz.2.481': attribute type 12 has an invalid length. [ 71.934804][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 71.934823][ T6801] netlink: 'syz.2.481': attribute type 11 has an invalid length. [ 72.004661][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.077001][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.092501][ T6813] loop0: detected capacity change from 0 to 512 [ 72.097522][ T6813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.103463][ T6813] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.484: corrupted in-inode xattr: invalid ea_ino [ 72.103506][ T6813] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.103644][ T6813] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.484: couldn't read orphan inode 15 (err -117) [ 72.103661][ T6813] loop0: lost filesystem error report for type 5 error -117 [ 72.105822][ T6813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.114935][ T6815] bond4: option tlb_dynamic_lb: invalid value (64) [ 72.119731][ T6815] bond4 (unregistering): Released all slaves [ 72.131904][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.172939][ T6820] Injecting memory failure for pfn 0x133dba at process virtual address 0x20000000 [ 72.225493][ T6820] Memory failure: 0x133dba: keeping poisoned page in swap cache [ 72.225591][ T6820] Memory failure: 0x133dba: Sending SIGBUS to syz.2.486:6820 due to hardware memory corruption [ 72.225771][ T6820] Memory failure: 0x133dba: recovery action for dirty swapcache page: Delayed [ 72.370769][ T6834] validate_nla: 59 callbacks suppressed [ 72.370815][ T6834] netlink: 'syz.3.490': attribute type 27 has an invalid length. [ 72.377767][ T6834] bond0: (slave bond_slave_1): Releasing backup interface [ 72.430216][ T6835] loop3: detected capacity change from 0 to 512 [ 72.431504][ T6835] EXT4-fs: Ignoring removed bh option [ 72.433307][ T6835] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 72.433341][ T6835] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 72.433356][ T6835] EXT4-fs (loop3): group descriptors corrupted! [ 72.474141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.474239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.794158][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.794336][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.115323][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.224704][ T6847] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.434181][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.551783][ T6853] loop4: detected capacity change from 0 to 512 [ 73.562225][ T6853] capability: warning: `syz.4.495' uses 32-bit capabilities (legacy support in use) [ 73.675681][ T6860] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 73.844082][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.049840][ T6870] loop3: detected capacity change from 0 to 512 [ 74.052106][ T6870] EXT4-fs: inline encryption not supported [ 74.054716][ T6870] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 74.065125][ T6870] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.501: corrupted in-inode xattr: e_value size too large [ 74.065164][ T6870] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.068840][ T6870] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.501: couldn't read orphan inode 15 (err -117) [ 74.068884][ T6870] loop3: lost filesystem error report for type 5 error -117 [ 74.070297][ T6870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.148327][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.157507][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.188967][ T6875] sock: sock_timestamping_bind_phc: sock not bind to device [ 74.593356][ T6887] tap0: tun_chr_ioctl cmd 1074025673 [ 75.016991][ T6898] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 75.057131][ T6902] loop4: detected capacity change from 0 to 1024 [ 75.060300][ T6902] EXT4-fs: Ignoring removed orlov option [ 75.061755][ T6902] EXT4-fs: Ignoring removed orlov option [ 75.079838][ T6902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.169008][ T4712] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 75.190584][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.198428][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.183376][ T6928] loop4: detected capacity change from 0 to 2048 [ 76.206883][ T6928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.234842][ T6934] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 76.237660][ T6935] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 76.254609][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.375355][ T6947] vhci_hcd vhci_hcd.2: default hub control req: 8001 v0000 i0000 l22933 [ 76.445955][ T6949] loop4: detected capacity change from 0 to 2048 [ 76.586639][ T6956] xt_ipcomp: unknown flags 1D [ 76.692311][ T6963] loop4: detected capacity change from 0 to 2048 [ 76.693841][ T6963] ext4: Unknown parameter 'obj_type' [ 76.997813][ T6973] loop2: detected capacity change from 0 to 4096 [ 77.005831][ T6973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.023843][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.180276][ T6985] binder: 6984:6985 BC_INCREFS_DONE node 14 has no pending increfs request [ 77.274542][ T1502] net_ratelimit: 3 callbacks suppressed [ 77.274581][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.315851][ T6991] loop2: detected capacity change from 0 to 4096 [ 77.343455][ T6991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.353604][ T6991] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.539: corrupted inode contents [ 77.355038][ T6991] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.539: mark_inode_dirty error [ 77.355245][ T6991] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.539: corrupted inode contents [ 77.355985][ T6991] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.539: mark_inode_dirty error [ 77.356485][ T6991] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.539: corrupted inode contents [ 77.356650][ T6991] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.539: mark_inode_dirty error [ 77.356793][ T6991] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.539: corrupted inode contents [ 77.356942][ T6991] EXT4-fs error (device loop2): ext4_truncate:4691: inode #15: comm syz.2.539: mark_inode_dirty error [ 77.357073][ T6991] EXT4-fs error (device loop2) in ext4_setattr:6172: Corrupt filesystem [ 77.358407][ T6991] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.539: corrupted inode contents [ 77.371573][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.915546][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.315264][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.194377][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.354382][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.394373][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.954176][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.434230][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.754037][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.764297][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.484223][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.524171][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.004358][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.564166][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.594223][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.635418][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.035021][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.684172][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.154686][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.714309][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.754388][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.794557][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.194122][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.354922][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.834276][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.995032][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.874275][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.274204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.914664][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.234146][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.954127][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.994235][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.035025][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.114059][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.274386][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.074264][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.124233][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.154294][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.315542][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.195393][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.597400][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.240713][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.274334][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.354407][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.324347][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.355610][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.394249][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.406457][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.434996][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.484177][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.434381][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.514873][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.555133][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.564467][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.194219][ T4799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.194471][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.604688][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.634941][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.594575][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.685017][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.714646][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.754888][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.634355][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.794911][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.834991][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.874272][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.874316][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.674169][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.915378][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.804187][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.954426][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.994880][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.035244][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.834130][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.074445][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.114309][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.914449][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.155033][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.554036][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.874113][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.194422][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.234899][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.474149][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.114417][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.285086][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.914089][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.314990][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.354208][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.395871][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.959449][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.434428][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.484133][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.514356][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.994108][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.554305][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.595873][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.634360][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.715212][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.034106][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.674150][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.714228][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.754871][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.074160][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.795030][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.834210][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.875023][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.114159][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.914228][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.954142][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.995025][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.154100][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.314382][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.034425][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.833622][ T7028] loop0: detected capacity change from 0 to 256 [ 150.076972][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.167831][ T4719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.171363][ T4719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.180101][ T4719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.187126][ T4719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.191724][ T4719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.200733][ T7028] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 150.203928][ T7028] FAT-fs (loop0): Filesystem has been set read-only [ 150.313709][ T7053] loop0: detected capacity change from 0 to 512 [ 150.362301][ T7053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 150.365118][ T7053] EXT4-fs (loop0): orphan cleanup on readonly fs [ 150.367543][ T7053] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 150.371396][ T7053] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 150.373910][ T7053] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.550: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 150.377537][ T7053] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 150.377795][ T7053] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.550: couldn't read orphan inode 13 (err -117) [ 150.382039][ T7053] loop0: lost filesystem error report for type 5 error -117 [ 150.383848][ T7053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.451192][ T7053] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.550: deleted inode referenced: 12 [ 150.520446][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.559091][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.559186][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.559254][ T7037] bridge_slave_0: entered allmulticast mode [ 150.559709][ T7037] bridge_slave_0: entered promiscuous mode [ 150.560749][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.560808][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.561370][ T7037] bridge_slave_1: entered allmulticast mode [ 150.561786][ T7037] bridge_slave_1: entered promiscuous mode [ 150.581595][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.582551][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.589039][ T7037] team0: Port device team_slave_0 added [ 150.589806][ T7037] team0: Port device team_slave_1 added [ 150.595443][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.595451][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.595464][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.596002][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.596008][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.596022][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.606247][ T7037] hsr_slave_0: entered promiscuous mode [ 150.607442][ T7037] hsr_slave_1: entered promiscuous mode [ 150.607718][ T7037] debugfs: 'hsr0' already exists in 'hsr' [ 150.607729][ T7037] Cannot create hsr debugfs directory [ 150.761077][ T7037] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.768138][ T7037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.768615][ T7037] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.775908][ T7037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.777387][ T7037] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.782586][ T7037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.783491][ T7037] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.791037][ T7037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.823051][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.823102][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.823207][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.823236][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.899927][ T7084] __nla_validate_parse: 59 callbacks suppressed [ 150.899968][ T7084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.555'. [ 150.913808][ T7084] syzkaller1: entered promiscuous mode [ 150.913848][ T7084] syzkaller1: entered allmulticast mode [ 150.929223][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.972496][ T7092] loop0: detected capacity change from 0 to 512 [ 150.989724][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.993020][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.006512][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.008644][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.008692][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.011881][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.011902][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.017236][ T7092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.031427][ T7037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.031469][ T7037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.114374][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.133377][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.190526][ T7105] loop3: detected capacity change from 0 to 1024 [ 151.201974][ T7105] EXT4-fs (loop3): invalid inodes per group: 150994976 [ 151.201974][ T7105] [ 151.210124][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.280978][ T7105] loop3: detected capacity change from 0 to 512 [ 151.303115][ T7105] EXT4-fs: inline encryption not supported [ 151.308983][ T7105] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.312867][ T7105] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.315659][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.323175][ T7113] netlink: 'syz.0.559': attribute type 1 has an invalid length. [ 151.326988][ T7113] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 151.354534][ T7105] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 151.357435][ T7105] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.558: bg 0: block 248: padding at end of block bitmap is not set [ 151.357460][ T7105] loop3: lost filesystem error report for type 5 error -117 [ 151.358047][ T7105] Quota error (device loop3): write_blk: dquota write failed [ 151.358077][ T7105] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 151.358096][ T7105] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.558: Failed to acquire dquot type 1 [ 151.358106][ T7105] loop3: lost filesystem error report for type 5 error -28 [ 151.359127][ T7105] EXT4-fs (loop3): 1 truncate cleaned up [ 151.359602][ T7105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 151.409013][ T7126] loop4: detected capacity change from 0 to 512 [ 151.412779][ T7126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.426813][ T7126] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.561: invalid indirect mapped block 4294967295 (level 1) [ 151.426861][ T7126] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.432539][ T7126] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.561: invalid indirect mapped block 4294967295 (level 1) [ 151.434753][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 151.434765][ C1] EXT4-fs (loop4): initial error at time 151: ext4_free_branches:1023: inode 11 [ 151.434781][ C1] EXT4-fs (loop4): last error at time 151: ext4_free_branches:1023: inode 11 [ 151.438043][ T7037] veth0_vlan: entered promiscuous mode [ 151.445134][ T7126] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.446173][ T7126] EXT4-fs (loop4): 2 truncates