last executing test programs: 5.235173883s ago: executing program 2 (id=40): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 5.131469122s ago: executing program 2 (id=42): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) 4.928576134s ago: executing program 2 (id=44): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 4.82021782s ago: executing program 2 (id=46): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00') 4.713849628s ago: executing program 2 (id=47): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a000102"], 0x164}}, 0x0) 3.571567626s ago: executing program 1 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) 3.420204041s ago: executing program 1 (id=57): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 3.244501893s ago: executing program 1 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) 2.744118251s ago: executing program 2 (id=64): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 1.216634589s ago: executing program 3 (id=78): r0 = getpid() rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x84000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_getevents(0x0, 0x9d7, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.129779863s ago: executing program 0 (id=79): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000000000001, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) 1.12016971s ago: executing program 3 (id=80): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x0) 951.109828ms ago: executing program 0 (id=81): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) 884.51748ms ago: executing program 1 (id=82): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a000102"], 0x164}}, 0x0) 884.113193ms ago: executing program 3 (id=83): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x6]}}, 0x0, 0x8, &(0x7f0000000300)) 805.457752ms ago: executing program 0 (id=84): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='@\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) fcntl$setownex(r2, 0xf, &(0x7f00000002c0)={0x2}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_DESTROY(r4, 0x0, 0x0) 742.907465ms ago: executing program 3 (id=85): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)) 629.310196ms ago: executing program 3 (id=86): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) 511.730704ms ago: executing program 3 (id=87): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7}}}}}]}}]}}, 0x0) syz_clone(0x80020000, &(0x7f0000000080)="fe2b4a719b0f580f636e1017ecc7cbc809a9820bb66c4b7593", 0x19, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) 492.441767ms ago: executing program 0 (id=88): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) recvmsg(r1, 0x0, 0x20000) 276.570411ms ago: executing program 0 (id=89): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) capset(&(0x7f0000000080)={0x20071026}, 0x0) 139.12881ms ago: executing program 1 (id=90): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 111.224208ms ago: executing program 0 (id=91): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 1 (id=92): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_io_uring_setup(0x43ae, &(0x7f0000000040)={0x0, 0x3df7, 0x10040, 0x0, 0x60}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. [ 65.767693][ T5810] cgroup: Unknown subsys name 'net' [ 65.956705][ T5810] cgroup: Unknown subsys name 'cpuset' [ 65.965005][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.318269][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.621524][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.629222][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.637398][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.645985][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.647406][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.654947][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.668304][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.676630][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.676859][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.684403][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.692410][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.698378][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.707372][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.715132][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.719173][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.728389][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.736141][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.747832][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.748304][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.768563][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.331684][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 70.394635][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 70.429676][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 70.480374][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 70.607912][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.615491][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.623116][ T5823] bridge_slave_0: entered allmulticast mode [ 70.630565][ T5823] bridge_slave_0: entered promiscuous mode [ 70.670960][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.678177][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.685590][ T5823] bridge_slave_1: entered allmulticast mode [ 70.692617][ T5823] bridge_slave_1: entered promiscuous mode [ 70.699981][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.707195][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.714881][ T5819] bridge_slave_0: entered allmulticast mode [ 70.721868][ T5819] bridge_slave_0: entered