last executing test programs: 5m15.409771591s ago: executing program 32 (id=275): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008884}, 0x8805) 5m9.978523784s ago: executing program 4 (id=300): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x2002, @mcast1={0xff, 0x7}, 0x24f3}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x8000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x100}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 5m9.851056566s ago: executing program 4 (id=303): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000029c0), 0x0, 0x2cf, &(0x7f0000002cc0)="$eJzs3EFrE1sUwPHTpE3SlDZZlAfvweMdnhvdDG38BEFaEANKbURdCFM70ZAxCZkYiYjpzq1rP0Jx6UpB/QLduHMvbooguOlCHElmJk3aqcbWmqb5/6DM7T33JDPcmXBmYO729af3SgXHKJh1iSRUIiIbsiOSbrd8E/420mnHpNeGnJv58v7fqzduXsrmcksrqsvZ1fMZVZ377/WDR8//f1ufufZi7lVcttK3tj9nPmz9tfX39rfV4NMrIqauVSp1c822dL3olAzVK7ZlOpYWy45Vq6uptSBesCvValPN8vpsslqzHEfNclNLVlPrFa3XmmreMYtlNQxDZ5MybqK/nJHfXFkxs8eyMxiG6bDOWi1rRkOD+c0/sVMAAOBkGVb9f7foaNHRcqVd3/+g/o9Ib/wn9b/IWNf/h1U9OBRaT2K0tOv/pH/99qP+BwAAAAAAAAAAAAAAAAAAAABgFOy4bsp13VSwDf7iIpIQkeD/A9L3v1KAkXLE+ceI63lxLyFiP2nkG3lv68WzBSmKLZYsTIl87ZwPbXHX9drLz2JLC9qRljd2y89vNfJRiQf5nmlJd/Pdbv7F3NKil6+9+S2ZkmTv92ckJfPh+ZmQ/EY+JmfPuHH/uy0xJCXvbktFbFnvnNe7+Y8XVS9czu3Jn+6MAwAAAADgNDC0a9/9eyduaPCMb0/c69x9PiCpnucDfffnC6H355Pyz+TwjhsAAAAAgHHixKRk2rZVc5oPT3sjWMz2t3ygyLAPJzHo4EkR8XtenpS5GKQREZG9oal9PeGN6NFm+ZNI/3UxP/TpPnTDjXbP1Y/3vStgkPRh/ioBAAAAOA5+0d+aGGh0/Nj3BwAAAAAAAAAAAAAAAAAAAAAAAAAAAACAcTToKmLB+MMsQhbk9q0eMDHYigMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAafI9AAD//2IOErE=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') socket$nl_audit(0x10, 0x3, 0x9) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x6, 0x80, 0x10021da0, 0x0, 0x5, "00004020e6137db8cbc19e00", 0x8, 0x4}) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 5m9.433154751s ago: executing program 4 (id=304): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x10db, &(0x7f0000000900)={0x0, 0x1786, 0x800, 0x1, 0x220}) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00198008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 5m8.415574985s ago: executing program 4 (id=309): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4f) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) r3 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 5m7.819129771s ago: executing program 33 (id=309): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4f) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) r3 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 4m30.252439983s ago: executing program 1 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x14c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4m26.826877985s ago: executing program 1 (id=590): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 4m26.621680218s ago: executing program 1 (id=593): syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 4m25.597580621s ago: executing program 1 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0x30a9408, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffc}}, {@abort}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") 4m25.1481263s ago: executing program 1 (id=612): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x434, 0x29, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0xffe0}, {0xffe0, 0xf}, {0xfff3, 0x6}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffc, 0xc14, 0x6, 0xfffffff8, 0x101, 0x7, 0x2, 0xf, 0x27, 0x10001, 0x9, 0xfffffff9, 0x8001, 0x7fff, 0x5, 0xf, 0x6, 0x4, 0xe78, 0x1, 0xfffffff7, 0x4, 0xf9bb, 0x7d, 0x5, 0x8, 0xfa, 0xa, 0x8, 0x0, 0x1ff, 0x1, 0x400, 0x0, 0x9, 0x5, 0x8, 0x2, 0x9, 0x8, 0xb0bd, 0x9f8d, 0x8, 0x7ff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0xfffffff7, 0x9, 0x4, 0xfffffffe, 0x80, 0xa6f, 0x76a9, 0x9, 0x3, 0x9, 0x7, 0x7, 0xae, 0x9, 0x5, 0xfffff0f3, 0x7, 0x8, 0x5, 0x10, 0x2, 0x4, 0x4, 0x10001, 0x9, 0x4, 0x8, 0x5, 0x7, 0x5, 0x7fffffff, 0x0, 0x6, 0xf, 0x4, 0x2, 0xa, 0x0, 0x0, 0x5, 0x9000000, 0xfffffff7, 0x3, 0x9, 0xcb, 0x1aed, 0x9b62, 0x4, 0x3, 0x9, 0xc2e, 0x0, 0x14000000, 0xc866, 0x4, 0x8, 0x0, 0x5, 0x3, 0x7, 0x7, 0x6, 0xb32c, 0x3, 0xfff, 0xcb, 0x10, 0xffff, 0xfffffffd, 0x100, 0x9, 0x1, 0xf, 0x40, 0x6, 0x6, 0x4, 0x40, 0x0, 0x9, 0x0, 0x4, 0x10, 0x72e3cc1, 0x6, 0x5, 0x1, 0x6, 0x7, 0x81, 0x9, 0x3, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x1, 0xffffff6a, 0xffff3c8b, 0x5913, 0x7, 0x10001, 0x7, 0x9, 0xe, 0xfffffffd, 0xc, 0x0, 0x400, 0x8, 0x8, 0x8, 0x100, 0x9, 0x8, 0xc043, 0x62da, 0x1, 0x4, 0xee4, 0x5, 0xaaa6, 0x3d66, 0x0, 0x4, 0x2, 0xabe, 0x80, 0x5, 0x8001, 0x1, 0x7fffffff, 0xfffffffe, 0x1000, 0x9, 0x5, 0x8001, 0x7, 0xffff, 0x6, 0xffff, 0x2, 0x777, 0xfffffff1, 0x40, 0xc, 0x3, 0xe, 0x1, 0x0, 0x9, 0x0, 0x3, 0x401, 0x6, 0x6, 0x221, 0x4, 0x2, 0x4, 0x0, 0x8, 0x5, 0xffffffff, 0x401, 0x6, 0xffffffff, 0x7, 0xab, 0x0, 0x4e7, 0x6db2, 0x280, 0x10000, 0x8, 0x0, 0xc5e, 0x89b7, 0x1, 0x2, 0x0, 0x9, 0x9, 0xc, 0x1000, 0x4, 0xd60, 0x9, 0x9, 0x4, 0x2, 0x7, 0x80000001, 0xff, 0x2, 0x6, 0x4, 0x6, 0x3, 0x8, 0xc00, 0x9, 0x80000000, 0x2c]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 4m20.42054547s ago: executing program 1 (id=643): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x3, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}, {0x0}], 0x2}], 0x1, 0x40800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m20.101695314s ago: executing program 34 (id=643): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x3, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}, {0x0}], 0x2}], 0x1, 0x40800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m58.653626581s ago: executing program 5 (id=868): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000002000000732ac0fe00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x4) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 3m58.345739182s ago: executing program 5 (id=872): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois', 0x8) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) 3m57.256764985s ago: executing program 5 (id=884): openat$nullb(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd2e8, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x600) 3m57.033055189s ago: executing program 5 (id=885): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f00000091c0)=""/16384, 0x4000) madvise(0xffffffffffffffff, 0x0, 0x14) 3m56.571171591s ago: executing program 5 (id=887): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 3m56.139643022s ago: executing program 5 (id=892): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x24) close(r0) socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x28, r2, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x14014) 3m55.365026375s ago: executing program 35 (id=892): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x24) close(r0) socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x28, r2, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x14014) 2m36.502474336s ago: executing program 9 (id=1527): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m35.737302169s ago: executing program 9 (id=1536): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000200)={{0x0, 0x1}, {0xe}, 0x40000, 0xba, 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r0, 0x5408, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xad9, @mcast2={0xff, 0x5}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='totmaps\x00') read$FUSE(r3, &(0x7f0000002880)={0x2020}, 0x2020) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='.\x00', &(0x7f0000006a40)='vfat\x00', 0x1004840, 0x0) 2m35.525971584s ago: executing program 9 (id=1540): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) r2 = syz_io_uring_setup(0xefc, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 2m35.40180197s ago: executing program 9 (id=1543): socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16=r0], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, 0x0, 0xfffffcd9) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.957515932s ago: executing program 9 (id=1554): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x2, 0x8}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f00000000c0)={0x23, 0x1, 0x8}, 0x10) connect$phonet_pipe(r2, &(0x7f0000000100)={0x23, 0x2, 0x8}, 0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sendto$phonet(r1, &(0x7f0000000300)="0041010000000000", 0x8, 0x0, &(0x7f0000000340)={0x23, 0x1, 0x8}, 0x10) sendto$phonet(r1, &(0x7f0000000400)="0020010000004500002800004000400600007f0000017f000001", 0x1b, 0x0, &(0x7f0000000340)={0x23, 0x1, 0x8}, 0x10) recvfrom$phonet(r2, &(0x7f0000000500)=""/100, 0x64, 0x40, 0x0, 0x0) 2m33.400661529s ago: executing program 9 (id=1559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='udp 20000\n', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='10\n', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000900)='1\n', 0x2) 2m18.002901644s ago: executing program 36 (id=1559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='udp 20000\n', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='10\n', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000900)='1\n', 0x2) 48.792946813s ago: executing program 2 (id=2072): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 46.602709128s ago: executing program 2 (id=2078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 45.490075484s ago: executing program 2 (id=2082): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 44.738416207s ago: executing program 2 (id=2088): creat(0x0, 0x109) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x808, &(0x7f0000000480)=ANY=[], 0x1, 0x1c2, &(0x7f0000000280)="$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") openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xc138fd06, &(0x7f0000000000)="04") bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) 42.471534162s ago: executing program 2 (id=2094): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) timer_settime(r1, 0x1, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) 41.168861989s ago: executing program 2 (id=2101): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 25.889056302s ago: executing program 37 (id=2101): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 10.457140591s ago: executing program 3 (id=2262): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x444, &(0x7f0000000800)="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", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9.718030429s ago: executing program 3 (id=2265): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101d42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) 7.38093166s ago: executing program 6 (id=2273): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) close(0x3) r1 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x2f0}, 0x0, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 6.863548651s ago: executing program 3 (id=2276): pipe2(&(0x7f0000000000), 0x4800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) 6.653529686s ago: executing program 7 (id=2279): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 6.377652697s ago: executing program 7 (id=2280): r0 = socket$rds(0x15, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x5, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x6da0, 0x7721, 0x16, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40010000, 0x0) 5.377175796s ago: executing program 6 (id=2282): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) 5.081455983s ago: executing program 7 (id=2283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) 4.159320721s ago: executing program 8 (id=2284): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000500)={0x0, 0x3db1, 0x80, 0x2, 0x1e0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0xf32, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xa0}}}, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4.098844197s ago: executing program 7 (id=2285): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x240c0888}, 0x24048080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 4.000389519s ago: executing program 0 (id=2286): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.588898591s ago: executing program 6 (id=2287): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) dup2(0xffffffffffffffff, 0x3) 3.400805681s ago: executing program 3 (id=2288): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) connect$inet(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x2200060, 0x0, 0x11, 0x0, &(0x7f0000000200)) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x1e) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000300)={[{@noblock_validity}, {@resuid}, {@jqfmt_vfsold}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x47e, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@resuid}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3f3}}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") 3.207281613s ago: executing program 3 (id=2289): close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0xfffffffd, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 3.1503052s ago: executing program 8 (id=2290): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 3.141850113s ago: executing program 0 (id=2291): syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x23fd, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2.769441565s ago: executing program 7 (id=2292): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchown(r0, 0x0, 0x0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') 2.7333209s ago: executing program 0 (id=2293): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2001, r1}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x5) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0xc) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.52087667s ago: executing program 8 (id=2294): sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.444345763s ago: executing program 6 (id=2295): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_pidfd_open(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x8000000000000001, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x8, 0x1, 0x41907, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) setns(0xc9, 0x0) socketpair(0x9, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x1, 0x10001, 0x5]}, &(0x7f00000000c0)=0x44) 2.380537424s ago: executing program 4 (id=2190): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7000002, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@random={'security.', '\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) 2.264609775s ago: executing program 0 (id=2296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) socket$kcm(0x10, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x40104d07, &(0x7f0000000900)) 1.887457246s ago: executing program 6 (id=2297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="c6", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x5, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001100)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0xffe0) 1.028961439s ago: executing program 0 (id=2298): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 885.273325ms ago: executing program 3 (id=2299): socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 730.878102ms ago: executing program 4 (id=2300): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) 729.950495ms ago: executing program 8 (id=2301): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000009"], 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) 321.132451ms ago: executing program 8 (id=2302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 289.539502ms ago: executing program 0 (id=2303): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), &(0x7f0000000d80)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000780)}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='lzo', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='1', 0x1) 91.975015ms ago: executing program 7 (id=2304): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-', 0x9, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e812b) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 91.065023ms ago: executing program 8 (id=2305): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 0s ago: executing program 6 (id=2306): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000050)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='Y\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/probability\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='100\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000800)='/proc/self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r4, &(0x7f0000000900)='1\x00', 0x2) write(r3, &(0x7f0000000a00)='test\x00', 0x5) kernel console output (not intermixed with test programs): red allmulticast mode [ 245.813302][ T5748] usb 9-1: Using ep0 maxpacket: 16 [ 245.816356][ T5748] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.817444][ T5748] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.817470][ T5748] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.821594][ T5748] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.821624][ T5748] usb 9-1: Product: syz [ 245.821642][ T5748] usb 9-1: Manufacturer: syz [ 245.821659][ T5748] usb 9-1: SerialNumber: syz [ 245.902654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.930713][ T5748] usb 9-1: 0:2 : does not exist [ 246.119195][ T5748] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 246.446186][ T5748] usb 9-1: USB disconnect, device number 4 [ 246.753427][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1202'. [ 246.867821][ T9887] udevd[9887]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.932714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.055890][ T9915] loop9: detected capacity change from 0 to 512 [ 247.334394][ T5622] Bluetooth: hci6: command 0x1003 tx timeout [ 247.339852][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 247.981671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.022619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.255498][ T43] IPVS: starting estimator thread 0... [ 249.263515][ T9975] ip_tables: iptables: counters copy to user failed while replacing table [ 249.293142][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 249.342805][ T9978] IPVS: using max 26 ests per chain, 62400 per kthread [ 250.052871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.102650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.652876][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 252.132657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.154297][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1235'. [ 252.154353][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1235'. [ 252.440956][T10044] bridge1: port 1(veth3) entered blocking state [ 252.442157][T10044] bridge1: port 1(veth3) entered disabled state [ 252.442319][T10044] veth3: entered allmulticast mode [ 252.461946][T10044] veth3: entered promiscuous mode [ 252.573923][T10045] bridge1: port 2(veth0_to_bond) entered blocking state [ 252.576358][T10045] bridge1: port 2(veth0_to_bond) entered disabled state [ 252.576626][T10045] veth0_to_bond: entered allmulticast mode [ 252.588582][T10045] veth0_to_bond: entered promiscuous mode [ 252.709810][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1243'. [ 252.709841][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1243'. [ 252.828438][T10075] fuse: Unknown parameter '00000000000000000000' [ 253.172707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.491531][T10095] loop6: detected capacity change from 0 to 2048 [ 253.526257][T10095] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.860584][T10103] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.906925][T10095] syz.6.1253: attempt to access beyond end of device [ 253.906925][T10095] loop6: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 254.185252][T10108] overlayfs: failed to clone upperpath [ 254.222754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.674405][T10115] netlink: 'syz.7.1263': attribute type 12 has an invalid length. [ 254.686063][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1263'. [ 255.031286][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.031825][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.031888][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.248598][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1268'. [ 255.252831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.325886][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1268'. [ 255.541668][T10141] netlink: 'syz.3.1269': attribute type 9 has an invalid length. [ 255.541690][T10141] netlink: 'syz.3.1269': attribute type 6 has an invalid length. [ 255.678225][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1283'. [ 256.076147][T10165] ip_tables: iptables: counters copy to user failed while replacing table [ 256.303807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.092946][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 257.342638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.764991][T10190] FAULT_INJECTION: forcing a failure. [ 257.764991][T10190] name failslab, interval 1, probability 0, space 0, times 0 [ 257.765037][T10190] CPU: 1 UID: 0 PID: 10190 Comm: syz.6.1291 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.765071][T10190] Tainted: [L]=SOFTLOCKUP [ 257.765080][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 257.765096][T10190] Call Trace: [ 257.765106][T10190] [ 257.765117][T10190] dump_stack_lvl+0xe8/0x150 [ 257.765160][T10190] should_fail_ex+0x410/0x560 [ 257.765200][T10190] should_failslab+0xa8/0x100 [ 257.765239][T10190] __kmalloc_cache_node_noprof+0xaa/0x620 [ 257.765271][T10190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.765302][T10190] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 257.765327][T10190] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 257.765361][T10190] sbitmap_queue_init_node+0x1dc/0x4d0 [ 257.765392][T10190] kyber_alloc_sched_data+0x25d/0x540 [ 257.765441][T10190] blk_mq_alloc_sched_res+0x103/0x360 [ 257.765484][T10190] elevator_change+0x122/0x480 [ 257.765516][T10190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.765546][T10190] ? do_raw_spin_unlock+0xf5/0x200 [ 257.765590][T10190] elv_iosched_store+0x504/0x630 [ 257.765630][T10190] ? __pfx_elv_iosched_store+0x10/0x10 [ 257.765677][T10190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.765716][T10190] queue_attr_store+0x207/0x2b0 [ 257.765753][T10190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.765789][T10190] ? __pfx_queue_attr_store+0x10/0x10 [ 257.765829][T10190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.765859][T10190] ? lock_acquire+0x115/0x350 [ 257.765888][T10190] ? sysfs_file_kobj+0x1a/0x230 [ 257.765935][T10190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.765968][T10190] ? sysfs_file_kobj+0x1a/0x230 [ 257.766006][T10190] ? sysfs_file_kobj+0x1a/0x230 [ 257.766041][T10190] ? sysfs_file_kobj+0x1a/0x230 [ 257.766079][T10190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.766109][T10190] ? sysfs_file_kobj+0x1e4/0x230 [ 257.766147][T10190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.766177][T10190] ? sysfs_kf_write+0x166/0x260 [ 257.766220][T10190] ? __pfx_sysfs_kf_write+0x10/0x10 [ 257.766257][T10190] kernfs_fop_write_iter+0x3a4/0x540 [ 257.766300][T10190] vfs_write+0x612/0xba0 [ 257.766337][T10190] ? __pfx_vfs_write+0x10/0x10 [ 257.766376][T10190] ? __fget_files+0x2a/0x420 [ 257.766420][T10190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.766464][T10190] ksys_write+0x150/0x270 [ 257.766494][T10190] ? __pfx_ksys_write+0x10/0x10 [ 257.766534][T10190] do_syscall_64+0x166/0x520 [ 257.766572][T10190] ? trace_irq_disable+0x3b/0x140 [ 257.766601][T10190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.766634][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.766661][T10190] RIP: 0033:0x7f868d39e159 [ 257.766684][T10190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.766706][T10190] RSP: 002b:00007f868e2f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.766732][T10190] RAX: ffffffffffffffda RBX: 00007f868d625fa0 RCX: 00007f868d39e159 [ 257.766752][T10190] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 257.766768][T10190] RBP: 00007f868d43506b R08: 0000000000000000 R09: 0000000000000000 [ 257.766785][T10190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.766800][T10190] R13: 00007f868d626038 R14: 00007f868d625fa0 R15: 00007ffe9898a178 [ 257.766841][T10190] [ 258.372994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.773474][T10201] CIFS: Attempting to mount //127.0.0.1/share [ 259.412626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.488613][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1300'. [ 259.589588][T10201] CIFS: VFS: Error connecting to socket. Aborting operation. [ 259.589761][T10201] CIFS: VFS: cifs_mount failed w/return code = -4 [ 259.653752][T10217] bridge1: port 1(veth3) entered blocking state [ 259.663767][T10217] bridge1: port 1(veth3) entered disabled state [ 259.663942][T10217] veth3: entered allmulticast mode [ 259.680099][T10217] veth3: entered promiscuous mode [ 259.876751][T10214] bridge1: port 2(veth0_to_bond) entered blocking state [ 259.876872][T10214] bridge1: port 2(veth0_to_bond) entered disabled state [ 259.877058][T10214] veth0_to_bond: entered allmulticast mode [ 260.017404][T10214] veth0_to_bond: entered promiscuous mode [ 260.150862][T10222] overlayfs: missing 'lowerdir' [ 260.462767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.492840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.553029][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 261.704144][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 261.705513][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.718288][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.718610][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.748074][ T9] usb 7-1: config 0 descriptor?? [ 261.786056][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 262.067052][T10230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.109680][T10230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.213407][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 262.543385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.335813][ T9240] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.335906][ T9240] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.335950][ T9240] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.442790][ T1152] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.491118][ T9] usb 7-1: USB disconnect, device number 8 [ 263.582751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.625689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.733401][ T5755] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 264.883479][ T5755] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 264.884871][ T5755] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.884925][ T5755] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.884978][ T5755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.150192][ T5748] usb 9-1: USB disconnect, device number 5 [ 265.662687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.693295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.720376][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1338'. [ 266.720448][T10383] netlink: 6 bytes leftover after parsing attributes in process `syz.8.1338'. [ 267.179736][T10395] loop8: detected capacity change from 0 to 64 [ 267.420004][T10401] TC_ACT_REPEAT abuse ? [ 267.743038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.289981][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1352'. [ 268.773237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.921748][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 268.921770][ T31] audit: type=1326 audit(268.877:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 268.922028][ T31] audit: type=1326 audit(268.877:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 268.985036][ T31] audit: type=1326 audit(268.947:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 268.985097][ T31] audit: type=1326 audit(268.947:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 268.985148][ T31] audit: type=1326 audit(268.947:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 268.985661][ T31] audit: type=1326 audit(268.947:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 268.985942][ T31] audit: type=1326 audit(268.947:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 268.986403][ T31] audit: type=1326 audit(268.947:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 268.990644][ T31] audit: type=1326 audit(268.947:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 268.992964][ T31] audit: type=1326 audit(268.947:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.6.1361" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 269.406350][T10467] netlink: 'syz.3.1365': attribute type 11 has an invalid length. [ 269.516730][T10470] jffs2: notice: (10470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 269.813282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.253399][T10504] netlink: 'syz.2.1372': attribute type 8 has an invalid length. [ 270.609616][T10506] loop8: detected capacity change from 0 to 32768 [ 270.656357][T10506] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.798253][T10506] XFS (loop8): Ending clean mount [ 270.814431][T10506] XFS (loop8): Quotacheck needed: Please wait. [ 270.852826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.265101][T10506] XFS (loop8): Quotacheck: Done. [ 271.787747][ T8227] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 271.895493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.841183][T10572] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 272.932740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.958155][T10572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.122192][T10579] bond5: (slave veth5): Enslaving as an active interface with a down link [ 273.167830][T10572] bond2: (slave dummy0): Releasing active interface [ 273.203913][T10572] bond5: (slave dummy0): making interface the new active one [ 273.208246][T10572] dummy0: entered promiscuous mode [ 273.208683][T10572] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 273.982698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.051862][T10592] FAULT_INJECTION: forcing a failure. [ 274.051862][T10592] name failslab, interval 1, probability 0, space 0, times 0 [ 274.051910][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.6.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.051954][T10592] Tainted: [L]=SOFTLOCKUP [ 274.051964][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 274.051980][T10592] Call Trace: [ 274.051990][T10592] [ 274.052001][T10592] dump_stack_lvl+0xe8/0x150 [ 274.052044][T10592] should_fail_ex+0x410/0x560 [ 274.052083][T10592] should_failslab+0xa8/0x100 [ 274.052119][T10592] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 274.052150][T10592] ? nf_nat_register_fn+0x27d/0x5e0 [ 274.052174][T10592] ? nf_nat_register_fn+0x27d/0x5e0 [ 274.052206][T10592] kmemdup_array+0x3f/0x80 [ 274.052239][T10592] nf_nat_register_fn+0x27d/0x5e0 [ 274.052264][T10592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.052303][T10592] iptable_nat_table_init+0xd4/0x300 [ 274.052348][T10592] xt_find_table_lock+0x311/0x400 [ 274.052394][T10592] xt_request_find_table_lock+0x26/0x100 [ 274.052439][T10592] do_ipt_get_ctl+0x77f/0x1300 [ 274.052474][T10592] ? release_sock+0x2f/0x260 [ 274.052510][T10592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.052542][T10592] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 274.052574][T10592] ? do_ip_getsockopt+0x12fb/0x1d00 [ 274.052610][T10592] ? do_ip_getsockopt+0x12fb/0x1d00 [ 274.052646][T10592] ? __local_bh_enable_ip+0xd6/0x140 [ 274.052686][T10592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.052714][T10592] ? __mutex_trylock_common+0x15f/0x270 [ 274.052752][T10592] ? __pfx___mutex_trylock_common+0x10/0x10 [ 274.052787][T10592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.052814][T10592] ? rcu_is_watching+0x16/0xb0 [ 274.052857][T10592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.052890][T10592] ? nf_getsockopt+0x224/0x290 [ 274.052939][T10592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.052968][T10592] ? __mutex_unlock_slowpath+0x731/0x900 [ 274.053015][T10592] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.053068][T10592] nf_getsockopt+0x26e/0x290 [ 274.053114][T10592] ip_getsockopt+0x19e/0x230 [ 274.053156][T10592] ? __pfx_ip_getsockopt+0x10/0x10 [ 274.053194][T10592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.053222][T10592] ? sctp_getsockopt+0x9b/0xb90 [ 274.053255][T10592] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 274.053288][T10592] do_sock_getsockopt+0x51d/0x7e0 [ 274.053332][T10592] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 274.053389][T10592] ? __fget_files+0x3a2/0x420 [ 274.053427][T10592] ? __fget_files+0x2a/0x420 [ 274.053466][T10592] __x64_sys_getsockopt+0x1a4/0x240 [ 274.053510][T10592] do_syscall_64+0x166/0x520 [ 274.053544][T10592] ? trace_irq_disable+0x3b/0x140 [ 274.053572][T10592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.053604][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.053630][T10592] RIP: 0033:0x7f868d39e159 [ 274.053653][T10592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.053674][T10592] RSP: 002b:00007f868e2f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 274.053701][T10592] RAX: ffffffffffffffda RBX: 00007f868d625fa0 RCX: 00007f868d39e159 [ 274.053721][T10592] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 