cleaned up [ 151.449543][ T7126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.457073][ T7037] veth1_vlan: entered promiscuous mode [ 151.461189][ T7130] loop0: detected capacity change from 0 to 2048 [ 151.466887][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 151.492951][ T7037] veth0_macvtap: entered promiscuous mode [ 151.500720][ T7037] veth1_macvtap: entered promiscuous mode [ 151.510630][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.511682][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.532993][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.559163][ T5819] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.559283][ T5819] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.559313][ T5819] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.559329][ T5819] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.614287][ T5821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.614318][ T5821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.626994][ T5821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.627025][ T5821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.633188][ T7130] loop0: detected capacity change from 0 to 512 [ 151.634960][ T7130] EXT4-fs: Ignoring removed orlov option [ 151.645220][ T7130] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 151.647553][ T7130] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 151.649577][ T7130] EXT4-fs (loop0): group descriptors corrupted! [ 151.816657][ T7159] loop5: detected capacity change from 0 to 8192 [ 151.857536][ T7162] x_tables: duplicate underflow at hook 3 [ 151.860204][ T7162] dvmrp1: entered allmulticast mode [ 151.860998][ T7162] dvmrp1: left allmulticast mode [ 152.011766][ T7159] syz.5.543: attempt to access beyond end of device [ 152.011766][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.015402][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.018134][ T7159] syz.5.543: attempt to access beyond end of device [ 152.018134][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.020790][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.026552][ T7159] syz.5.543: attempt to access beyond end of device [ 152.026552][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.029223][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.030970][ T7159] syz.5.543: attempt to access beyond end of device [ 152.030970][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.033721][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.034911][ T7159] syz.5.543: attempt to access beyond end of device [ 152.034911][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.034933][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.034957][ T7159] syz.5.543: attempt to access beyond end of device [ 152.034957][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.034968][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.034988][ T7159] syz.5.543: attempt to access beyond end of device [ 152.034988][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.034999][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.035017][ T7159] syz.5.543: attempt to access beyond end of device [ 152.035017][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.035027][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.035044][ T7159] syz.5.543: attempt to access beyond end of device [ 152.035044][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.035054][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.035071][ T7159] syz.5.543: attempt to access beyond end of device [ 152.035071][ T7159] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.035081][ T7159] Buffer I/O error on dev loop5, logical block 57847, async page read [ 152.103890][ T7178] pimreg: entered allmulticast mode [ 152.156506][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.304091][ T50] Bluetooth: hci5: command tx timeout [ 152.834406][ T7200] input: syz1 as /devices/virtual/input/input9 [ 153.249721][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.268333][ T7223] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 153.270676][ T7223] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 153.271575][ T7229] loop3: detected capacity change from 0 to 1024 [ 153.272180][ T7229] EXT4-fs: Ignoring removed bh option [ 153.280388][ T7223] overlayfs: missing 'lowerdir' [ 153.294983][ T7231] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.298745][ T7231] EXT4-fs (loop0): 1 truncate cleaned up [ 153.299313][ T7231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.594246][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 153.594323][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 153.594361][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 153.594387][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 153.611411][ T7229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c028, mo2=0002] [ 153.613068][ T7229] System zones: 0-1, 3-8 [ 153.614910][ T7229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.642947][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 153.713447][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.778489][ T7229] veth3: entered allmulticast mode [ 154.581192][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.604435][ T4715] Bluetooth: hci5: command tx timeout [ 154.656835][ T7248] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.733315][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.767574][ T7229] bond4: (slave veth3): Enslaving as an active interface with an up link [ 154.936709][ T7250] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 155.059566][ T7257] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.280115][ T7255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.280399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.286479][ T7244] bond4 (unregistering): (slave veth3): Releasing backup interface [ 155.321385][ T4720] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.327836][ T7250] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 155.331579][ T7244] bond4 (unregistering): Released all slaves [ 155.381757][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.461137][ T7265] set_capacity_and_notify: 3 callbacks suppressed [ 155.461180][ T7265] loop2: detected capacity change from 0 to 32768 [ 155.469638][ T4833] IPVS: starting estimator thread 0... [ 155.500759][ T7265] loop2: [POWERTEC] p1 p2 p3 [ 155.501148][ T7265] loop2: p1 start 1768846639 is beyond EOD, truncated [ 155.501163][ T7265] loop2: p2 start 1056964608 is beyond EOD, truncated [ 155.501174][ T7265] loop2: p3 start 3242065920 is beyond EOD, truncated [ 155.554824][ T7273] IPVS: using max 60 ests per chain, 144000 per kthread [ 155.585935][ T7277] loop2: detected capacity change from 0 to 2048 [ 155.597192][ T7277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.601146][ T7277] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 155.604263][ T7277] EXT4-fs error (device loop2) in ext4_setattr:6172: error 28 [ 155.635361][ T7283] EXT4-fs error (device loop2) in ext4_setattr:6172: error 28 [ 155.648751][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.755361][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.235925][ T7307] binder: 7306:7307 tried to acquire reference to desc 0, got 1 instead [ 156.237943][ T7307] binder: 7306:7307 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 156.237972][ T7307] binder: 7307 RLIMIT_NICE not set [ 156.237990][ T7307] binder: 7307 RLIMIT_NICE not set [ 156.238104][ T7307] binder: 7307 RLIMIT_NICE not set [ 156.238197][ T7307] binder_alloc: 7306: binder_alloc_buf, no vma [ 156.238218][ T7307] binder: cannot allocate buffer: vma cleared, target dead or dying [ 156.238242][ T7307] binder: 7306:7307 transaction reply to 7306:7307 failed 20/29189/-3, code 0 size 0-0 line 3408 [ 156.238269][ T7307] binder: send failed reply for transaction 19 to 7306:7307 [ 156.243180][ T5762] binder: undelivered TRANSACTION_COMPLETE [ 156.243195][ T5762] binder: undelivered TRANSACTION_ERROR: 29189 [ 156.249357][ T5762] binder: undelivered TRANSACTION_ERROR: 29190 [ 156.272891][ T7309] netlink: 'syz.4.606': attribute type 1 has an invalid length. [ 156.291109][ T7309] macvtap1: entered allmulticast mode [ 156.303356][ T7309] macvtap2: entered allmulticast mode [ 156.321117][ T7309] bond2: (slave bridge1): making interface the new active one [ 156.324694][ T7309] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 156.341398][ T7309] 9p: Bad value for 'rfdno' [ 156.343095][ T7309] syzkaller1: entered promiscuous mode [ 156.344536][ T7309] syzkaller1: entered allmulticast mode [ 156.361844][ T7316] loop3: detected capacity change from 0 to 2048 [ 156.389313][ T7316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.395915][ T7316] netlink: 'syz.3.608': attribute type 21 has an invalid length. [ 156.397443][ T7316] netlink: 128 bytes leftover after parsing attributes in process `syz.3.608'. [ 156.416189][ T7316] netlink: 'syz.3.608': attribute type 5 has an invalid length. [ 156.417598][ T7316] netlink: 'syz.3.608': attribute type 6 has an invalid length. [ 156.419024][ T7316] netlink: 3 bytes leftover after parsing attributes in process `syz.3.608'. [ 156.430262][ T7325] netlink: 'syz.2.609': attribute type 4 has an invalid length. [ 156.468188][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.507962][ T7334] loop3: detected capacity change from 0 to 512 [ 156.514476][ T7334] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.532082][ T7334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 156.533792][ T7334] System zones: 0-2, 18-18, 34-34 [ 156.536223][ T7334] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.611: bad orphan inode 15 [ 156.538359][ T7334] loop3: lost filesystem error report for type 5 error -117 [ 156.540791][ T7334] ext4_test_bit(bit=14, block=18) = 1 [ 156.546570][ T7334] is_bad_inode(inode)=0 [ 156.547439][ T7334] NEXT_ORPHAN(inode)=2264924160 [ 156.548341][ T7334] max_ino=32 [ 156.549051][ T7334] i_nlink=0 [ 156.553568][ T7334] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.611: corrupted xattr block 19: e_value out of bounds [ 156.554044][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 156.554066][ C0] EXT4-fs (loop3): initial error at time 156: ext4_orphan_get:1425 [ 156.554089][ C0] EXT4-fs (loop3): last error at time 156: ext4_orphan_get:1425 [ 156.562865][ T7334] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.565538][ T7334] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 156.634455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.898816][ T7346] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 156.921814][ T7346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.921893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.946648][ T7344] futex_wake_op: syz.0.614 tries to shift op by 144; fix this program [ 157.129933][ T7348] loop0: detected capacity change from 0 to 512 [ 157.132347][ T4715] Bluetooth: hci5: command tx timeout [ 157.143788][ T4833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.160818][ T7334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.175080][ T7334] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 3: comm syz.3.611: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 157.760263][ T7356] loop2: detected capacity change from 0 to 512 [ 158.135951][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.136181][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.145800][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.159891][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.189734][ T7356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 158.194123][ T4799] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.222599][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 158.261013][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.261201][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.272378][ T7366] loop3: detected capacity change from 0 to 2048 [ 158.344050][ T4799] usb 1-1: Using ep0 maxpacket: 32 [ 158.347342][ T4799] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.349246][ T4799] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 158.351092][ T4799] usb 1-1: config 0 has no interface number 0 [ 158.352221][ T4799] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.354548][ T4799] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 158.354559][ T4799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.360328][ T4799] usb 1-1: config 0 descriptor?? [ 158.366693][ T4799] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 158.384818][ T7378] loop2: detected capacity change from 0 to 128 [ 158.386417][ T7378] ext2: Unknown parameter 'defcontext' [ 158.672213][ T7382] loop5: detected capacity change from 0 to 512 [ 158.672759][ T7382] EXT4-fs: Ignoring removed bh option [ 158.676249][ T7382] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.676274][ T7382] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 158.680660][ T7382] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 158.682699][ T7382] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 158.684882][ T7382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.700123][ T7037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.720936][ T7388] loop5: detected capacity change from 0 to 1024 [ 158.728029][ T7388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.731003][ T7388] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.625: deleted inode referenced: 12 [ 158.736148][ T7388] EXT4-fs (loop5): Remounting filesystem read-only [ 158.752874][ T7037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.908516][ T7400] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 159.194113][ T4715] Bluetooth: hci5: command tx timeout [ 159.283436][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'. [ 159.681753][ T30] audit: type=1326 audit(159.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.681878][ T30] audit: type=1326 audit(159.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.683428][ T30] audit: type=1326 audit(159.670:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.683574][ T30] audit: type=1326 audit(159.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=41 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.683666][ T30] audit: type=1326 audit(159.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.683737][ T30] audit: type=1326 audit(159.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.683795][ T30] audit: type=1326 audit(159.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.683923][ T30] audit: type=1326 audit(159.670:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.684027][ T30] audit: type=1326 audit(159.670:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.684381][ T30] audit: type=1326 audit(159.670:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.5.630" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a168 code=0x7ffc0000 [ 159.688570][ T7406] random: crng reseeded on system resumption [ 159.827976][ T7408] EXT4-fs (loop5): Test dummy encryption mode enabled [ 159.849606][ T7408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.857625][ T7408] Driver unsupported XDP return value 0 on prog (id 110) dev N/A, expect packet loss! [ 159.994645][ T7037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.086062][ T7429] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.096812][ T7429] netlink: 64595 bytes leftover after parsing attributes in process `syz.4.638'. [ 160.177543][ T7434] vfat: Unknown parameter '00000000000000000000003' [ 160.286578][ T7457] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.288955][ T7457] xt_hashlimit: size too large, truncated to 1048576 [ 160.313246][ T1502] usb 1-1: USB disconnect, device number 4 [ 160.337583][ T7462] overlay: filesystem on ./file0 not supported as upperdir [ 160.343036][ T7462] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 160.826040][ T7512] netlink: 52 bytes leftover after parsing attributes in process `syz.0.650'. [ 160.829927][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.650'. [ 160.831753][ T7512] netlink: 52 bytes leftover after parsing attributes in process `syz.0.650'. [ 160.863932][ T7523] futex_wake_op: syz.5.649 tries to shift op by 144; fix this program [ 160.927414][ T7533] set_capacity_and_notify: 5 callbacks suppressed [ 160.928784][ T7533] loop0: detected capacity change from 0 to 4096 [ 160.931261][ T7533] EXT4-fs: inline encryption not supported [ 160.937443][ T7533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.939161][ T7533] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.946028][ T7533] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 160.948367][ T7533] System zones: 0-5 [ 160.952569][ T7533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.017340][ T7533] bridge0: port 3(gretap0) entered disabled state [ 161.020341][ T7533] bridge0: port 4(erspan0) entered disabled state [ 161.031636][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.032507][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.066533][ T7533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.070489][ T7533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.190511][ T7542] sctp: [Deprecated]: syz.3.653 (pid 7542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.190511][ T7542] Use struct sctp_sack_info instead [ 161.190649][ T7542] sctp: [Deprecated]: syz.3.653 (pid 7542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.190649][ T7542] Use struct sctp_sack_info instead [ 161.204408][ T4309] net_ratelimit: 3 callbacks suppressed [ 161.204437][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.270034][ T40] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.270093][ T40] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.270116][ T40] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.270134][ T40] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.275476][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.289620][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.293150][ T7544] ima: policy update failed [ 161.357413][ T7551] loop3: detected capacity change from 0 to 512 [ 161.360797][ T7550] netlink: 'syz.0.657': attribute type 5 has an invalid length. [ 161.367675][ T7552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.369382][ T7552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.370038][ T7551] EXT4-fs (loop3): 1 truncate cleaned up [ 161.370564][ T7551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.377034][ T7552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.381859][ T7552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.382032][ T7552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.493095][ T7551] Injecting memory failure for pfn 0x145512 at process virtual address 0x20001000 [ 161.552702][ T7558] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 161.594078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.594224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.747113][ T7551] Memory failure: 0x145512: recovery action for clean LRU page: Recovered [ 161.752536][ T7551] Injecting memory failure for pfn 0x13cda2 at process virtual address 0x20002000 [ 161.752828][ T7551] Memory failure: 0x13cda2: unhandlable page. [ 161.752844][ T7551] Memory failure: 0x13cda2: recovery action for get hwpoison page: Ignored [ 161.773295][ T7557] loop0: detected capacity change from 0 to 8192 [ 161.808767][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.661'. [ 161.905948][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.935775][ T7575] tipc: Failed to remove unknown binding: 66,0,0/0:3574653423/3574653424 [ 161.938017][ T7575] tipc: Failed to remove unknown binding: 66,0,0/0:3574653423/3574653424 [ 161.942034][ T7575] loop2: detected capacity change from 0 to 128 [ 161.942344][ T7575] vfat: Unknown parameter '0x0000000000000004ÿ' [ 162.017973][ T7581] loop0: detected capacity change from 0 to 4096 [ 162.018349][ T7581] EXT4-fs: inline encryption not supported [ 162.020145][ T7581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.020173][ T7581] EXT4-fs (loop0): Test dummy encryption mode enabled [ 162.036697][ T7582] loop3: detected capacity change from 0 to 512 [ 162.036869][ T7581] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 162.036920][ T7581] System zones: 0-5 [ 162.040816][ T7581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.049671][ T7582] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 162.067980][ T7582] EXT4-fs (loop3): 1 truncate cleaned up [ 162.070872][ T7582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.084657][ T7582] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 162.087395][ T7582] futex_wake_op: syz.3.665 tries to shift op by -1; fix this program [ 162.097718][ T7588] loop2: detected capacity change from 0 to 4096 [ 162.129565][ T7588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.147855][ T7588] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.667: corrupted inode contents [ 162.151200][ T7588] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.667: mark_inode_dirty error [ 162.158574][ T7588] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.667: corrupted inode contents [ 162.163305][ T7588] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.667: mark_inode_dirty error [ 162.167816][ T7588] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.667: corrupted inode contents [ 162.171142][ T7588] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.667: mark_inode_dirty error [ 162.175972][ T7588] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.667: corrupted inode contents [ 162.178482][ T7588] EXT4-fs error (device loop2): ext4_truncate:4691: inode #15: comm syz.2.667: mark_inode_dirty error [ 162.181572][ T7588] EXT4-fs error (device loop2) in ext4_setattr:6172: Corrupt filesystem [ 162.188576][ T7547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.219990][ T7588] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.667: corrupted inode contents [ 162.242300][ T7597] loop5: detected capacity change from 0 to 512 [ 162.246966][ T7597] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 162.391000][ T7601] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 162.456861][ T7601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.532527][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 162.535373][ T7601] bond3: (slave geneve3): making interface the new active one [ 162.537053][ T7601] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 162.546369][ T7601] loop4: detected capacity change from 0 to 512 [ 162.569808][ T7601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.570419][ T7609] loop5: detected capacity change from 0 to 128 [ 162.571802][ T7609] EXT4-fs: Ignoring removed nobh option [ 162.579738][ T7601] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.671: corrupted xattr block 33: invalid header [ 162.584858][ T7601] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.671: corrupted xattr block 33: invalid header [ 162.589020][ T7601] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.671: corrupted xattr block 33: invalid header [ 162.596959][ T7609] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.601768][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.718627][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.718854][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.828735][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.890463][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.898988][ T7614] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 163.263013][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.300996][ T4806] IPVS: starting estimator thread 0... [ 163.380051][ T7629] xt_connbytes: Forcing CT accounting to be enabled [ 163.380244][ T7629] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 163.404111][ T7624] IPVS: using max 60 ests per chain, 144000 per kthread [ 163.495081][ T7631] EXT4-fs (loop3): 1 truncate cleaned up [ 163.498330][ T7631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.588547][ T7631] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.655777][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.689701][ T7638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840c018, mo2=0082] [ 163.689775][ T7638] System zones: 2-12, 7-7 [ 163.695487][ T7638] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #17: comm syz.4.680: iget: immutable or append flags not allowed on symlinks [ 163.695521][ T7638] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 163.700044][ T7638] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.680: couldn't read orphan inode 17 (err -117) [ 163.704173][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 163.704186][ C0] EXT4-fs (loop4): initial error at time 163: ext4_orphan_get:1399: inode 17 [ 163.704203][ C0] EXT4-fs (loop4): last error at time 163: ext4_orphan_get:1399: inode 17 [ 163.709753][ T7638] loop4: lost filesystem error report for type 5 error -117 [ 163.710948][ T7638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.773087][ T7037] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.775484][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.833519][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 163.836795][ T7647] new mount options do not match the existing superblock, will be ignored [ 163.980207][ T7660] fuse: Bad value for 'fd' [ 166.634231][ T24] net_ratelimit: 18 callbacks suppressed [ 166.634264][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.014057][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.274092][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.515049][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.563724][ T7683] set_capacity_and_notify: 3 callbacks suppressed [ 167.563764][ T7683] loop2: detected capacity change from 0 to 128 [ 167.622201][ T7683] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.640781][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 167.911672][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.964859][ T7699] loop0: detected capacity change from 0 to 512 [ 167.970283][ T7683] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.038219][ T7702] loop3: detected capacity change from 0 to 8 [ 168.074253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.101754][ T7710] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 3, id = 0 [ 168.155936][ T7718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.705'. [ 168.211698][ T7723] loop2: detected capacity change from 0 to 1024 [ 168.213560][ T7723] EXT4-fs: Ignoring removed bh option [ 168.276858][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.373548][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 168.380288][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 168.383830][ T7737] netlink: 68 bytes leftover after parsing attributes in process `syz.0.708'. [ 168.409629][ T7723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.422006][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 168.463901][ T7740] geneve2: entered promiscuous mode [ 168.466224][ T7740] geneve2: entered allmulticast mode [ 168.474872][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 57749 - 0 [ 168.474922][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 57749 - 0 [ 168.474955][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 57749 - 0 [ 168.474976][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 57749 - 0 [ 168.518074][ T7745] loop0: detected capacity change from 0 to 128 [ 168.523337][ T7745] vfat: Unknown parameter '18446744073709551615' [ 168.540871][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'. [ 168.687514][ T7765] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.721'. [ 168.762127][ T7760] loop5: detected capacity change from 0 to 4096 [ 168.762546][ T7760] EXT4-fs: Ignoring removed orlov option [ 168.765365][ T7760] EXT4-fs (loop5): Test dummy encryption mode enabled [ 168.766618][ T7760] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 168.770137][ T7760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.804836][ T7774] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 168.808914][ T7760] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.849749][ T7777] loop0: detected capacity change from 0 to 512 [ 168.850152][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.863014][ T7037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.895975][ T7777] loop0: detected capacity change from 0 to 512 [ 168.897044][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.973884][ T7777] loop0: detected capacity change from 0 to 512 [ 168.988696][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.994869][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.002389][ T7783] loop3: detected capacity change from 0 to 1024 [ 169.002702][ T7783] EXT4-fs: inline encryption not supported [ 169.002711][ T7783] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.018753][ T7783] EXT4-fs: Mount option(s) incompatible with ext2 [ 169.061861][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.080236][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 169.100866][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.166752][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.232076][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.251008][ T7797] vfat: Bad value for 'allow_utime' [ 169.276635][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.283018][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.299245][ T7800] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.321237][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.343369][ T7800] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 169.347386][ T7800] EXT4-fs (loop3): mount failed [ 169.373451][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.380803][ T7820] batman_adv: batadv0: Adding interface: macvtap1 [ 169.380831][ T7820] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.380849][ T7820] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 169.391423][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.732'. [ 169.398905][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.404428][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.485257][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.498163][ T7777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.770621][ T7867] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 169.819391][ T7867] EXT4-fs (loop2): 1 truncate cleaned up [ 169.821443][ T7867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.075260][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.219520][ T7804] workqueue: Failed to create a rescuer kthread for wq "nfc60_nci_tx_wq": -EINTR [ 170.354883][ T8035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.378126][ T8035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 170.427767][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 170.455431][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.573833][ T8050] usb usb8: usbfs: process 8050 (syz.0.752) did not claim interface 0 before use [ 170.965825][ T8065] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.074398][ T8065] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 171.080907][ T8065] FAT-fs (loop2): Filesystem has been set read-only [ 171.084454][ T8065] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 171.088154][ T8065] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 171.088787][ T8065] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 171.088817][ T8065] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 171.088854][ T8065] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 171.088873][ T8065] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 171.088967][ T8065] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 171.088986][ T8065] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 171.472429][ T8096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.501054][ T8104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.512560][ T8100] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 171.520240][ T8100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 171.522057][ T8100] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.529903][ T8100] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.764: bg 0: block 15: invalid block bitmap [ 171.539297][ T8100] loop2: lost filesystem error report for type 5 error -117 [ 171.540999][ T7037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.542568][ T8104] EXT4-fs (loop4): 1 truncate cleaned up [ 171.543016][ T8104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.544890][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 171.544906][ C0] EXT4-fs (loop2): initial error at time 171: ext4_validate_block_bitmap:432 [ 171.544919][ C0] EXT4-fs (loop2): last error at time 171: ext4_validate_block_bitmap:432 [ 171.555148][ T8100] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 171.555169][ T8100] loop2: lost filesystem error report for type 5 error -117 [ 171.555334][ T8100] EXT4-fs (loop2): 1 truncate cleaned up [ 171.555744][ T8100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 171.567389][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.653227][ T4712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.691008][ T8124] FAULT_INJECTION: forcing a failure. [ 171.691008][ T8124] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.691049][ T8124] CPU: 1 UID: 0 PID: 8124 Comm: syz.4.769 Tainted: G L syzkaller #0 PREEMPT [ 171.691065][ T8124] Tainted: [L]=SOFTLOCKUP [ 171.691069][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 171.691074][ T8124] Call trace: [ 171.691077][ T8124] show_stack+0x2c/0x3c (C) [ 171.691097][ T8124] __dump_stack+0x30/0x40 [ 171.691107][ T8124] dump_stack_lvl+0xd8/0x12c [ 171.691117][ T8124] dump_stack+0x1c/0x28 [ 171.691127][ T8124] should_fail_ex+0x41c/0x590 [ 171.691137][ T8124] should_fail+0x14/0x24 [ 171.691147][ T8124] should_fail_usercopy+0x20/0x30 [ 171.691157][ T8124] _inline_copy_from_user+0x3c/0x174 [ 171.691168][ T8124] move_addr_to_kernel+0x88/0x168 [ 171.691176][ T8124] __sys_sendto+0x1b0/0x328 [ 171.691184][ T8124] __arm64_sys_sendto+0xec/0x10c [ 171.691193][ T8124] invoke_syscall+0x98/0x244 [ 171.691203][ T8124] el0_svc_common+0xec/0x23c [ 171.691212][ T8124] do_el0_svc+0x4c/0x5c [ 171.691222][ T8124] el0_svc+0x64/0x260 [ 171.691232][ T8124] el0t_64_sync_handler+0x48/0x148 [ 171.691241][ T8124] el0t_64_sync+0x198/0x19c [ 171.729187][ T5823] net_ratelimit: 5 callbacks suppressed [ 171.729225][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.813649][ T8142] EXT4-fs: inline encryption not supported [ 171.821645][ T8142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.828396][ T8142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.853572][ T8142] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 171.897156][ T7037] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 171.903896][ T7037] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 171.964174][ T8150] ext4: Unknown parameter 'pcr' [ 172.130512][ T8170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 172.132310][ T8170] System zones: 1-12 [ 172.133872][ T8170] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.785: missing EA_INODE flag [ 172.136448][ T8170] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.138020][ T8170] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.785: error while reading EA inode 12 err=-117 [ 172.142230][ T8170] loop2: lost filesystem error report for type 5 error -117 [ 172.142598][ T8170] EXT4-fs (loop2): 1 orphan inode deleted [ 172.143991][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 172.144005][ C1] EXT4-fs (loop2): initial error at time 172: ext4_xattr_inode_iget:441: inode 12 [ 172.144019][ C1] EXT4-fs (loop2): last error at time 172: ext4_xattr_inode_iget:446 [ 172.150095][ T8170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.154468][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.212410][ T8174] fscrypt (loop2, inode 15): Unsupported log2_data_unit_size in encryption policy: 200 [ 172.282413][ T5830] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.339854][ T4719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 172.341351][ T4719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 172.343519][ T4719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 172.347362][ T4719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.348998][ T4719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.384922][ T5830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.452262][ T5830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.531592][ T5830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.548533][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.550119][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.551621][ T8176] bridge_slave_0: entered allmulticast mode [ 172.553342][ T8176] bridge_slave_0: entered promiscuous mode [ 172.555631][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.557042][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.558672][ T8176] bridge_slave_1: entered allmulticast mode [ 172.560290][ T8176] bridge_slave_1: entered promiscuous mode [ 172.571248][ T8176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.574423][ T8176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.583254][ T8176] team0: Port device team_slave_0 added [ 172.585504][ T8176] team0: Port device team_slave_1 added [ 172.593620][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.595213][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.600203][ T8176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.602987][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.604500][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.609062][ T8176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.623359][ T8176] hsr_slave_0: entered promiscuous mode [ 172.625222][ T8176] hsr_slave_1: entered promiscuous mode [ 172.626673][ T8176] debugfs: 'hsr0' already exists in 'hsr' [ 172.626685][ T8176] Cannot create hsr debugfs directory [ 172.668822][ T5830] bridge_slave_1: left allmulticast mode [ 172.668872][ T5830] bridge_slave_1: left promiscuous mode [ 172.669619][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.673480][ T5830] bridge_slave_0: left allmulticast mode [ 172.674646][ T5830] bridge_slave_0: left promiscuous mode [ 172.674742][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.837135][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.864569][ T5830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.896556][ T5830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.919610][ T8213] set_capacity_and_notify: 23 callbacks suppressed [ 172.921052][ T8213] loop3: detected capacity change from 0 to 4096 [ 172.930076][ T8213] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 172.935327][ T5830] bond0 (unregistering): Released all slaves [ 172.986425][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 173.049219][ T5830] batman_adv: batadv0: Removing interface: macvtap1 [ 173.102388][ T8239] loop3: detected capacity change from 0 to 8 [ 173.106433][ T8239] squashfs image failed sanity check [ 173.131143][ T8220] __nla_validate_parse: 5 callbacks suppressed [ 173.131182][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.793'. [ 173.152795][ T8220] loop0: detected capacity change from 0 to 512 [ 173.196620][ T2044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.200153][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.201787][ T8232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.201846][ T8232] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 173.209437][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.261134][ T8254] loop3: detected capacity change from 0 to 512 [ 173.280823][ T8232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.281046][ T8232] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 173.296622][ T8254] ext4: Unknown parameter 'permit_directio' [ 173.316479][ T8232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.316529][ T8232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 173.354866][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.356185][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.359132][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.369529][ T8232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.369574][ T8232] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 173.401279][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 173.417898][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 173.417964][ T8254] netlink: 27 bytes leftover after parsing attributes in process `syz.3.799'. [ 173.534978][ T8267] overlay: filesystem on ./file0 not supported as upperdir [ 173.551859][ T8232] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.551908][ T8232] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 173.572705][ T8232] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 173.578655][ T5830] hsr_slave_0: left promiscuous mode [ 173.579630][ T5830] hsr_slave_1: left promiscuous mode [ 173.580097][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.580119][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.580959][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.580970][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.595353][ T8232] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 173.595399][ T8232] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 173.600475][ T8272] loop3: detected capacity change from 0 