promiscuous mode [ 70.740762][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.748220][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.755655][ T5820] bridge_slave_0: entered allmulticast mode [ 70.762661][ T5820] bridge_slave_0: entered promiscuous mode [ 70.791999][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.799239][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.806450][ T5819] bridge_slave_1: entered allmulticast mode [ 70.813673][ T5819] bridge_slave_1: entered promiscuous mode [ 70.821016][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.828438][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.835648][ T5820] bridge_slave_1: entered allmulticast mode [ 70.842626][ T5820] bridge_slave_1: entered promiscuous mode [ 70.892327][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.899616][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.907573][ T5821] bridge_slave_0: entered allmulticast mode [ 70.914679][ T5821] bridge_slave_0: entered promiscuous mode [ 70.925323][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.957385][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.965264][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.972633][ T5821] bridge_slave_1: entered allmulticast mode [ 70.979941][ T5821] bridge_slave_1: entered promiscuous mode [ 70.989072][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.017578][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.029733][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.066501][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.078470][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.101653][ T5823] team0: Port device team_slave_0 added [ 71.132582][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.145238][ T5823] team0: Port device team_slave_1 added [ 71.175122][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.209798][ T5819] team0: Port device team_slave_0 added [ 71.219207][ T5820] team0: Port device team_slave_0 added [ 71.252288][ T5819] team0: Port device team_slave_1 added [ 71.259639][ T5820] team0: Port device team_slave_1 added [ 71.280500][ T5821] team0: Port device team_slave_0 added [ 71.287463][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.294697][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.321064][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.348826][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.355287][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.389218][ T5821] team0: Port device team_slave_1 added [ 71.395612][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.402558][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.428828][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.441142][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.448129][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.474070][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.485841][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.492778][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.522549][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.552913][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.559922][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.586118][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.598102][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.605307][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.631246][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.657465][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.664493][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.690468][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.703450][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.710401][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.736363][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.802470][ T5823] hsr_slave_0: entered promiscuous mode [ 71.809357][ T5823] hsr_slave_1: entered promiscuous mode [ 71.824850][ T5831] Bluetooth: hci3: command tx timeout [ 71.824860][ T5835] Bluetooth: hci1: command tx timeout [ 71.825034][ T5835] Bluetooth: hci2: command tx timeout [ 71.830445][ T5831] Bluetooth: hci0: command tx timeout [ 71.894724][ T5819] hsr_slave_0: entered promiscuous mode [ 71.901418][ T5819] hsr_slave_1: entered promiscuous mode [ 71.908054][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 71.914012][ T5819] Cannot create hsr debugfs directory [ 71.925095][ T5820] hsr_slave_0: entered promiscuous mode [ 71.931340][ T5820] hsr_slave_1: entered promiscuous mode [ 71.937644][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 71.943407][ T5820] Cannot create hsr debugfs directory [ 71.982687][ T5821] hsr_slave_0: entered promiscuous mode [ 71.989248][ T5821] hsr_slave_1: entered promiscuous mode [ 71.995955][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 72.001692][ T5821] Cannot create hsr debugfs directory [ 72.455237][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.468366][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.479272][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.498691][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.557955][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.575634][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.588288][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.610929][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.669541][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.694325][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.705341][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.716331][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.802637][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.836525][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.848659][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.859079][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.886007][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.945480][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.982655][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.989872][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.999619][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.006765][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.027983][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.082863][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.115579][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.122677][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.134341][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.141581][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.168831][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.267114][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.282713][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.306912][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.314119][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.344807][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.368802][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.375992][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.430736][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.437954][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.500073][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.507217][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.610614][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.736225][ T5823] veth0_vlan: entered promiscuous mode [ 73.778592][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.806658][ T5823] veth1_vlan: entered promiscuous mode [ 73.904631][ T5831] Bluetooth: hci2: command tx timeout [ 73.904715][ T5835] Bluetooth: hci3: command tx timeout [ 73.910055][ T5831] Bluetooth: hci1: command tx timeout [ 73.916254][ T5835] Bluetooth: hci0: command tx timeout [ 73.980023][ T5820] veth0_vlan: entered promiscuous mode [ 73.995228][ T5823] veth0_macvtap: entered promiscuous mode [ 74.006595][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.027118][ T5820] veth1_vlan: entered promiscuous mode [ 74.036653][ T5823] veth1_macvtap: entered promiscuous mode [ 74.064717][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.077622][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.094259][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.114461][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.134189][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.146877][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.158301][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.218836][ T5819] veth0_vlan: entered promiscuous mode [ 74.245550][ T5820] veth0_macvtap: entered promiscuous mode [ 74.277163][ T5820] veth1_macvtap: entered promiscuous mode [ 74.297790][ T5819] veth1_vlan: entered promiscuous mode [ 74.303933][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.317193][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.348617][ T5821] veth0_vlan: entered promiscuous mode [ 74.368418][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.377942][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.386870][ T5821] veth1_vlan: entered promiscuous mode [ 74.405502][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.437998][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.453668][ T5819] veth0_macvtap: entered promiscuous mode [ 74.476553][ T5819] veth1_macvtap: entered promiscuous mode [ 74.486551][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.502234][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.535415][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.586553][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.607219][ T5821] veth0_macvtap: entered promiscuous mode [ 74.615649][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.648568][ T5821] veth1_macvtap: entered promiscuous mode [ 74.659328][ T3512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.671019][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.721435][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.730806][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.752724][ T5913] overlayfs: failed to resolve './file1/file0': -2 [ 74.761615][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.770795][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.840003][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.867184][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.891192][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.947105][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.961067][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.977003][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.028704][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.064254][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.091857][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.116859][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.152017][ T142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.187568][ T142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.274946][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.299817][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.352630][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.395252][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.403102][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.540772][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.551323][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.552690][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.928386][ T5936] overlayfs: failed to resolve './file1/file0': -2 [ 75.983665][ T5827] Bluetooth: hci3: command tx timeout [ 75.987479][ T5834] Bluetooth: hci0: command tx timeout [ 75.989273][ T5835] Bluetooth: hci1: command tx timeout [ 75.994842][ T5831] Bluetooth: hci2: command tx timeout [ 76.585084][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 76.924050][ T5958] overlayfs: failed to resolve './file1/file0': -2 [ 77.715922][ T5979] overlayfs: overlapping lowerdir path [ 78.066893][ T5831] Bluetooth: hci1: command tx timeout [ 78.066912][ T5835] Bluetooth: hci3: command tx timeout [ 78.066945][ T5835] Bluetooth: hci2: command tx timeout [ 78.072320][ T5831] Bluetooth: hci0: command tx timeout [ 78.318452][ T5996] overlayfs: failed to clone upperpath [ 78.450620][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 79.561321][ T6024] overlayfs: overlapping lowerdir path [ 79.732227][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 80.092387][ T6034] overlayfs: missing 'lowerdir' [ 80.620580][ T6044] overlayfs: overlapping lowerdir path [ 81.562188][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 81.935991][ T6064] overlayfs: failed to clone upperpath [ 82.069254][ T6072] overlayfs: missing 'lowerdir' [ 82.559539][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 82.730954][ T6090] overlayfs: missing 'lowerdir' [ 83.186272][ T6101] capability: warning: `syz.0.89' uses deprecated v2 capabilities in a way that may be insecure [ 83.565317][ T6109] ------------[ cut here ]------------ [ 83.571054][ T6109] WARNING: ./include/linux/memcontrol.h:382 at folio_memcg+0x1a8/0x310, CPU#1: syz.1.92/6109 [ 83.581468][ T6109] Modules linked in: [ 83.585712][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.1.92 Not tainted syzkaller #0 PREEMPT(full) [ 83.594896][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.605068][ T6109] RIP: 0010:folio_memcg+0x1a8/0x310 [ 83.610286][ T6109] Code: 80 3c 28 00 74 08 4c 89 f7 e8 64 29 fb ff 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f be 39 09 cc e8 29 d0 94 ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 83.630017][ T6109] RSP: 0018:ffffc9000b6aed88 EFLAGS: 00010246 [ 83.636440][ T6109] RAX: ffffffff822d1027 RBX: 0000000000000000 RCX: 0000000000080000 [ 83.644530][ T6109] RDX: ffffc90004d91000 RSI: 000000000007ffff RDI: 0000000000080000 [ 83.653655][ T6109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.661666][ T6109] R10: dffffc0000000000 R11: ffffed1004b38fa5 R12: ffffea0001440030 [ 83.669756][ T6109] R13: dffffc0000000000 R14: ffff8881422d3d80 R15: 0000000000000002 [ 83.677784][ T6109] FS: 00007f69ac87e6c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 83.687140][ T6109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.693782][ T6109] CR2: 00007f69ac715698 CR3: 000000002a484000 CR4: 00000000003526f0 [ 83.701763][ T6109] Call Trace: [ 83.705127][ T6109] [ 83.708073][ T6109] __folio_split+0xb1/0x25e0 [ 83.712693][ T6109] ? __lock_acquire+0xab9/0xd20 [ 83.717618][ T6109] ? do_raw_spin_lock+0x121/0x290 [ 83.722666][ T6109] ? __pfx___folio_split+0x10/0x10 [ 83.727887][ T6109] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.733346][ T6109] split_folio_to_list+0x76/0x150 [ 83.738389][ T6109] madvise_cold_or_pageout_pte_range+0xbf3/0x1ce0 [ 83.744897][ T6109] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 83.752353][ T6109] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 83.758596][ T6109] ? memcg_rstat_updated+0xee/0x220 [ 83.763876][ T6109] walk_pgd_range+0x1037/0x1d30 [ 83.768787][ T6109] ? __pfx_walk_pgd_range+0x10/0x10 [ 83.774093][ T6109] ? rcu_is_watching+0x15/0xb0 [ 83.778874][ T6109] ? lru_add+0xa2f/0xd90 [ 83.783234][ T6109] ? lru_add+0x198/0xd90 [ 83.787492][ T6109] __walk_page_range+0x14c/0x710 [ 83.792444][ T6109] ? __pfx_lru_add+0x10/0x10 [ 83.797170][ T6109] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 83.802922][ T6109] walk_page_range_vma+0x393/0x440 [ 83.808135][ T6109] ? mlock_drain_local+0x79/0x490 [ 83.813254][ T6109] ? __pfx_walk_page_range_vma+0x10/0x10 [ 83.818905][ T6109] ? mlock_drain_local+0x79/0x490 [ 83.825619][ T6109] madvise_vma_behavior+0x2fa8/0x3d70 [ 83.831017][ T6109] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 83.836833][ T6109] ? __lock_acquire+0xab9/0xd20 [ 83.841704][ T6109] ? finish_task_switch+0x162/0x960 [ 83.846983][ T6109] ? mas_next_slot+0xc20/0xcf0 [ 83.851775][ T6109] ? mt_find+0x46f/0x5e0 [ 83.856678][ T6109] ? mt_find+0x15c/0x5e0 [ 83.860943][ T6109] ? __pfx_mt_find+0x10/0x10 [ 83.866123][ T6109] ? find_vma+0xe7/0x160 [ 83.870429][ T6109] ? preempt_schedule+0xae/0xc0 [ 83.875367][ T6109] ? preempt_schedule_common+0x83/0xd0 [ 83.880847][ T6109] madvise_walk_vmas+0x51c/0xa30 [ 83.885883][ T6109] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 83.891360][ T6109] ? blk_start_plug+0x6f/0x1b0 [ 83.896201][ T6109] madvise_do_behavior+0x38e/0x550 [ 83.901346][ T6109] ? __pfx_madvise_do_behavior+0x10/0x10 [ 83.907328][ T6109] ? down_read+0x1ad/0x2e0 [ 83.911775][ T6109] do_madvise+0x1bc/0x270 [ 83.916170][ T6109] ? __pfx_do_madvise+0x10/0x10 [ 83.921082][ T6109] __x64_sys_madvise+0xa7/0xc0 [ 83.925939][ T6109] do_syscall_64+0xfa/0xfa0 [ 83.930464][ T6109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.936624][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 83.941322][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.947308][ T6109] RIP: 0033:0x7f69ab98f6c9 [ 83.951750][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.972082][ T6109] RSP: 002b:00007f69ac87e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 83.981120][ T6109] RAX: ffffffffffffffda RBX: 00007f69abbe5fa0 RCX: 00007f69ab98f6c9 [ 83.989561][ T6109] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 83.997673][ T6109] RBP: 00007f69aba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 84.005731][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.013760][ T6109] R13: 00007f69abbe6038 R14: 00007f69abbe5fa0 R15: 00007fff70a6aee8 [ 84.021765][ T6109] [ 84.024884][ T6109] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.032172][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.1.92 Not tainted syzkaller #0 PREEMPT(full) [ 84.041272][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.051312][ T6109] Call Trace: [ 84.054581][ T6109] [ 84.057500][ T6109] dump_stack_lvl+0x99/0x250 [ 84.062082][ T6109] ? __asan_memcpy+0x40/0x70 [ 84.066668][ T6109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.071860][ T6109] ? __pfx__printk+0x10/0x10 [ 84.076447][ T6109] vpanic+0x237/0x6d0 [ 84.080413][ T6109] ? __pfx_vpanic+0x10/0x10 [ 84.084898][ T6109] ? is_bpf_text_address+0x292/0x2b0 [ 84.090174][ T6109] ? is_bpf_text_address+0x26/0x2b0 [ 84.095367][ T6109] panic+0xb9/0xc0 [ 84.099069][ T6109] ? __pfx_panic+0x10/0x10 [ 84.103481][ T6109] __warn+0x318/0x4d0 [ 84.107450][ T6109] ? folio_memcg+0x1a8/0x310 [ 84.112027][ T6109] ? folio_memcg+0x1a8/0x310 [ 84.116599][ T6109] report_bug+0x2be/0x4f0 [ 84.120909][ T6109] ? folio_memcg+0x1a8/0x310 [ 84.125483][ T6109] ? folio_memcg+0x1a8/0x310 [ 84.130059][ T6109] ? folio_memcg+0x1aa/0x310 [ 84.134631][ T6109] handle_bug+0x84/0x160 [ 84.138860][ T6109] exc_invalid_op+0x1a/0x50 [ 84.143350][ T6109] asm_exc_invalid_op+0x1a/0x20 [ 84.148184][ T6109] RIP: 0010:folio_memcg+0x1a8/0x310 [ 84.153366][ T6109] Code: 80 3c 28 00 74 08 4c 89 f7 e8 64 29 fb ff 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f be 39 09 cc e8 29 d0 94 ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 84.172956][ T6109] RSP: 0018:ffffc9000b6aed88 EFLAGS: 00010246 [ 84.179014][ T6109] RAX: ffffffff822d1027 RBX: 0000000000000000 RCX: 0000000000080000 [ 84.186971][ T6109] RDX: ffffc90004d91000 RSI: 000000000007ffff RDI: 0000000000080000 [ 84.194929][ T6109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.202885][ T6109] R10: dffffc0000000000 R11: ffffed1004b38fa5 R12: ffffea0001440030 [ 84.210839][ T6109] R13: dffffc0000000000 R14: ffff8881422d3d80 R15: 0000000000000002 [ 84.218800][ T6109] ? folio_memcg+0x1a7/0x310 [ 84.223386][ T6109] ? folio_memcg+0x1a7/0x310 [ 84.227963][ T6109] __folio_split+0xb1/0x25e0 [ 84.232546][ T6109] ? __lock_acquire+0xab9/0xd20 [ 84.237387][ T6109] ? do_raw_spin_lock+0x121/0x290 [ 84.242400][ T6109] ? __pfx___folio_split+0x10/0x10 [ 84.247497][ T6109] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.252889][ T6109] split_folio_to_list+0x76/0x150 [ 84.257928][ T6109] madvise_cold_or_pageout_pte_range+0xbf3/0x1ce0 [ 84.264353][ T6109] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 84.271205][ T6109] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 84.276747][ T6109] ? memcg_rstat_updated+0xee/0x220 [ 84.281938][ T6109] walk_pgd_range+0x1037/0x1d30 [ 84.286804][ T6109] ? __pfx_walk_pgd_range+0x10/0x10 [ 84.292002][ T6109] ? rcu_is_watching+0x15/0xb0 [ 84.296752][ T6109] ? lru_add+0xa2f/0xd90 [ 84.300979][ T6109] ? lru_add+0x198/0xd90 [ 84.305203][ T6109] __walk_page_range+0x14c/0x710 [ 84.310129][ T6109] ? __pfx_lru_add+0x10/0x10 [ 84.314702][ T6109] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 84.320415][ T6109] walk_page_range_vma+0x393/0x440 [ 84.325512][ T6109] ? mlock_drain_local+0x79/0x490 [ 84.330523][ T6109] ? __pfx_walk_page_range_vma+0x10/0x10 [ 84.336141][ T6109] ? mlock_drain_local+0x79/0x490 [ 84.341162][ T6109] madvise_vma_behavior+0x2fa8/0x3d70 [ 84.346521][ T6109] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 84.352221][ T6109] ? __lock_acquire+0xab9/0xd20 [ 84.357059][ T6109] ? finish_task_switch+0x162/0x960 [ 84.362254][ T6109] ? mas_next_slot+0xc20/0xcf0 [ 84.367014][ T6109] ? mt_find+0x46f/0x5e0 [ 84.371245][ T6109] ? mt_find+0x15c/0x5e0 [ 84.375477][ T6109] ? __pfx_mt_find+0x10/0x10 [ 84.380067][ T6109] ? find_vma+0xe7/0x160 [ 84.384300][ T6109] ? preempt_schedule+0xae/0xc0 [ 84.389140][ T6109] ? preempt_schedule_common+0x83/0xd0 [ 84.394582][ T6109] madvise_walk_vmas+0x51c/0xa30 [ 84.399512][ T6109] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 84.404955][ T6109] ? blk_start_plug+0x6f/0x1b0 [ 84.409707][ T6109] madvise_do_behavior+0x38e/0x550 [ 84.414812][ T6109] ? __pfx_madvise_do_behavior+0x10/0x10 [ 84.420439][ T6109] ? down_read+0x1ad/0x2e0 [ 84.424850][ T6109] do_madvise+0x1bc/0x270 [ 84.429169][ T6109] ? __pfx_do_madvise+0x10/0x10 [ 84.434035][ T6109] __x64_sys_madvise+0xa7/0xc0 [ 84.438785][ T6109] do_syscall_64+0xfa/0xfa0 [ 84.443273][ T6109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.449323][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 84.453986][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.459858][ T6109] RIP: 0033:0x7f69ab98f6c9 [ 84.464258][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.483856][ T6109] RSP: 002b:00007f69ac87e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 84.492260][ T6109] RAX: ffffffffffffffda RBX: 00007f69abbe5fa0 RCX: 00007f69ab98f6c9 [ 84.500218][ T6109] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 84.508171][ T6109] RBP: 00007f69aba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 84.516125][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.524077][ T6109] R13: 00007f69abbe6038 R14: 00007f69abbe5fa0 R15: 00007fff70a6aee8 [ 84.532048][ T6109] [ 84.535179][ T6109] Kernel Offset: disabled [ 84.539491][ T6109] Rebooting in 86400 seconds..