274.053736][T10592] RBP: 00007f868d43506b R08: 00002000000000c0 R09: 0000000000000000 [ 274.053754][T10592] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 274.053771][T10592] R13: 00007f868d626038 R14: 00007f868d625fa0 R15: 00007ffe9898a178 [ 274.053810][T10592] [ 274.625791][T10606] netlink: 'syz.2.1404': attribute type 12 has an invalid length. [ 274.625821][T10606] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1404'. [ 274.973385][ T5871] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 275.012654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.124280][ T5871] usb 10-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 275.125314][ T5871] usb 10-1: config 0 has an invalid interface number: 133 but max is 0 [ 275.125335][ T5871] usb 10-1: config 0 has no interface number 0 [ 275.127992][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.128015][ T5871] usb 10-1: Product: syz [ 275.128028][ T5871] usb 10-1: Manufacturer: syz [ 275.128041][ T5871] usb 10-1: SerialNumber: syz [ 275.205044][ T5871] usb 10-1: config 0 descriptor?? [ 275.419282][ T5871] keyspan 10-1:0.133: Keyspan 1 port adapter converter detected [ 275.437953][ T5871] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 81 [ 275.438051][ T5871] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 1 [ 275.448184][ T5871] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 2 [ 275.471154][ T5871] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 275.498120][ T5871] usb 10-1: USB disconnect, device number 2 [ 275.533317][ T5871] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 275.539852][ T5871] keyspan 10-1:0.133: device disconnected [ 275.769876][T10636] netlink: 'syz.8.1416': attribute type 1 has an invalid length. [ 275.798384][T10636] bond1: entered promiscuous mode [ 275.799031][T10636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.984258][ T5755] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 276.052649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.126534][T10650] overlayfs: failed to clone upperpath [ 276.137408][ T5755] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b6e, bcdDevice=9c.00 [ 276.137456][ T5755] usb 7-1: too many configurations: 129, using maximum allowed: 8 [ 276.179314][ T5755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.199915][ T5755] usb 7-1: config 0 descriptor?? [ 276.416173][ T5755] usb 7-1: string descriptor 0 read error: -71 [ 276.441070][ T5755] usb 7-1: USB disconnect, device number 9 [ 276.699129][T10674] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 276.700376][T10674] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 277.092697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.182288][T10689] loop9: detected capacity change from 0 to 8 [ 278.132668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.174598][T10705] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1443'. [ 278.302153][T10711] x_tables: unsorted underflow at hook 2 [ 278.758796][T10730] overlayfs: failed to clone upperpath [ 278.785434][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 278.785456][ T31] audit: type=1326 audit(278.747:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.9.1452" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03459e159 code=0x7fc00000 [ 278.788440][ T31] audit: type=1326 audit(278.747:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.9.1452" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb03459e159 code=0x7fc00000 [ 278.854666][ T31] audit: type=1326 audit(278.817:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.9.1452" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb034597ed7 code=0x7fc00000 [ 278.854728][ T31] audit: type=1326 audit(278.817:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.9.1452" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb03453f4d9 code=0x7fc00000 [ 278.855752][ T31] audit: type=1326 audit(278.817:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.9.1452" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb03453f59d code=0x7fc00000 [ 278.856837][ T31] audit: type=1326 audit(278.817:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.9.1452" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb03459e159 code=0x7fc00000 [ 279.030568][T10735] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1455'. [ 279.172679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.676779][T10749] loop8: detected capacity change from 0 to 2048 [ 279.759386][T10749] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 279.966710][T10760] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1460: bg 0: block 240: padding at end of block bitmap is not set [ 280.042615][T10760] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 280.042658][T10760] EXT4-fs (loop8): This should not happen!! Data will be lost [ 280.042658][T10760] [ 280.042676][T10760] EXT4-fs (loop8): Total free blocks count 0 [ 280.042692][T10760] EXT4-fs (loop8): Free/Dirty block details [ 280.042774][T10760] EXT4-fs (loop8): free_blocks=0 [ 280.042839][T10760] EXT4-fs (loop8): dirty_blocks=32 [ 280.042855][T10760] EXT4-fs (loop8): Block reservation details [ 280.042870][T10760] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 280.212662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.639152][ T138] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 281.044858][T10778] loop8: detected capacity change from 0 to 256 [ 281.252790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.249533][T10797] netlink: 'syz.8.1475': attribute type 3 has an invalid length. [ 282.249920][T10797] netlink: 'syz.8.1475': attribute type 3 has an invalid length. [ 282.292669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.054029][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1479'. [ 283.332657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.355664][T10823] FAULT_INJECTION: forcing a failure. [ 283.355664][T10823] name failslab, interval 1, probability 0, space 0, times 0 [ 283.355705][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz.6.1486 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.355740][T10823] Tainted: [L]=SOFTLOCKUP [ 283.355749][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 283.355764][T10823] Call Trace: [ 283.355773][T10823] [ 283.355783][T10823] dump_stack_lvl+0xe8/0x150 [ 283.355823][T10823] should_fail_ex+0x410/0x560 [ 283.355861][T10823] should_failslab+0xa8/0x100 [ 283.355893][T10823] ? skb_clone+0x212/0x3a0 [ 283.355916][T10823] kmem_cache_alloc_noprof+0xa1/0x600 [ 283.355944][T10823] ? skb_clone+0x212/0x3a0 [ 283.355974][T10823] skb_clone+0x212/0x3a0 [ 283.356001][T10823] bpf_clone_redirect+0x170/0x4b0 [ 283.356040][T10823] ? bpf_test_run+0x1d1/0x830 [ 283.356066][T10823] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 283.356097][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356131][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356160][T10823] ? __pfx___schedule+0x10/0x10 [ 283.356195][T10823] ? irqentry_exit+0x218/0x910 [ 283.356228][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356257][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356284][T10823] ? irqentry_exit+0x218/0x910 [ 283.356321][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356348][T10823] ? preempt_schedule_thunk+0x16/0x40 [ 283.356377][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356405][T10823] ? preempt_schedule_common+0x7f/0xd0 [ 283.356443][T10823] ? bpf_test_run+0x1d1/0x830 [ 283.356471][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356498][T10823] ? bpf_test_timer_continue+0x10c/0x320 [ 283.356528][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356555][T10823] bpf_test_run+0x354/0x830 [ 283.356604][T10823] ? __pfx_bpf_test_run+0x10/0x10 [ 283.356642][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356674][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356703][T10823] ? __kasan_krealloc+0xec/0x110 [ 283.356735][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356773][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356802][T10823] ? skb_dst_set+0x72/0x140 [ 283.356832][T10823] bpf_prog_test_run_skb+0xe35/0x2230 [ 283.356870][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356909][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.356939][T10823] ? __fget_files+0x3a2/0x420 [ 283.356976][T10823] ? __fget_files+0x2a/0x420 [ 283.357019][T10823] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 283.357047][T10823] bpf_prog_test_run+0x2c5/0x340 [ 283.357085][T10823] __sys_bpf+0xa22/0xd90 [ 283.357125][T10823] ? __pfx___sys_bpf+0x10/0x10 [ 283.357158][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.357187][T10823] ? do_futex+0x3e7/0x4e0 [ 283.357258][T10823] ? rcu_is_watching+0x16/0xb0 [ 283.357290][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.357327][T10823] __x64_sys_bpf+0xba/0xd0 [ 283.357358][T10823] do_syscall_64+0x166/0x520 [ 283.357395][T10823] ? trace_irq_disable+0x3b/0x140 [ 283.357422][T10823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.357460][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.357486][T10823] RIP: 0033:0x7f868d39e159 [ 283.357508][T10823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.357529][T10823] RSP: 002b:00007f868e2f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.357556][T10823] RAX: ffffffffffffffda RBX: 00007f868d625fa0 RCX: 00007f868d39e159 [ 283.357575][T10823] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 283.357592][T10823] RBP: 00007f868d43506b R08: 0000000000000000 R09: 0000000000000000 [ 283.357608][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.357624][T10823] R13: 00007f868d626038 R14: 00007f868d625fa0 R15: 00007ffe9898a178 [ 283.357663][T10823] [ 283.417535][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 284.156885][T10815] team0: Port device team_slave_0 removed [ 284.372652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.393179][ T31] audit: type=1800 audit(284.347:1011): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1487" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 284.406543][T10826] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 284.406593][T10826] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 284.406615][T10826] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 285.043128][T10856] netlink: 'syz.2.1497': attribute type 4 has an invalid length. [ 285.205657][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.207239][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.412658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.705515][T10854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.719638][T10854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.144544][ T1167] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.146202][ T9240] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.146251][ T9240] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.146293][ T9240] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.211513][ T9240] dummy0: left promiscuous mode [ 286.452635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.492623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.762379][T10954] tipc: Failed to remove unknown binding: 66,0,0/0:3030293507/3030293508 [ 287.773085][T10954] tipc: Failed to remove unknown binding: 66,0,0/0:3030293507/3030293508 [ 288.168784][T10957] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.169410][T10957] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.209067][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1523'. [ 288.364567][T10957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.371238][T10957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.532710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.831114][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1527'. [ 288.977768][T10983] vlan2: entered promiscuous mode [ 288.977794][T10983] syz_tun: entered promiscuous mode [ 289.037603][T10991] loop8: detected capacity change from 0 to 512 [ 289.074221][T10478] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.074472][T10478] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.074538][T10478] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.074577][T10478] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.124878][T10991] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.297106][ T8227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.485615][T11005] FAT-fs (loop9): unable to read boot sector [ 289.572689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.707492][T11021] fuse: fd is not a fuse device [ 290.003046][T10882] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 290.153646][T10882] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 290.155014][T10882] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 290.155052][T10882] usb 10-1: config 0 interface 0 has no altsetting 0 [ 290.157217][T10882] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 290.157238][T10882] usb 10-1: Product: syz [ 290.157253][T10882] usb 10-1: Manufacturer: syz [ 290.157271][T10882] usb 10-1: SerialNumber: syz [ 290.159974][T10882] usb 10-1: config 0 descriptor?? [ 290.172804][T10882] usb 10-1: selecting invalid altsetting 0 [ 290.428910][T10867] usb 10-1: USB disconnect, device number 3 [ 290.612691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.725745][T11045] syz.6.1550 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 290.725794][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.6.1550 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.725828][T11045] Tainted: [L]=SOFTLOCKUP [ 290.725838][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 290.725854][T11045] Call Trace: [ 290.725864][T11045] [ 290.725875][T11045] dump_stack_lvl+0xe8/0x150 [ 290.725920][T11045] dump_header+0xd3/0x4b0 [ 290.725966][T11045] oom_kill_process+0x3ab/0x9e0 [ 290.726010][T11045] out_of_memory+0x1064/0x1480 [ 290.726045][T11045] ? try_charge_memcg+0xc32/0x15e0 [ 290.726080][T11045] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.726126][T11045] ? __pfx_out_of_memory+0x10/0x10 [ 290.726159][T11045] ? do_raw_spin_unlock+0xf5/0x200 [ 290.726211][T11045] try_charge_memcg+0xcdf/0x15e0 [ 290.726266][T11045] ? __pfx_try_charge_memcg+0x10/0x10 [ 290.726310][T11045] ? percpu_ref_tryget+0x15/0x180 [ 290.726355][T11045] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.726396][T11045] ? __obj_cgroup_charge+0x36/0x2c0 [ 290.726431][T11045] __obj_cgroup_charge+0x1fd/0x2c0 [ 290.726461][T11045] ? __obj_cgroup_charge+0x36/0x2c0 [ 290.726494][T11045] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 290.726546][T11045] ? sk_prot_alloc+0x57/0x210 [ 290.726587][T11045] kmem_cache_alloc_noprof+0x367/0x600 [ 290.726613][T11045] ? trace_kmem_cache_alloc+0x29/0xe0 [ 290.726636][T11045] ? sk_prot_alloc+0x57/0x210 [ 290.726672][T11045] ? kmem_cache_alloc_noprof+0x156/0x600 [ 290.726698][T11045] ? sk_prot_alloc+0x57/0x210 [ 290.726743][T11045] sk_prot_alloc+0x57/0x210 [ 290.726785][T11045] sk_clone+0x7c/0x1080 [ 290.726832][T11045] sctp_clone_sock+0x31/0x1680 [ 290.726869][T11045] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.726907][T11045] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.726936][T11045] ? sock_create_lite+0x334/0x510 [ 290.726982][T11045] sctp_getsockopt_peeloff_common+0x3dd/0x7e0 [ 290.727027][T11045] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 290.727076][T11045] sctp_getsockopt_peeloff_flags+0x14b/0x240 [ 290.727110][T11045] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 290.727137][T11045] ? sctp_getsockopt+0x12f/0xb90 [ 290.727173][T11045] ? __local_bh_enable_ip+0xd6/0x140 [ 290.727209][T11045] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.727245][T11045] sctp_getsockopt+0x3a5/0xb90 [ 290.727279][T11045] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 290.727313][T11045] do_sock_getsockopt+0x51d/0x7e0 [ 290.727360][T11045] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 290.727419][T11045] ? __fget_files+0x3a2/0x420 [ 290.727461][T11045] ? __fget_files+0x2a/0x420 [ 290.727508][T11045] __x64_sys_getsockopt+0x1a4/0x240 [ 290.727560][T11045] do_syscall_64+0x166/0x520 [ 290.727598][T11045] ? trace_irq_disable+0x3b/0x140 [ 290.727627][T11045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.727661][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.727687][T11045] RIP: 0033:0x7f868d39e159 [ 290.727711][T11045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.727732][T11045] RSP: 002b:00007f868e2f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 290.727760][T11045] RAX: ffffffffffffffda RBX: 00007f868d625fa0 RCX: 00007f868d39e159 [ 290.727779][T11045] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000007 [ 290.727794][T11045] RBP: 00007f868d43506b R08: 0000200000000280 R09: 0000000000000000 [ 290.727812][T11045] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 290.727830][T11045] R13: 00007f868d626038 R14: 00007f868d625fa0 R15: 00007ffe9898a178 [ 290.727870][T11045] [ 290.741150][T11045] memory: usage 8kB, limit 8kB, failcnt 21 [ 290.741174][T11045] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 290.741191][T11045] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 290.741207][T11045] Memory cgroup stats for /syz6/test: [ 290.741625][T11045] cache 0 [ 290.741637][T11045] rss 0 [ 290.741646][T11045] rss_huge 0 [ 290.741655][T11045] shmem 0 [ 290.741664][T11045] mapped_file 0 [ 290.741673][T11045] dirty 0 [ 290.741681][T11045] writeback 0 [ 290.741691][T11045] workingset_refault_anon 0 [ 290.741700][T11045] workingset_refault_file 0 [ 290.741711][T11045] swap 0 [ 290.741719][T11045] swapcached 0 [ 290.741728][T11045] pgpgin 0 [ 290.741738][T11045] pgpgout 0 [ 290.741747][T11045] pgfault 0 [ 290.741755][T11045] pgmajfault 0 [ 290.741765][T11045] inactive_anon 0 [ 290.741774][T11045] active_anon 0 [ 290.741783][T11045] inactive_file 0 [ 290.741792][T11045] active_file 0 [ 290.741801][T11045] unevictable 0 [ 290.741811][T11045] hierarchical_memory_limit 8192 [ 290.741821][T11045] hierarchical_memsw_limit 9223372036854771712 [ 290.741833][T11045] total_cache 0 [ 290.741842][T11045] total_rss 0 [ 290.741851][T11045] total_rss_huge 0 [ 290.741860][T11045] total_shmem 0 [ 290.741870][T11045] total_mapped_file 0 [ 290.741879][T11045] total_dirty 0 [ 290.741889][T11045] total_writeback 0 [ 290.741898][T11045] total_workingset_refault_anon 0 [ 290.741909][T11045] total_workingset_refault_file 0 [ 290.741919][T11045] total_swap 0 [ 290.741929][T11045] total_swapcached 0 [ 290.741938][T11045] total_pgpgin 0 [ 290.741947][T11045] total_pgpgout 0 [ 290.741962][T11045] total_pgfault 0 [ 290.741971][T11045] total_pgmajfault 0 [ 290.741981][T11045] total_inactive_anon 0 [ 290.741991][T11045] total_active_anon 0 [ 290.742001][T11045] total_inactive_file 0 [ 290.742010][T11045] total_active_file 0 [ 290.742020][T11045] total_unevictable 0 [ 290.742030][T11045] anon_cost 0 [ 290.742039][T11045] file_cost 0 [ 290.742049][T11045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.1550,pid=11044,uid=0 [ 290.745834][T11045] Memory cgroup out of memory: Killed process 11044 (syz.6.1550) total-vm:102252kB, anon-rss:1432kB, file-rss:23316kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 291.279155][T11052] netlink: 'syz.7.1553': attribute type 10 has an invalid length. [ 291.304931][T11052] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 291.509737][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 291.548019][T10982] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 291.622382][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1556'. [ 291.623776][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1556'. [ 291.652763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.712890][T10982] usb 7-1: Using ep0 maxpacket: 32 [ 291.714667][T10982] usb 7-1: New USB device found, idVendor=3537, idProduct=7e78, bcdDevice=60.9a [ 291.715862][T10982] usb 7-1: config index 0 descriptor too short (expected 200, got 43) [ 291.715890][T10982] usb 7-1: config 21 has an invalid interface association descriptor of length 2, skipping [ 291.715912][T10982] usb 7-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 291.715934][T10982] usb 7-1: config 21 has 0 interfaces, different from the descriptor's value: 1 [ 291.718098][T10982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.718126][T10982] usb 7-1: Product: syz [ 291.718144][T10982] usb 7-1: Manufacturer: syz [ 291.718161][T10982] usb 7-1: SerialNumber: syz [ 291.718268][T11063] loop8: detected capacity change from 0 to 128 [ 291.803617][T11063] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.910955][T11071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 292.021520][T11063] EXT4-fs (loop8): shut down requested (2) [ 292.083685][T10982] usb 7-1: USB disconnect, device number 10 [ 292.209594][ T8227] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.353872][T11082] bond4: entered promiscuous mode [ 292.385877][T11084] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 292.385907][T11084] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 292.430207][T11084] bond4: (slave wireguard0): making interface the new active one [ 292.430236][T11084] wireguard0: entered promiscuous mode [ 292.431347][T11084] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 292.431549][T11090] syz_tun: entered allmulticast mode [ 292.475130][T11086] pimreg: entered allmulticast mode [ 292.479929][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1566'. [ 292.525552][T11085] syz_tun: left allmulticast mode [ 292.525664][T11085] pimreg: left allmulticast mode [ 292.565433][T10478] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.565492][T10478] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.565533][T10478] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.565574][T10478] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.692726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.793814][T11104] loop8: detected capacity change from 0 to 512 [ 292.804751][T11104] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 292.827847][T11104] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1570: invalid indirect mapped block 9 (level 0) [ 292.827887][T11104] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 292.832610][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 292.832638][ C0] EXT4-fs (loop8): initial error at time 292: ext4_free_branches:1023: inode 11 [ 292.832672][ C0] EXT4-fs (loop8): last error at time 292: ext4_free_branches:1023: inode 11 [ 293.029078][T11104] EXT4-fs (loop8): 1 truncate cleaned up [ 293.040431][T11104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.197741][T11111] fuse: fd is not a fuse device [ 293.670213][ T8227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.732671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.938175][T11133] futex_wake_op: syz.2.1581 tries to shift op by 144; fix this program [ 294.189289][T11140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.214565][T11140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.239348][T11140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.256595][T11140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.256922][T11140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.289286][T11139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.772687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.066138][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1590'. [ 295.113568][T11164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1591'. [ 295.812640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.862639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.310477][T11230] xt_TPROXY: Can be used only with -p tcp or -p udp [ 297.614601][T10880] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 297.762611][T10880] usb 9-1: Using ep0 maxpacket: 32 [ 297.765601][T10880] usb 9-1: unable to get BOS descriptor or descriptor too short [ 297.765655][T10880] usb 9-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 297.771103][T10880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.771131][T10880] usb 9-1: Product: syz [ 297.771149][T10880] usb 9-1: Manufacturer: syz [ 297.771166][T10880] usb 9-1: SerialNumber: syz [ 298.160495][T11251] batman_adv: batadv0: Adding interface: dummy0 [ 298.160518][T11251] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.161083][T11251] batman_adv: batadv0: Interface activated: dummy0 [ 298.396167][T10880] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.671339][T11257] netlink: 'syz.3.1627': attribute type 1 has an invalid length. [ 298.726673][T10880] usb 9-1: USB disconnect, device number 6 [ 298.887307][T11257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.942716][ C0] net_ratelimit: 21 callbacks suppressed [ 298.942740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.971876][T11259] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.001342][T11259] bond5: (slave batadv1): making interface the new active one [ 299.017972][ T31] audit: type=1326 audit(298.977:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 299.019257][ T31] audit: type=1326 audit(298.977:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 299.020499][ T31] audit: type=1326 audit(298.977:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 299.020557][ T31] audit: type=1326 audit(298.977:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 299.021156][ T31] audit: type=1326 audit(298.977:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f868d39e159 code=0x7ffc0000 [ 299.079842][ T31] audit: type=1326 audit(299.037:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f868d35e98e code=0x7ffc0000 [ 299.083172][ T31] audit: type=1326 audit(299.047:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f868d35e98e code=0x7ffc0000 [ 299.092119][ T31] audit: type=1326 audit(299.047:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f868d35e98e code=0x7ffc0000 [ 299.093405][ T31] audit: type=1326 audit(299.057:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f868d35e98e code=0x7ffc0000 [ 299.101013][ T31] audit: type=1326 audit(299.057:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.6.1629" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f868d35e98e code=0x7ffc0000 [ 299.298214][T11272] udevd[11272]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.299911][T11259] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 299.435420][T11263] bond5 (unregistering): (slave batadv1): Releasing active interface [ 299.481892][T11263] bond5 (unregistering): Released all slaves [ 299.972641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.386697][T11293] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1638'. [ 300.468784][T11295] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1638'. [ 300.584836][T11293] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 300.590776][T11293] bond2 (unregistering): Released all slaves [ 300.854570][T11295] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 300.904678][T11295] bond2 (unregistering): Released all slaves [ 301.012691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.117183][T11303] sctp: [Deprecated]: syz.7.1641 (pid 11303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.117183][T11303] Use struct sctp_sack_info instead [ 301.395773][T11306] loop8: detected capacity change from 0 to 1024 [ 302.062714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.093124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.132651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.658847][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1662'. [ 305.182721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.212775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.295917][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 306.299849][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 307.252938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.669787][T11451] overlayfs: failed to clone upperpath [ 307.861292][T11456] fuse: fd is not a fuse device [ 308.119427][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.148490][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.152648][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.168757][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.171701][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.292681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.293570][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 308.477785][T11475] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 308.587772][T11475] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.625498][T11479] veth0_to_bond: left allmulticast mode [ 308.625529][T11479] veth0_to_bond: left promiscuous mode [ 308.625788][T11479] bridge1: port 2(veth0_to_bond) entered disabled state [ 308.746625][T11479] bond6: (slave veth0_to_bond): making interface the new active one [ 308.764186][T11479] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 308.802030][T11476] IPVS: Scheduler module ip_vs_sip not found [ 308.866714][T11475] macvlan3: entered promiscuous mode [ 308.866743][T11475] macvlan3: entered allmulticast mode [ 308.867499][T11475] bond6: entered promiscuous mode [ 308.867520][T11475] veth0_to_bond: entered promiscuous mode [ 308.917238][T11475] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 308.919785][T11475] bond6: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 308.957304][T11475] bond6: left promiscuous mode [ 308.957332][T11475] veth0_to_bond: left promiscuous mode [ 309.342635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.292616][ T5622] Bluetooth: hci6: command tx timeout [ 310.372693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.439249][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1697'. [ 311.297414][T11519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.412685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.372688][ T5622] Bluetooth: hci6: command tx timeout [ 312.452632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.988901][T11536] ceph: No mds server is up or the cluster is laggy [ 313.492670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.452674][ T5622] Bluetooth: hci6: command tx timeout [ 314.532710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.572816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.950691][T11459] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.958631][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.958797][T11459] bridge_slave_0: entered allmulticast mode [ 315.969358][T11459] bridge_slave_0: entered promiscuous mode [ 315.991694][T11459] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.002110][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.004211][T11459] bridge_slave_1: entered allmulticast mode [ 316.025168][T11459] bridge_slave_1: entered promiscuous mode [ 316.061306][T11612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.061965][T11612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.074052][T11612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.074708][T11612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.075040][T11612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.107180][T11612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.107388][T11612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.143353][T11610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.291254][T11459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.306036][T11459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.429407][T11459] team0: Port device team_slave_0 added [ 316.461392][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.461453][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.542858][ T5622] Bluetooth: hci6: command tx timeout [ 316.652203][T11459] team0: Port device team_slave_1 added [ 317.740797][T11623] Process accounting resumed [ 318.794900][T11459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.794919][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.794947][T11459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.850470][T11459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.850499][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.850532][T11459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.966754][T11459] hsr_slave_0: entered promiscuous mode [ 318.967880][T11459] hsr_slave_1: entered promiscuous mode [ 318.968630][T11459] debugfs: 'hsr0' already exists in 'hsr' [ 318.968651][T11459] Cannot create hsr debugfs directory [ 319.742782][ C0] net_ratelimit: 4 callbacks suppressed [ 319.742812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.782808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.261231][ T5622] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 321.262080][ T5622] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 321.400499][ T31] kauditd_printk_skb: 146 callbacks suppressed [ 321.400524][ T31] audit: type=1326 audit(321.357:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x0 [ 321.520677][ T31] audit: type=1326 audit(321.477:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 321.520850][ T31] audit: type=1326 audit(321.477:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 321.547003][ T31] audit: type=1326 audit(321.487:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2aac35e98e code=0x7ffc0000 [ 321.547068][ T31] audit: type=1326 audit(321.487:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2aac35e98e code=0x7ffc0000 [ 321.547118][ T31] audit: type=1326 audit(321.487:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2aac35e98e code=0x7ffc0000 [ 321.547168][ T31] audit: type=1326 audit(321.487:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2aac35e98e code=0x7ffc0000 [ 321.547218][ T31] audit: type=1326 audit(321.487:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2aac35e98e code=0x7ffc0000 [ 321.547268][ T31] audit: type=1326 audit(321.487:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2aac35e98e code=0x7ffc0000 [ 321.547317][ T31] audit: type=1326 audit(321.487:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2aac35e98e code=0x7ffc0000 [ 321.812784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.853074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.656124][T11459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.676099][T11459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.679880][T11459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.726808][T11459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.736925][T11459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.874937][T11459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.886029][T11459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.902647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.026158][T11459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.691559][T11459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.766408][T11758] bridge_slave_0: left allmulticast mode [ 324.766438][T11758] bridge_slave_0: left promiscuous mode [ 324.766696][T11758] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.790237][T11758] bridge_slave_1: left allmulticast mode [ 324.790267][T11758] bridge_slave_1: left promiscuous mode [ 324.790531][T11758] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.834447][T11758] veth0_to_bond: left allmulticast mode [ 324.834479][T11758] veth0_to_bond: left promiscuous mode [ 324.841575][T11758] bridge1: port 2(veth0_to_bond) entered disabled state [ 324.931057][T11758] bond0: (slave bond_slave_1): Releasing backup interface [ 324.942788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.966562][T11758] team0: Port device team_slave_0 removed [ 324.984857][T11758] team0: Port device team_slave_1 removed [ 324.985340][T11758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.988252][T11758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.991375][T11758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.001200][T11459] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.061678][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.061794][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.093590][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.093696][ T9242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.973041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.517936][T11784] 9pnet_virtio: no channels available for device 127.0.0.1 [ 327.022672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.974432][T11799] fuse: Bad value for 'fd' [ 328.062730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.988009][T11827] fuse: fd is not a fuse device [ 329.094905][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.629351][T11459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.869633][T11459] veth0_vlan: entered promiscuous mode [ 329.899971][T11459] veth1_vlan: entered promiscuous mode [ 330.025697][T11459] veth0_macvtap: entered promiscuous mode [ 330.059147][T11459] veth1_macvtap: entered promiscuous mode [ 330.132663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.150481][T11459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.210124][T11459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.364074][T10487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.366726][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.455166][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.456245][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.173268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.928636][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.928662][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.110723][T11869] loop6: detected capacity change from 0 to 8 [ 332.222697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.252900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.598718][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.598743][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.852399][T11881] netlink: 'syz.8.1779': attribute type 12 has an invalid length. [ 334.096036][T11889] bridge0: port 3(netdevsim0) entered blocking state [ 334.096124][T11889] bridge0: port 3(netdevsim0) entered disabled state [ 334.096380][T11889] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 334.099945][T11889] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 334.100542][T11889] bridge0: port 3(netdevsim0) entered blocking state [ 334.100631][T11889] bridge0: port 3(netdevsim0) entered forwarding state [ 334.115747][T11890] fuse: fd is not a fuse device [ 334.234791][T11892] ip_tables: iptables: counters copy to user failed while replacing table [ 334.302659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.332982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.382689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.422719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.453024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.493659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.628687][T11905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.640920][T11905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 339.940228][T11905] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 339.941514][T11905] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 340.021937][T11905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 340.032127][T11905] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 340.062974][T11905] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 340.063049][T11905] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 340.092152][T11905] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 340.542631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.832487][T11934] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.857380][T11934] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.572656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.652855][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 341.718225][T11958] netlink: 'syz.8.1797': attribute type 1 has an invalid length. [ 341.921619][T11958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.972587][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 342.079757][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 342.157725][T11968] loop0: detected capacity change from 0 to 1024 [ 342.166886][T11968] ext2: Unknown parameter 'noacl' [ 342.211591][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 342.612706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.617930][T11965] bond2: (slave geneve2): making interface the new active one [ 342.681441][T11965] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 342.822992][ T146] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.824590][ T9240] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.824652][ T9240] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.824704][ T9240] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.938762][T11976] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 343.055473][T11976] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 343.653413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.733179][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 344.053434][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 344.213802][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 344.294786][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 344.650305][T12048] veth1_to_bond: entered allmulticast mode [ 344.677525][T12047] veth1_to_bond: left allmulticast mode [ 344.692877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.750341][T12051] FAULT_INJECTION: forcing a failure. [ 344.750341][T12051] name failslab, interval 1, probability 0, space 0, times 0 [ 344.750384][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.6.1820 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.750418][T12051] Tainted: [L]=SOFTLOCKUP [ 344.750428][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 344.750444][T12051] Call Trace: [ 344.750453][T12051] [ 344.750464][T12051] dump_stack_lvl+0xe8/0x150 [ 344.750524][T12051] should_fail_ex+0x410/0x560 [ 344.750563][T12051] should_failslab+0xa8/0x100 [ 344.750601][T12051] __kmalloc_noprof+0xfe/0x720 [ 344.750628][T12051] ? __kvmalloc_node_noprof+0x345/0x820 [ 344.750659][T12051] ? ceph_msg_new2+0x254/0x4d0 [ 344.750697][T12051] ? ceph_msg_new2+0x254/0x4d0 [ 344.750744][T12051] ceph_msg_new2+0x254/0x4d0 [ 344.750789][T12051] msgpool_alloc+0x80/0x210 [ 344.750814][T12051] ? __pfx_msgpool_alloc+0x10/0x10 [ 344.750838][T12051] mempool_init_node+0x1f4/0x510 [ 344.750876][T12051] ? __pfx_msgpool_alloc+0x10/0x10 [ 344.750902][T12051] mempool_create_node_noprof+0xb8/0x150 [ 344.750930][T12051] ? __pfx_msgpool_free+0x10/0x10 [ 344.750959][T12051] ceph_msgpool_init+0xb3/0x1c0 [ 344.750987][T12051] ceph_osdc_init+0x59d/0x900 [ 344.751037][T12051] ceph_create_client+0x246/0x310 [ 344.751074][T12051] ceph_get_tree+0x1ca/0x1a40 [ 344.751104][T12051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.751134][T12051] ? apparmor_capable+0x126/0x170 [ 344.751165][T12051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.751200][T12051] vfs_get_tree+0x92/0x2a0 [ 344.751232][T12051] vfs_cmd_create+0xa2/0x200 [ 344.751268][T12051] __se_sys_fsconfig+0x6b9/0x810 [ 344.751308][T12051] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 344.751344][T12051] ? rcu_is_watching+0x16/0xb0 [ 344.751376][T12051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.751413][T12051] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.751443][T12051] ? __x64_sys_fsconfig+0x20/0xc0 [ 344.751478][T12051] do_syscall_64+0x166/0x520 [ 344.751522][T12051] ? trace_irq_disable+0x3b/0x140 [ 344.751550][T12051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.751583][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.751608][T12051] RIP: 0033:0x7f868d39e159 [ 344.751631][T12051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.751652][T12051] RSP: 002b:00007f868e2f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 344.751679][T12051] RAX: ffffffffffffffda RBX: 00007f868d625fa0 RCX: 00007f868d39e159 [ 344.751698][T12051] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 344.751713][T12051] RBP: 00007f868d43506b R08: 0000000000000000 R09: 0000000000000000 [ 344.751730][T12051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.751745][T12051] R13: 00007f868d626038 R14: 00007f868d625fa0 R15: 00007ffe9898a178 [ 344.751785][T12051] [ 345.732757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.302627][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 346.782657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.823000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.852675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.892676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.934101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.404250][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1850'. [ 351.529004][T12173] netlink: 'syz.7.1852': attribute type 1 has an invalid length. [ 351.716663][T12173] bond1: entered promiscuous mode [ 351.719019][T12173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.867854][T12181] macvtap1: entered allmulticast mode [ 351.913652][T12187] bond1: (slave bridge1): making interface the new active one [ 351.913681][T12187] bridge1: entered promiscuous mode [ 351.919240][T12187] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 351.972662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.920941][T12220] lo: entered promiscuous mode [ 352.921163][T12220] tunl0: entered promiscuous mode [ 352.921341][T12220] gre0: entered promiscuous mode [ 352.921471][T12220] gretap0: entered promiscuous mode [ 352.921602][T12220] erspan0: entered promiscuous mode [ 352.921733][T12220] ip_vti0: entered promiscuous mode [ 352.921899][T12220] ip6_vti0: entered promiscuous mode [ 352.922033][T12220] sit0: entered promiscuous mode [ 352.970133][T12220] ip6tnl0: entered promiscuous mode [ 352.970301][T12220] ip6gre0: entered promiscuous mode [ 352.970438][T12220] syz_tun: entered promiscuous mode [ 352.970604][T12220] ip6gretap0: entered promiscuous mode [ 352.970979][T12220] bond0: entered promiscuous mode [ 353.002239][T12220] team0: entered promiscuous mode [ 353.012670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.015356][T12220] dummy0: entered promiscuous mode [ 353.015563][T12220] nlmon0: entered promiscuous mode [ 353.015733][T12220] batadv0: entered promiscuous mode [ 353.015902][T12220] veth0: entered promiscuous mode [ 353.016074][T12220] veth1: entered promiscuous mode [ 353.016237][T12220] wg0: entered promiscuous mode [ 353.016400][T12220] wg1: entered promiscuous mode [ 353.070767][T12220] wg2: entered promiscuous mode [ 353.070967][T12220] veth0_to_bridge: entered promiscuous mode [ 353.071148][T12220] bridge_slave_0: entered promiscuous mode [ 353.071310][T12220] veth1_to_bridge: entered promiscuous mode [ 353.071473][T12220] bridge_slave_1: entered promiscuous mode [ 353.071635][T12220] veth0_to_bond: entered promiscuous mode [ 353.078897][T12220] veth1_to_bond: entered promiscuous mode [ 353.079090][T12220] bond_slave_1: entered promiscuous mode [ 353.171458][T12220] veth0_to_team: entered promiscuous mode [ 353.171640][T12220] team_slave_0: entered promiscuous mode [ 353.171803][T12220] veth1_to_team: entered promiscuous mode [ 353.171965][T12220] team_slave_1: entered promiscuous mode [ 353.172129][T12220] veth0_to_batadv: entered promiscuous mode [ 353.172284][T12220] batadv_slave_0: entered promiscuous mode [ 353.173073][T12220] veth1_to_batadv: entered promiscuous mode [ 353.173279][T12220] batadv_slave_1: entered promiscuous mode [ 353.173439][T12220] xfrm0: entered promiscuous mode [ 353.173594][T12220] veth0_to_hsr: entered promiscuous mode [ 353.173927][T12220] veth1_to_hsr: entered promiscuous mode [ 353.174233][T12220] hsr0: entered promiscuous mode [ 353.174432][T12220] veth1_virt_wifi: entered promiscuous mode [ 353.174588][T12220] veth0_virt_wifi: entered promiscuous mode [ 353.174741][T12220] virt_wifi0: entered promiscuous mode [ 353.175199][T12220] vlan0: entered promiscuous mode [ 353.175525][T12220] vlan1: entered promiscuous mode [ 353.175882][T12220] macvlan0: entered promiscuous mode [ 353.176049][T12220] macvlan1: entered promiscuous mode [ 353.176201][T12220] ipvlan0: entered promiscuous mode [ 353.176381][T12220] ipvlan1: entered promiscuous mode [ 353.176815][T12220] macvtap0: entered promiscuous mode [ 353.177002][T12220] macsec0: entered promiscuous mode [ 353.177125][T12220] geneve0: entered promiscuous mode [ 353.177286][T12220] geneve1: entered promiscuous mode [ 353.177453][T12220] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 353.177617][T12220] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 353.177747][T12220] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 353.177875][T12220] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 353.178011][T12220] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 353.178194][T12220] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 353.178347][T12220] bridge1: entered promiscuous mode [ 353.178486][T12220] veth2: entered promiscuous mode [ 354.031621][T12230] xt_hashlimit: max too large, truncated to 1048576 [ 354.034205][T12220] syzkaller0: entered promiscuous mode [ 354.052658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.202345][T12220] bond2: entered promiscuous mode [ 354.202374][T12220] geneve2: entered promiscuous mode [ 354.283030][T10485] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.283072][T10485] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.283301][T10485] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.283335][T10485] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.283376][T10485] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.283406][T10485] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.292731][T10488] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.292773][T10488] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.822338][T12246] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.890508][T12246] team0: Mode changed to "activebackup" [ 355.092642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.660152][T12275] sctp: [Deprecated]: syz.0.1882 (pid 12275) Use of int in max_burst socket option. [ 355.660152][T12275] Use struct sctp_assoc_value instead [ 355.736063][T12278] sctp: [Deprecated]: syz.0.1882 (pid 12278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.736063][T12278] Use struct sctp_sack_info instead [ 355.755192][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1883'. [ 355.787456][T12277] ip6gre1: entered promiscuous mode [ 355.787477][T12277] ip6gre1: entered allmulticast mode [ 356.133117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.206894][T10982] libceph: connect (1)127.0.0.1:6789 error -101 [ 356.207268][T10982] libceph: mon0 (1)127.0.0.1:6789 connect error [ 356.220331][T10982] libceph: connect (1)127.0.0.1:6789 error -101 [ 356.220641][T10982] libceph: mon0 (1)127.0.0.1:6789 connect error [ 356.488863][T10982] libceph: connect (1)127.0.0.1:6789 error -101 [ 356.489062][T10982] libceph: mon0 (1)127.0.0.1:6789 connect error [ 356.868600][T12289] ceph: No mds server is up or the cluster is laggy [ 356.994655][T10982] libceph: connect (1)127.0.0.1:6789 error -101 [ 356.994807][T10982] libceph: mon0 (1)127.0.0.1:6789 connect error [ 357.172765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.583341][T12341] loop0: detected capacity change from 0 to 128 [ 357.653838][T12341] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 357.857658][T12341] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 357.864054][T12349] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 358.222698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.275857][T12351] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 359.252800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.371672][T12369] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 359.398822][T11459] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.964824][T12393] block2mtd: error: cannot open device ./dev/loop0 [ 360.283281][T12405] fuse: fd is not a fuse device [ 360.292934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.557156][T12410] ip_tables: iptables: counters copy to user failed while replacing table [ 361.302178][T12422] ip_tables: iptables: counters copy to user failed while replacing table [ 361.332955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.653105][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 361.852101][T12441] netlink: zone id is out of range [ 361.864596][T12441] netlink: zone id is out of range [ 361.864903][T12441] netlink: zone id is out of range [ 361.865144][T12441] netlink: zone id is out of range [ 361.875377][T12441] netlink: zone id is out of range [ 361.875584][T12441] netlink: zone id is out of range [ 361.875629][T12441] netlink: zone id is out of range [ 361.875954][T12441] netlink: zone id is out of range [ 362.511480][T12449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1924'. [ 364.614148][ T31] kauditd_printk_skb: 51 callbacks suppressed [ 364.614173][ T31] audit: type=1326 audit(364.577:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 364.617658][ T31] audit: type=1326 audit(364.577:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 364.617722][ T31] audit: type=1326 audit(364.577:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 364.617773][ T31] audit: type=1326 audit(364.577:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 364.617824][ T31] audit: type=1326 audit(364.577:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 364.617874][ T31] audit: type=1326 audit(364.577:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 364.618231][ T31] audit: type=1326 audit(364.577:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 364.808547][ T31] audit: type=1326 audit(364.757:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 364.808613][ T31] audit: type=1326 audit(364.767:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 364.808663][ T31] audit: type=1326 audit(364.767:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.3.1940" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aac39e159 code=0x7ffc0000 [ 365.536223][T12526] jffs2: notice: (12526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 366.532654][ C0] net_ratelimit: 182 callbacks suppressed [ 366.532681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.911990][T12552] fuse: Bad value for 'fd' [ 367.572645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.061215][T12578] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 368.622661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.927171][T12580] tipc: Enabled bearer , priority 0 [ 369.491381][T12605] netlink: 'syz.2.1973': attribute type 4 has an invalid length. [ 369.602199][T12608] Option 'dnserror' to dns_resolver key: bad/missing value [ 369.652768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.692729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.641956][T12613] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 371.642392][T12613] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 371.666038][T12613] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 371.742648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.773574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.959551][T12651] tipc: Enabling of bearer rejected, failed to enable media [ 373.168327][T12656] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[11459] was attempted by " [ 373.812948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.852968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.903243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.300817][T12667] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 376.300850][T12667] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 376.300885][T12667] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 376.304512][T12667] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 376.311340][T12667] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 376.585694][T12677] loop6: detected capacity change from 0 to 2048 [ 376.638815][T12677] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 376.651595][T12677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.932729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.912554][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.913110][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.913171][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.982664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.012639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.052628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.846051][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 380.846074][ T31] audit: type=1326 audit(380.807:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.846436][ T31] audit: type=1326 audit(380.807:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.849430][ T31] audit: type=1326 audit(380.807:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.849569][ T31] audit: type=1326 audit(380.807:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.850421][ T31] audit: type=1326 audit(380.807:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.851896][ T31] audit: type=1326 audit(380.807:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.885442][ T31] audit: type=1326 audit(380.807:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.885501][ T31] audit: type=1326 audit(380.817:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.885559][ T31] audit: type=1326 audit(380.837:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.885607][ T31] audit: type=1326 audit(380.837:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.7.2003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 380.948861][T12756] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2012'. [ 381.092951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.142638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.182714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.933378][T12790] fuse: fd is not a fuse device [ 383.981410][ T1152] IPVS: starting estimator thread 0... [ 384.063301][T12791] IPVS: using max 28 ests per chain, 67200 per kthread [ 384.212667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.670854][T12769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 384.671160][T12769] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 385.240680][T12769] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 385.240706][T12769] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 385.257794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.283833][T12769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.283860][T12769] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 385.312152][T12769] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 385.312177][T12769] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 386.302625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.366016][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2030'. [ 386.366046][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2030'. [ 386.414251][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2032'. [ 386.499357][T12806] bridge0: port 3(netdevsim0) entered disabled state [ 386.499560][T12806] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.500261][T12806] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.509718][T12806] bridge0: left promiscuous mode [ 386.509741][T12806] bridge0: left allmulticast mode [ 386.662347][T10478] IPVS: starting estimator thread 0... [ 386.773621][T12823] IPVS: using max 25 ests per chain, 60000 per kthread [ 386.960247][T12828] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2036'. [ 387.117975][T12806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.332636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.325585][T12806] batman_adv: batadv0: Interface deactivated: gretap1 [ 388.382612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.420374][T12806] bond3: left allmulticast mode [ 388.603323][T12806] bond4: left promiscuous mode [ 388.603353][T12806] wireguard0: left promiscuous mode [ 388.642499][ T9240] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.642543][ T9240] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.645364][T10485] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.645400][T10485] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.645479][T10485] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.645511][T10485] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.645571][T10485] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.647931][T10485] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.812319][T12828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.956542][T12828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.987071][T12828] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 389.031814][T12828] bond0 (unregistering): Released all slaves [ 389.413039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.462696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.806731][T12867] binder: BINDER_SET_CONTEXT_MGR already set [ 390.806750][T12867] binder: 12866:12867 ioctl 4018620d 200000000100 returned -16 [ 390.882099][T12867] binder: BINDER_SET_CONTEXT_MGR already set [ 390.882119][T12867] binder: 12866:12867 ioctl 4018620d 200000004a80 returned -16 [ 390.898554][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 390.898579][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 391.492657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.267086][T12880] loop6: detected capacity change from 0 to 4096 [ 392.298621][T12880] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 392.298647][T12880] EXT4-fs (loop6): Test dummy encryption mode enabled [ 392.381328][T12880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.532642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.869310][T12889] fscrypt: AES-256-XTS using blk-crypto-fallback [ 393.476302][T12889] overlayfs: failed index dir cleanup (-512) [ 393.476323][T12889] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 393.572684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.221559][T12906] loop0: detected capacity change from 0 to 512 [ 394.421995][T12912] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2058'. [ 394.434031][T12908] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 394.462187][T12906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.462208][T12906] IPv6: NLM_F_CREATE should be set when creating new route [ 394.576116][T12908] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 394.585270][T12915] futex_wake_op: syz.3.2062 tries to shift op by 144; fix this program [ 394.592174][T12914] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 394.594867][ T6820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.601450][T12908] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 394.622694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.750955][T12908] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 394.841594][T12908] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 394.871713][T12908] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 394.895557][T12908] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 394.909996][T12908] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 394.963796][T12908] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 395.652632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.422351][T12941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.692851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.732725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.782622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.822655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.851753][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.921544][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.922122][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.929931][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.930080][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.930419][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.930776][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.867628][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'. [ 400.867759][T12989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.193442][T12989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.070649][T12995] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2090'. [ 402.100337][T12996] loop6: detected capacity change from 0 to 4096 [ 402.804479][T13013] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.833061][T12996] NILFS (loop6): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 402.833174][T12996] NILFS (loop6): error -5 getting root inode [ 402.913306][T13008] netlink: 'syz.7.2093': attribute type 4 has an invalid length. [ 402.932625][ C0] net_ratelimit: 156 callbacks suppressed [ 402.932647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.937260][T13008] netlink: 'syz.7.2093': attribute type 4 has an invalid length. [ 403.028237][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 403.028261][ T31] audit: type=1326 audit(402.987:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13011 comm="syz.2.2094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42099e159 code=0x7fc00000 [ 403.066330][ T31] audit: type=1326 audit(402.997:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13011 comm="syz.2.2094" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb42099e159 code=0x7fc00000 [ 403.646351][ T31] audit: type=1326 audit(403.607:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.7.2099" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 403.646416][ T31] audit: type=1326 audit(403.607:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.7.2099" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 403.678754][ T31] audit: type=1326 audit(403.617:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.7.2099" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 403.678819][ T31] audit: type=1326 audit(403.617:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.7.2099" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 403.678868][ T31] audit: type=1326 audit(403.617:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.7.2099" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 403.678916][ T31] audit: type=1326 audit(403.617:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.7.2099" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 403.678965][ T31] audit: type=1326 audit(403.617:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.7.2099" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 403.679013][ T31] audit: type=1326 audit(403.617:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.7.2099" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8479e159 code=0x7ffc0000 [ 403.889287][T13031] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2100'. [ 403.889309][T13031] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2100'. [ 403.889324][T13031] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2100'. [ 403.982718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.022714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.150911][T13067] loop6: detected capacity change from 0 to 512 [ 405.164176][T13067] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 405.164199][T13067] UDF-fs: Scanning with blocksize 512 failed [ 405.181323][T13067] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 405.181344][T13067] UDF-fs: Scanning with blocksize 1024 failed [ 405.188026][T13067] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 405.188045][T13067] UDF-fs: Scanning with blocksize 2048 failed [ 405.195219][T13067] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 405.204881][T13067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.053181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.102623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.376380][T13096] loop6: detected capacity change from 0 to 64 [ 408.132727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.767376][T13127] file system registered [ 408.885337][T13127] ffs_data_put(): freeing [ 409.024343][T13138] overlayfs: failed to clone upperpath [ 409.050973][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 409.050992][ T31] audit: type=1326 audit(409.007:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13136 comm="syz.8.2136" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa300b9e159 code=0x0 [ 409.173032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.083169][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2139'. [ 410.222800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.328173][T13147] veth5: entered allmulticast mode [ 410.368774][T13147] bond3: (slave veth5): Enslaving as an active interface with an up link [ 411.262677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.302652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.332664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.969043][T13225] loop6: detected capacity change from 0 to 256 [ 414.373159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.814673][T13244] fuse: fd is not a fuse device [ 414.882199][T13247] loop6: detected capacity change from 0 to 8 [ 415.413094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.452793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.492789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.895191][T13288] bridge0: port 4(dummy0) entered blocking state [ 417.895325][T13288] bridge0: port 4(dummy0) entered disabled state [ 417.895518][T13288] dummy0: entered allmulticast mode [ 417.904981][T13288] dummy0: entered promiscuous mode [ 418.041266][T13291] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 418.041312][T13291] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 418.041334][T13291] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 418.494136][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 418.533069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.556317][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 419.295115][T13318] loop6: detected capacity change from 0 to 1024 [ 419.296264][T13318] ext4: Bad value for 'stripe' [ 419.408226][ T31] audit: type=1326 audit(419.367:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa300b9e159 code=0x7ffc0000 [ 419.408290][ T31] audit: type=1326 audit(419.367:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa300b9e159 code=0x7ffc0000 [ 419.408340][ T31] audit: type=1326 audit(419.367:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa300b9e159 code=0x7ffc0000 [ 419.408389][ T31] audit: type=1326 audit(419.367:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa300b9e159 code=0x7ffc0000 [ 419.408446][ T31] audit: type=1326 audit(419.367:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa300b9e159 code=0x7ffc0000 [ 419.489492][ T31] audit: type=1326 audit(419.447:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa300b5e98e code=0x7ffc0000 [ 419.489555][ T31] audit: type=1326 audit(419.447:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa300b5e98e code=0x7ffc0000 [ 419.491968][ T31] audit: type=1326 audit(419.447:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa300b5e98e code=0x7ffc0000 [ 419.494981][ T31] audit: type=1326 audit(419.457:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa300b5e98e code=0x7ffc0000 [ 419.497400][ T31] audit: type=1326 audit(419.457:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.8.2189" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa300b5e98e code=0x7ffc0000 [ 419.596662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.632851][ T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 419.782548][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 419.784849][ T30] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 419.786343][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.786377][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.786403][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 419.786455][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.796750][ T30] usb 7-1: config 0 descriptor?? [ 420.089145][ T5618] tipc: Resetting bearer [ 420.186619][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.189686][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.191343][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.204295][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.227121][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.235139][ T5618] tipc: Disabling bearer [ 420.272356][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.277507][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.277825][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.278785][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.279401][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.353283][ T30] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input10 [ 420.426200][ T30] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 420.546693][ T5344] usb 7-1: USB disconnect, device number 11 [ 420.613001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.898885][T13335] fido_id[13335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 421.508860][T13356] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 421.652623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.293148][ T52] Bluetooth: hci4: command tx timeout [ 422.437975][T13328] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.438170][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.438308][T13328] bridge_slave_0: entered allmulticast mode [ 422.441060][T13328] bridge_slave_0: entered promiscuous mode [ 422.471054][T13328] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.471256][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.471698][T13328] bridge_slave_1: entered allmulticast mode [ 422.489024][T13328] bridge_slave_1: entered promiscuous mode [ 422.539614][T13328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.553494][T13328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.596346][T13328] team0: Port device team_slave_0 added [ 422.599798][T13328] team0: Port device team_slave_1 added [ 422.645595][T13328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.645617][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.645647][T13328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.647960][T13328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.647976][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.648007][T13328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.702799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.000371][T13328] hsr_slave_0: entered promiscuous mode [ 423.005734][T13328] hsr_slave_1: entered promiscuous mode [ 423.006543][T13328] debugfs: 'hsr0' already exists in 'hsr' [ 423.006564][T13328] Cannot create hsr debugfs directory [ 423.721664][T13415] bridge0: port 3(syz_tun) entered blocking state [ 423.730978][T13415] bridge0: port 3(syz_tun) entered disabled state [ 423.731131][T13415] syz_tun: entered allmulticast mode [ 423.732655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.761102][T13415] syz_tun: entered promiscuous mode [ 424.395760][ T52] Bluetooth: hci4: command tx timeout [ 424.772883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.812854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.948292][T13470] SET target dimension over the limit! [ 426.308562][T13478] fuse: fd is not a fuse device [ 426.454628][ T52] Bluetooth: hci4: command tx timeout [ 426.714223][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2235'. [ 426.853447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.614476][T13328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 427.651441][T13328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.663805][T13328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.710444][T13328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.718759][T13328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 427.744819][T13328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.749333][T13328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 427.783339][T13328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.832894][T13502] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2237'. [ 427.892751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.532834][ T52] Bluetooth: hci4: command tx timeout [ 428.932649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.968523][T13328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.005610][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.982645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.200941][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.201025][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.274731][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.274838][ T9242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.454028][ T31] kauditd_printk_skb: 187 callbacks suppressed [ 430.454050][ T31] audit: type=1326 audit(430.407:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 430.454103][ T31] audit: type=1326 audit(430.417:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 431.012753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.424236][ T31] audit: type=1326 audit(431.387:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 431.424297][ T31] audit: type=1326 audit(431.387:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 431.428121][ T31] audit: type=1326 audit(431.387:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 431.428178][ T31] audit: type=1326 audit(431.387:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 431.428230][ T31] audit: type=1326 audit(431.387:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 431.428661][ T31] audit: type=1326 audit(431.387:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 431.429076][ T31] audit: type=1326 audit(431.387:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 431.462274][ T31] audit: type=1326 audit(431.387:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.0.2249" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f728219e159 code=0x7ffc0000 [ 432.062746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.093208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.143934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.486527][T13609] netlink: 'syz.3.2259': attribute type 4 has an invalid length. [ 434.778043][T13617] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 434.778072][T13617] ref_ctr increment failed for inode: 0x9f6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888038a04980 [ 435.046497][T13617] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 435.046521][T13617] ref_ctr decrement failed for inode: 0x9f6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888038a04980 [ 435.046558][T13617] uprobe: syz.3.2262:13617 failed to unregister, leaking uprobe [ 435.182648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.874919][T13328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.021794][T13656] overlayfs: failed to clone upperpath [ 436.213105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.405040][T13661] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 437.252647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.302632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.433653][T13328] veth0_vlan: entered promiscuous mode [ 439.343986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.440173][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.440675][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.440733][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.500741][T13328] veth1_vlan: entered promiscuous mode [ 439.729993][T13328] veth0_macvtap: entered promiscuous mode [ 439.773849][T13328] veth1_macvtap: entered promiscuous mode [ 439.908791][T13328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.929169][T13328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.373083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.014622][ T9242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.033336][T10484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.034460][T10484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.034786][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.412637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.549215][T13733] vlan2: entered promiscuous mode [ 441.549236][T13733] bridge0: entered promiscuous mode [ 441.730762][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.730781][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.799072][T13742] batman_adv: batadv0: Interface deactivated: dummy0 [ 441.814579][T13745] cgroup: Unknown subsys name 'cpuset' [ 441.994771][ T50] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.995601][ T50] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.083067][ T59] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.135813][ T169] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.272963][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.273045][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.452733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.502673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.533100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.889788][T13805] tipc: Failed to remove unknown binding: 66,0,0/2886997007:68714511/68714513 [ 444.889827][T13805] tipc: Failed to remove unknown binding: 66,0,0/2886997007:68714511/68714512 [ 444.890525][T13805] tipc: Failed to remove unknown binding: 66,0,0/2886997007:68714511/68714513 [ 444.890556][T13805] tipc: Failed to remove unknown binding: 66,0,0/2886997007:68714511/68714512 [ 445.162990][ T32] INFO: task syz.9.1559:11065 blocked for more than 143 seconds. [ 445.163025][ T32] Tainted: G L syzkaller #0 [ 445.163041][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.163053][ T32] task:syz.9.1559 state:D stack:27432 pid:11065 tgid:11064 ppid:8986 task_flags:0x400140 flags:0x00080002 [ 445.163139][ T32] Call Trace: [ 445.163148][ T32] [ 445.163166][ T32] __schedule+0x17db/0x58f0 [ 445.163225][ T32] ? arch_stack_walk+0xfb/0x150 [ 445.163271][ T32] ? __pfx___schedule+0x10/0x10 [ 445.163317][ T32] ? schedule+0x90/0x2b0 [ 445.163356][ T32] schedule+0x164/0x2b0 [ 445.163393][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.163428][ T32] __mutex_lock+0x7c1/0x1550 [ 445.163472][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.163516][ T32] ? write_versions+0x95/0xe30 [ 445.163558][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.163615][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.163652][ T32] write_versions+0x95/0xe30 [ 445.163699][ T32] ? __pfx_write_versions+0x10/0x10 [ 445.163737][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.163779][ T32] ? _copy_from_user+0x94/0xb0 [ 445.163817][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.163847][ T32] ? simple_transaction_get+0x12d/0x160 [ 445.163892][ T32] nfsctl_transaction_write+0x10f/0x160 [ 445.163934][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 445.163973][ T32] vfs_write+0x296/0xba0 [ 445.164011][ T32] ? __pfx_vfs_write+0x10/0x10 [ 445.164039][ T32] ? __fget_files+0x2a/0x420 [ 445.164093][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.164123][ T32] ? __fget_files+0x3a2/0x420 [ 445.164161][ T32] ? __fget_files+0x2a/0x420 [ 445.164243][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.164281][ T32] ksys_write+0x150/0x270 [ 445.164310][ T32] ? __pfx_ksys_write+0x10/0x10 [ 445.164351][ T32] do_syscall_64+0x166/0x520 [ 445.164388][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.164417][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.164451][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.164477][ T32] RIP: 0033:0x7fb03459e159 [ 445.164500][ T32] RSP: 002b:00007fb03542b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.164526][ T32] RAX: ffffffffffffffda RBX: 00007fb034825fa0 RCX: 00007fb03459e159 [ 445.164546][ T32] RDX: 0000000000000009 RSI: 0000200000000300 RDI: 0000000000000003 [ 445.164563][ T32] RBP: 00007fb03463506b R08: 0000000000000000 R09: 0000000000000000 [ 445.164579][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.164595][ T32] R13: 00007fb034826038 R14: 00007fb034825fa0 R15: 00007fff9cffe8c8 [ 445.164637][ T32] [ 445.164649][ T32] INFO: task syz.9.1559:11075 blocked for more than 143 seconds. [ 445.164671][ T32] Tainted: G L syzkaller #0 [ 445.164686][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.164697][ T32] task:syz.9.1559 state:D stack:27432 pid:11075 tgid:11064 ppid:8986 task_flags:0x400040 flags:0x00080002 [ 445.164772][ T32] Call Trace: [ 445.164781][ T32] [ 445.164797][ T32] __schedule+0x17db/0x58f0 [ 445.164845][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.164879][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.164914][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.164947][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.164985][ T32] ? __pfx___schedule+0x10/0x10 [ 445.165031][ T32] ? schedule+0x90/0x2b0 [ 445.165077][ T32] schedule+0x164/0x2b0 [ 445.165134][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.165169][ T32] __mutex_lock+0x7c1/0x1550 [ 445.165789][ T32] ? nfsctl_transaction_write+0xc7/0x160 [ 445.165837][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.165879][ T32] ? nfsd4_write_time+0xb1/0x6c0 [ 445.165921][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.165984][ T32] nfsd4_write_time+0xb1/0x6c0 [ 445.166028][ T32] ? lock_acquire+0x115/0x350 [ 445.166057][ T32] ? __pfx_nfsd4_write_time+0x10/0x10 [ 445.166108][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.166142][ T32] ? net_generic+0x1e/0x240 [ 445.166175][ T32] ? net_generic+0x1e/0x240 [ 445.166207][ T32] ? net_generic+0x1e/0x240 [ 445.166240][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.166270][ T32] ? net_generic+0x1f4/0x240 [ 445.166305][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.166335][ T32] ? write_gracetime+0x8a/0xb0 [ 445.166377][ T32] nfsctl_transaction_write+0x10f/0x160 [ 445.166419][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 445.166459][ T32] vfs_write+0x296/0xba0 [ 445.166496][ T32] ? __pfx_vfs_write+0x10/0x10 [ 445.166525][ T32] ? __fget_files+0x2a/0x420 [ 445.166568][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.166598][ T32] ? __fget_files+0x3a2/0x420 [ 445.166635][ T32] ? __fget_files+0x2a/0x420 [ 445.166678][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.166714][ T32] ksys_write+0x150/0x270 [ 445.166743][ T32] ? __pfx_ksys_write+0x10/0x10 [ 445.166784][ T32] do_syscall_64+0x166/0x520 [ 445.166821][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.166849][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.166883][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.166909][ T32] RIP: 0033:0x7fb03459e159 [ 445.166931][ T32] RSP: 002b:00007fb0353e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.166958][ T32] RAX: ffffffffffffffda RBX: 00007fb034826180 RCX: 00007fb03459e159 [ 445.166978][ T32] RDX: 0000000000000003 RSI: 0000200000000700 RDI: 0000000000000005 [ 445.166995][ T32] RBP: 00007fb03463506b R08: 0000000000000000 R09: 0000000000000000 [ 445.167011][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.167028][ T32] R13: 00007fb034826218 R14: 00007fb034826180 R15: 00007fff9cffe8c8 [ 445.167075][ T32] [ 445.167086][ T32] INFO: task syz.9.1559:11076 blocked for more than 143 seconds. [ 445.167109][ T32] Tainted: G L syzkaller #0 [ 445.167123][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.167135][ T32] task:syz.9.1559 state:D stack:27432 pid:11076 tgid:11064 ppid:8986 task_flags:0x400040 flags:0x00080002 [ 445.167210][ T32] Call Trace: [ 445.167219][ T32] [ 445.167234][ T32] __schedule+0x17db/0x58f0 [ 445.167289][ T32] ? __kernel_text_address+0xd/0x30 [ 445.167321][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.167352][ T32] ? arch_stack_walk+0xfb/0x150 [ 445.167389][ T32] ? __pfx___schedule+0x10/0x10 [ 445.167435][ T32] ? schedule+0x90/0x2b0 [ 445.167473][ T32] schedule+0x164/0x2b0 [ 445.167510][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.167545][ T32] __mutex_lock+0x7c1/0x1550 [ 445.167581][ T32] ? nfsctl_transaction_write+0xc7/0x160 [ 445.167627][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.167669][ T32] ? write_threads+0x3b1/0x610 [ 445.167711][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.167747][ T32] ? simple_strntoull+0x114/0x190 [ 445.167788][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.167819][ T32] ? qword_get+0x5ad/0x650 [ 445.167856][ T32] write_threads+0x3b1/0x610 [ 445.167898][ T32] ? __pfx_write_threads+0x10/0x10 [ 445.167946][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.167989][ T32] ? _copy_from_user+0x94/0xb0 [ 445.168026][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.168056][ T32] ? simple_transaction_get+0x12d/0x160 [ 445.168105][ T32] nfsctl_transaction_write+0x10f/0x160 [ 445.168148][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 445.168188][ T32] vfs_write+0x296/0xba0 [ 445.168225][ T32] ? __pfx_vfs_write+0x10/0x10 [ 445.168254][ T32] ? __fget_files+0x2a/0x420 [ 445.168298][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.168328][ T32] ? __fget_files+0x3a2/0x420 [ 445.168366][ T32] ? __fget_files+0x2a/0x420 [ 445.168410][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.168445][ T32] ksys_write+0x150/0x270 [ 445.168475][ T32] ? __pfx_ksys_write+0x10/0x10 [ 445.168516][ T32] do_syscall_64+0x166/0x520 [ 445.168553][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.168580][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.168613][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.168640][ T32] RIP: 0033:0x7fb03459e159 [ 445.168662][ T32] RSP: 002b:00007fb0353c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.168687][ T32] RAX: ffffffffffffffda RBX: 00007fb034826270 RCX: 00007fb03459e159 [ 445.168707][ T32] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000006 [ 445.168724][ T32] RBP: 00007fb03463506b R08: 0000000000000000 R09: 0000000000000000 [ 445.168741][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.168757][ T32] R13: 00007fb034826308 R14: 00007fb034826270 R15: 00007fff9cffe8c8 [ 445.168798][ T32] [ 445.168841][ T32] [ 445.168841][ T32] Showing all locks held in the system: [ 445.168855][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 445.168874][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 445.168971][ T32] locks held by getty/5370: 2, on CPU#0: [ 445.168990][ T32] #0: ffff8880343ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 445.169056][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 445.169148][ T32] locks held by syz-executor/6820: 1, last CPU#0: [ 445.169167][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 445.169237][ T32] locks held by syz-executor/7003: 4, last CPU#1: [ 445.169256][ T32] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 445.169335][ T32] #1: ffff88807d9e0f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 445.169397][ T32] #2: ffff88803a5b6540 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 445.169466][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 445.169554][ T32] locks held by syz.9.1559/11065: 3, on CPU#1: [ 445.169573][ T32] #0: ffff88807a56b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 445.169649][ T32] #1: ffff888022bcc460 (sb_writers#36){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 445.169717][ T32] #2: ffffffff8f09f860 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 445.169794][ T32] locks held by syz.9.1559/11072: 3, on CPU#1: [ 445.169813][ T32] #0: ffff88801cae02b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 445.169889][ T32] #1: ffff888022bcc460 (sb_writers#36){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 445.169958][ T32] #2: ffffffff8f09f860 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 445.170034][ T32] locks held by syz.9.1559/11075: 3, on CPU#0: [ 445.170052][ T32] #0: ffff88807aa52d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 445.170136][ T32] #1: ffff888022bcc460 (sb_writers#36){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 445.170205][ T32] #2: ffffffff8f09f860 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0 [ 445.170282][ T32] locks held by syz.9.1559/11076: 3, on CPU#1: [ 445.170301][ T32] #0: ffff88802a1355f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 445.170377][ T32] #1: ffff888022bcc460 (sb_writers#36){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 445.170445][ T32] #2: ffffffff8f09f860 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 445.170525][ T32] locks held by syz.2.2101/13034: 2, on CPU#1: [ 445.170544][ T32] #0: ffff8880533c20e8 (&type->s_umount_key#114){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 445.170627][ T32] #1: ffffffff8f09f860 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 445.170698][ T32] locks held by syz.7.2229/13485: 1, last CPU#1: [ 445.170716][ T32] #0: ffff888028a06460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520 [ 445.170797][ T32] locks held by syz.3.2299/13794: 2, last CPU#1: [ 445.170815][ T32] #0: ffff88803f3340a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x350/0x1bb0 [ 445.170887][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __fget_files+0x2a/0x420 [ 445.170964][ T32] locks held by rm/13803: 1, last CPU#1: [ 445.170982][ T32] #0: ffff88807f001bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 445.171045][ T32] locks held by syz.0.2303/13808: 2, last CPU#0: [ 445.171095][ T32] #0: ffff88803a5b7180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 445.171156][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 445.171231][ T32] locks held by syz.8.2305/13807: 1, on CPU#1: [ 445.171249][ T32] #0: ffff888076bdccc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 445.171319][ T32] locks held by syz.8.2305/13809: 3, last CPU#0: [ 445.171338][ T32] #0: ffff888076bdccc0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 445.171409][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: get_mem_cgroup_from_mm+0x38/0x290 [ 445.171473][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: fs_reclaim_acquire+0x7c/0x100 [ 445.171540][ T32] [ 445.171547][ T32] ============================================= [ 445.171547][ T32] [ 445.171559][ T32] NMI backtrace for cpu 1 [ 445.171577][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 445.171610][ T32] Tainted: [L]=SOFTLOCKUP [ 445.171620][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 445.171634][ T32] Call Trace: [ 445.171644][ T32] [ 445.171655][ T32] dump_stack_lvl+0xe8/0x150 [ 445.171693][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 445.171725][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.171769][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 445.171804][ T32] sys_info+0x135/0x170 [ 445.171830][ T32] watchdog+0xfd7/0x1030 [ 445.171867][ T32] ? watchdog+0x1c7/0x1030 [ 445.171903][ T32] kthread+0x38b/0x480 [ 445.171930][ T32] ? __pfx_watchdog+0x10/0x10 [ 445.171954][ T32] ? __pfx_kthread+0x10/0x10 [ 445.171982][ T32] ret_from_fork+0x514/0xb70 [ 445.172011][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 445.172035][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.172065][ T32] ? __switch_to+0xc89/0x1420 [ 445.172112][ T32] ? __pfx_kthread+0x10/0x10 [ 445.172140][ T32] ret_from_fork_asm+0x1a/0x30 [ 445.172200][ T32] [ 445.172209][ T32] Sending NMI from CPU 1 to CPUs 0: [ 445.172239][ C0] NMI backtrace for cpu 0 [ 445.172258][ C0] CPU: 0 UID: 0 PID: 13809 Comm: syz.8.2305 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.172288][ C0] Tainted: [L]=SOFTLOCKUP [ 445.172296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 445.172310][ C0] RIP: 0010:check_preemption_disabled+0x27/0xd0 [ 445.172350][ C0] Code: 90 90 90 55 41 57 41 56 53 65 8b 05 1b 4d ae 07 65 48 8b 0d eb 4c ae 07 85 c9 74 0c 5b 41 5e 41 5f 5d e9 d7 fd 28 f5 cc 9c 59 c1 00 02 00 00 74 ea 65 4c 8b 3d c1 4c ae 07 41 f6 47 2f 04 74 [ 445.172369][ C0] RSP: 0018:ffffc900049277c8 EFLAGS: 00000046 [ 445.172388][ C0] RAX: 0000000000000000 RBX: 0000000000000206 RCX: 0000000000000046 [ 445.172407][ C0] RDX: ffffc9000eb41000 RSI: ffffffff8e69f5c6 RDI: ffffffff8c6dad80 [ 445.172424][ C0] RBP: ffff8880287ce998 R08: ffffffff907a627f R09: 1ffffffff20f4c4f [ 445.172442][ C0] R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: 0000000000000001 [ 445.172459][ C0] R13: 0000000000000001 R14: ffffffff8ed5c8a0 R15: ffff8880287cddc0 [ 445.172478][ C0] FS: 00007fa2fedf66c0(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 445.172499][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.172516][ C0] CR2: 000000110c336dbd CR3: 0000000079da8000 CR4: 0000000000350ef0 [ 445.172536][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.172551][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 445.172567][ C0] Call Trace: [ 445.172633][ C0] [ 445.172645][ C0] lock_release+0x263/0x3c0 [ 445.172681][ C0] ? count_memcg_event_mm+0x21/0x260 [ 445.172717][ C0] ? count_memcg_event_mm+0x21/0x260 [ 445.172751][ C0] count_memcg_event_mm+0x1fe/0x260 [ 445.172786][ C0] handle_mm_fault+0x34a2/0x3750 [ 445.172829][ C0] ? handle_mm_fault+0xf1/0x3750 [ 445.172871][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 445.172905][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.172933][ C0] ? follow_page_pte+0x748/0xf10 [ 445.172973][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 445.173010][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.173046][ C0] __get_user_pages+0x1675/0x2750 [ 445.173101][ C0] populate_vma_page_range+0x2be/0x3c0 [ 445.173135][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 445.173169][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.173196][ C0] ? down_read+0x2be/0x330 [ 445.173220][ C0] __mm_populate+0x25f/0x390 [ 445.173253][ C0] ? __pfx___mm_populate+0x10/0x10 [ 445.173284][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.173313][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.173343][ C0] vm_mmap_pgoff+0x353/0x4e0 [ 445.173372][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.173403][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 445.173433][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 445.173466][ C0] ? rcu_is_watching+0x16/0xb0 [ 445.173498][ C0] ? ksys_mmap_pgoff+0xf3/0x760 [ 445.173532][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.173559][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 445.173591][ C0] do_syscall_64+0x166/0x520 [ 445.173624][ C0] ? trace_irq_disable+0x3b/0x140 [ 445.173649][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.173677][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.173700][ C0] RIP: 0033:0x7fa300b9e159 [ 445.173720][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.173739][ C0] RSP: 002b:00007fa2fedf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 445.173762][ C0] RAX: ffffffffffffffda RBX: 00007fa300e25fa0 RCX: 00007fa300b9e159 [ 445.173779][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 445.173795][ C0] RBP: 00007fa300c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 445.173812][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 445.173826][ C0] R13: 00007fa300e26038 R14: 00007fa300e25fa0 R15: 00007ffd663f7678 [ 445.173854][ C0] [ 445.572752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.928086][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 447.514202][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 447.524871][ T32] Tainted: [L]=SOFTLOCKUP [ 447.529176][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 447.539244][ T32] Call Trace: [ 447.542521][ T32] [ 447.545452][ T32] vpanic+0x56d/0xa60 [ 447.549431][ T32] ? __pfx___schedule+0x10/0x10 [ 447.554275][ T32] ? __pfx_vpanic+0x10/0x10 [ 447.558778][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.564414][ T32] panic+0xc5/0xd0 [ 447.568135][ T32] ? __pfx_panic+0x10/0x10 [ 447.572547][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 447.578090][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 447.583458][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 447.589610][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 447.595763][ T32] watchdog+0x1030/0x1030 [ 447.600095][ T32] ? watchdog+0x1c7/0x1030 [ 447.604535][ T32] kthread+0x38b/0x480 [ 447.608604][ T32] ? __pfx_watchdog+0x10/0x10 [ 447.613268][ T32] ? __pfx_kthread+0x10/0x10 [ 447.617874][ T32] ret_from_fork+0x514/0xb70 [ 447.622464][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 447.627580][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.633205][ T32] ? __switch_to+0xc89/0x1420 [ 447.637881][ T32] ? __pfx_kthread+0x10/0x10 [ 447.642461][ T32] ret_from_fork_asm+0x1a/0x30 [ 447.647254][ T32] [ 447.650504][ T32] Kernel Offset: disabled [ 447.654820][ T32] Rebooting in 86400 seconds..