to 1024 [ 173.600826][ T8272] EXT4-fs: inline encryption not supported [ 173.604504][ T5830] veth1_macvtap: left promiscuous mode [ 173.604567][ T5830] veth0_macvtap: left promiscuous mode [ 173.604635][ T5830] veth1_vlan: left promiscuous mode [ 173.604681][ T5830] veth0_vlan: left promiscuous mode [ 173.638770][ T8232] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 173.664365][ T8272] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.803: lblock 3 mapped to illegal pblock 3 (length 3) [ 173.667015][ T8272] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 173.667056][ T8272] EXT4-fs (loop3): This should not happen!! Data will be lost [ 173.667056][ T8272] [ 173.700678][ T5819] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 173.708950][ T5819] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 173.708979][ T5819] EXT4-fs (loop3): This should not happen!! Data will be lost [ 173.708979][ T5819] [ 173.730610][ T4724] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 173.778955][ T8297] overlayfs: missing 'lowerdir' [ 173.804083][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 173.844213][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 173.892985][ T5830] team0 (unregistering): Port device team_slave_1 removed [ 173.912963][ T5830] team0 (unregistering): Port device team_slave_0 removed [ 173.956231][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.979699][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 174.028824][ T8176] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.041907][ T8176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.047225][ T8176] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.065719][ T8176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.073311][ T8176] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.073532][ T8343] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 174.081635][ T8176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.107453][ T8343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.122821][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.818'. [ 174.137086][ T8363] netlink: 766 bytes leftover after parsing attributes in process `syz.4.822'. [ 174.149493][ T8343] bond4: (slave geneve2): making interface the new active one [ 174.154550][ T8343] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 174.178719][ T8176] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.194826][ T8176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.212204][ T8373] loop2: detected capacity change from 0 to 512 [ 174.217401][ T8363] batman_adv: batadv0: Adding interface: macvtap3 [ 174.218987][ T8363] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.227815][ T8363] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 174.271742][ T8176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.283252][ T8176] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.302433][ T8176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.302474][ T8176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.319827][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.319889][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.320516][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.320543][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.350391][ T4719] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 174.372360][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 174.391788][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 174.432211][ T8393] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20003 [ 174.565900][ T8428] loop2: detected capacity change from 0 to 256 [ 174.570086][ T8428] vfat: Bad value for 'uni_xlate' [ 174.589449][ T8176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.627553][ T8428] loop2: detected capacity change from 0 to 256 [ 174.717450][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.839'. [ 174.717483][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.839'. [ 174.729728][ T8176] veth0_vlan: entered promiscuous mode [ 174.733498][ T8176] veth1_vlan: entered promiscuous mode [ 174.747056][ T8176] veth0_macvtap: entered promiscuous mode [ 174.751021][ T8176] veth1_macvtap: entered promiscuous mode [ 174.758783][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.762691][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.767004][ T8459] loop4: detected capacity change from 0 to 8 [ 174.773725][ T8461] loop0: detected capacity change from 0 to 128 [ 174.777045][ T8459] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 174.777074][ T8459] unable to read xattr id index table [ 174.785059][ T5819] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.785116][ T5819] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.785139][ T5819] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.785156][ T5819] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.878063][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.878093][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.890534][ T5830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.890558][ T5830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.966116][ T8468] overlay: ./file0 is not a directory [ 175.034252][ T1502] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 175.099204][ T15] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 175.104582][ T15] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 175.104611][ T15] EXT4-fs (loop6): This should not happen!! Data will be lost [ 175.104611][ T15] [ 175.104633][ T15] EXT4-fs (loop6): Total free blocks count 0 [ 175.104647][ T15] EXT4-fs (loop6): Free/Dirty block details [ 175.104661][ T15] EXT4-fs (loop6): free_blocks=4096 [ 175.104673][ T15] EXT4-fs (loop6): dirty_blocks=512 [ 175.104684][ T15] EXT4-fs (loop6): Block reservation details [ 175.104694][ T15] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 175.120278][ T8176] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 175.130457][ T8496] EXT4-fs (loop4): 1 truncate cleaned up [ 175.194155][ T4719] Bluetooth: hci1: command 0x0406 tx timeout [ 175.211901][ T1502] usb 1-1: config 1 has an invalid interface number: 245 but max is 0 [ 175.211932][ T1502] usb 1-1: config 1 has no interface number 0 [ 175.211944][ T1502] usb 1-1: config 1 interface 245 has no altsetting 0 [ 175.214376][ T1502] usb 1-1: string descriptor 0 read error: -22 [ 175.214432][ T1502] usb 1-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=74.39 [ 175.214443][ T1502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.292036][ T8503] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.340693][ T8505] overlayfs: workdir and upperdir must be separate subtrees [ 175.365478][ T4719] Bluetooth: hci2: command 0x0406 tx timeout [ 175.371637][ T8505] netlink: 'syz.6.850': attribute type 4 has an invalid length. [ 175.464148][ T4719] Bluetooth: hci3: command 0x0406 tx timeout [ 175.567560][ T5821] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.568421][ T5821] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.568936][ T5821] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.569192][ T5821] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.601570][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.618279][ T4309] usb 1-1: USB disconnect, device number 5 [ 175.674202][ T4719] Bluetooth: hci5: command 0x041b tx timeout [ 175.701633][ T8539] binder: Bad value for 'stats' [ 175.702050][ T8539] ================================================================== [ 175.702056][ T8539] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr+0x44/0x1b8 [ 175.702075][ T8539] Read of size 84 at addr ffff0000eec73f60 by task syz.3.860/8539 [ 175.702083][ T8539] [ 175.702090][ T8539] CPU: 1 UID: 0 PID: 8539 Comm: syz.3.860 Tainted: G L syzkaller #0 PREEMPT [ 175.702102][ T8539] Tainted: [L]=SOFTLOCKUP [ 175.702105][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 175.702110][ T8539] Call trace: [ 175.702113][ T8539] show_stack+0x2c/0x3c (C) [ 175.702128][ T8539] __dump_stack+0x30/0x40 [ 175.702140][ T8539] dump_stack_lvl+0xd8/0x12c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 175.702152][ T8539] print_address_description+0xb0/0x238 [ 175.702162][ T8539] print_report+0x68/0x84 [ 175.702169][ T8539] kasan_report+0x8c/0xc4 [ 175.702181][ T8539] kasan_check_range+0x17c/0x1ac [ 175.702191][ T8539] __asan_memcpy+0x3c/0x84 [ 175.702203][ T8539] copy_from_sockptr+0x44/0x1b8 [ 175.702214][ T8539] vcc_setsockopt+0x174/0x450 [ 175.702224][ T8539] pvc_setsockopt+0x84/0xb0 [ 175.702234][ T8539] do_sock_setsockopt+0x1f0/0x330 [ 175.702245][ T8539] __sys_setsockopt+0x104/0x170 [ 175.702256][ T8539] __arm64_sys_setsockopt+0xc8/0xe4 [ 175.702266][ T8539] invoke_syscall+0x98/0x244 [ 175.702285][ T8539] el0_svc_common+0xec/0x23c [ 175.702297][ T8539] do_el0_svc+0x4c/0x5c [ 175.702309][ T8539] el0_svc+0x64/0x260 [ 175.702322][ T8539] el0t_64_sync_handler+0x48/0x148 [ 175.702334][ T8539] el0t_64_sync+0x198/0x19c [ 175.702343][ T8539] [ 175.702345][ T8539] Allocated by task 8539: [ 175.702350][ T8539] kasan_save_track+0x40/0x78 [ 175.702359][ T8539] kasan_save_alloc_info+0x44/0x54 [ 175.702369][ T8539] __kasan_kmalloc+0x9c/0xb4 [ 175.702377][ T8539] __kmalloc_noprof+0x340/0x6b8 [ 175.702386][ T8539] __cgroup_bpf_run_filter_setsockopt+0x990/0xbbc [ 175.702398][ T8539] do_sock_setsockopt+0x2e8/0x330 [ 175.702407][ T8539] __sys_setsockopt+0x104/0x170 [ 175.702415][ T8539] __arm64_sys_setsockopt+0xc8/0xe4 [ 175.702424][ T8539] invoke_syscall+0x98/0x244 [ 175.702434][ T8539] el0_svc_common+0xec/0x23c [ 175.702444][ T8539] do_el0_svc+0x4c/0x5c [ 175.702454][ T8539] el0_svc+0x64/0x260 [ 175.702463][ T8539] el0t_64_sync_handler+0x48/0x148 [ 175.702473][ T8539] el0t_64_sync+0x198/0x19c [ 175.702480][ T8539] [ 175.702482][ T8539] The buggy address belongs to the object at ffff0000eec73f60 [ 175.702482][ T8539] which belongs to the cache kmalloc-8 of size 8 [ 175.702488][ T8539] The buggy address is located 0 bytes inside of [ 175.702488][ T8539] allocated 4-byte region [ffff0000eec73f60, ffff0000eec73f64) [ 175.702497][ T8539] [ 175.702499][ T8539] The buggy address belongs to the physical page: [ 175.702503][ T8539] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000eec73c40 pfn:0x12ec73 [ 175.702511][ T8539] flags: 0x5ffc00000000200(workingset|node=0|zone=2|lastcpupid=0x7ff) [ 175.702519][ T8539] page_type: f5(slab) [ 175.702527][ T8539] raw: 05ffc00000000200 ffff0000c0001500 ffff0000c0000348 fffffdffc42d0e10 [ 175.702535][ T8539] raw: ffff0000eec73c40 0000000800800073 00000000f5000000 0000000000000000 [ 175.702539][ T8539] page dumped because: kasan: bad access detected [ 175.702542][ T8539] [ 175.702544][ T8539] Memory state around the buggy address: [ 175.702548][ T8539] ffff0000eec73e00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 175.702554][ T8539] ffff0000eec73e80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 175.702559][ T8539] >ffff0000eec73f00: fa fc fc fc fa fc fc fc fa fc fc fc 04 fc fc fc [ 175.702563][ T8539] ^ [ 175.702568][ T8539] ffff0000eec73f80: fa fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 175.702574][ T8539] ffff0000eec74000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 175.702578][ T8539] ================================================================== [ 175.702582][ T8539] Disabling lock debugging due to kernel taint [ 176.100620][ T5821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 57749 - 0 [ 176.189618][ T5821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 57749 - 0 [ 176.260829][ T5821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 57749 - 0 [ 176.329559][ T5821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 57749 - 0 [ 176.451384][ T5821] erspan0: left allmulticast mode [ 176.451416][ T5821] erspan0: left promiscuous mode [ 176.451499][ T5821] bridge0: port 4(erspan0) entered disabled state [ 176.452856][ T5821] gretap0: left allmulticast mode [ 176.452866][ T5821] gretap0: left promiscuous mode [ 176.452922][ T5821] bridge0: port 3(gretap0) entered disabled state [ 176.455042][ T5821] bridge_slave_1: left allmulticast mode [ 176.455053][ T5821] bridge_slave_1: left promiscuous mode [ 176.455107][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.456876][ T5821] bridge_slave_0: left allmulticast mode [ 176.456889][ T5821] bridge_slave_0: left promiscuous mode [ 176.456941][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.495098][ T5821] bond1 (unregistering): (slave bridge1): Releasing active interface [ 176.546596][ T5821] bond0 (unregistering): (slave 10û): Releasing backup interface [ 176.585221][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.624467][ T5821] bond0 (unregistering): Released all slaves [ 176.629115][ T5821] bond1 (unregistering): Released all slaves [ 176.697834][ T5821] tipc: Left network mode [ 176.720434][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.818753][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 176.909345][ T5821] hsr_slave_0: left promiscuous mode [ 176.909563][ T5821] hsr_slave_1: left promiscuous mode [ 176.910017][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.913038][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.019101][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 177.021539][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 177.051801][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 177.115415][ T40] net_ratelimit: 11 callbacks suppressed [ 177.115453][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.115954][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.116299][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.116505][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.157247][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 177.266778][ T5821] IPVS: stop unused estimator thread 0... [ 177.274059][ T4719] Bluetooth: hci1: command 0x0406 tx timeout [ 177.364627][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.367839][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.377024][ T5821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.415734][ T5821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.478052][ T5821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.546289][ T5821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.656157][ T5821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.736386][ T5821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.738858][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 177.807387][ T5821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.838452][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 177.876012][ T5821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.937988][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 177.971954][ T5821] bridge_slave_1: left allmulticast mode [ 177.971992][ T5821] bridge_slave_1: left promiscuous mode [ 177.972074][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.976313][ T5821] bridge_slave_0: left allmulticast mode [ 177.976340][ T5821] bridge_slave_0: left promiscuous mode [ 177.976403][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.982083][ T5821] bridge_slave_1: left allmulticast mode [ 177.982109][ T5821] bridge_slave_1: left promiscuous mode [ 177.982176][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.993106][ T5821] bridge_slave_0: left allmulticast mode [ 177.993138][ T5821] bridge_slave_0: left promiscuous mode [ 177.993205][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.073482][ T5821] bond4 (unregistering): (slave geneve2): Releasing active interface [ 178.111980][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.124991][ T5821] bond0 (unregistering): Released all slaves [ 178.126630][ T5821] bond1 (unregistering): Released all slaves [ 178.129252][ T5821] bond2 (unregistering): (slave bond3): Releasing backup interface [ 178.164358][ T5821] bond2 (unregistering): Released all slaves [ 178.166770][ T5821] bond3 (unregistering): Released all slaves [ 178.169006][ T5821] bond4 (unregistering): Released all slaves [ 178.199545][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.245954][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.284848][ T5821] bond0 (unregistering): Released all slaves [ 178.286805][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 178.337110][ T5821] tipc: Left network mode [ 178.349132][ T5821] IPVS: stopping master sync thread 7710 ... [ 178.400054][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 178.405424][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.504142][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.517959][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 178.638928][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 178.797756][ T5821] hsr_slave_0: left promiscuous mode [ 178.799109][ T5821] hsr_slave_1: left promiscuous mode [ 178.800327][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.800356][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.800735][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.800745][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.807377][ T5821] hsr_slave_0: left promiscuous mode [ 178.808409][ T5821] hsr_slave_1: left promiscuous mode [ 178.808625][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.808637][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.812068][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.812085][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.818917][ T5821] veth1_macvtap: left promiscuous mode [ 178.818951][ T5821] veth0_macvtap: left promiscuous mode [ 178.818997][ T5821] veth1_vlan: left promiscuous mode [ 178.819027][ T5821] veth0_vlan: left promiscuous mode [ 178.822876][ T5821] veth1_macvtap: left promiscuous mode [ 178.822902][ T5821] veth0_macvtap: left promiscuous mode [ 178.822950][ T5821] veth1_vlan: left promiscuous mode [ 178.822980][ T5821] veth0_vlan: left promiscuous mode [ 179.024777][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 179.027141][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 179.070718][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 179.435263][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.437053][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.437893][ T5821] IPVS: stop unused estimator thread 0... [ 179.535701][ T5821] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.626459][ T5821] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.695809][ T5821] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.817540][ T5821] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.895291][ T5821] bridge_slave_1: left allmulticast mode [ 179.895321][ T5821] bridge_slave_1: left promiscuous mode [ 179.895403][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.899041][ T5821] bridge_slave_0: left allmulticast mode [ 179.899066][ T5821] bridge_slave_0: left promiscuous mode [ 179.899137][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.939064][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.975052][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.014804][ T5821] bond0 (unregistering): Released all slaves [ 180.107419][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 180.247348][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 180.267380][ T5821] hsr_slave_0: left promiscuous mode [ 180.268468][ T5821] hsr_slave_1: left promiscuous mode [ 180.268691][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.268702][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.269674][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.269683][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.277549][ T5821] veth1_macvtap: left promiscuous mode [ 180.277584][ T5821] veth0_macvtap: left promiscuous mode [ 180.277628][ T5821] veth1_vlan: left promiscuous mode [ 180.277656][ T5821] veth0_vlan: left promiscuous mode [ 180.382310][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 180.384857][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 180.410450][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 180.513235][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19 [ 182.234499][ T5813] net_ratelimit: 5 callbacks suppressed [ 182.234531][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.235984][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.236317][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.244407][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.554079][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.984047][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.594123][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.104124][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.634203][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.214036][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog