last executing test programs: 9m34.527091325s ago: executing program 0 (id=710): r0 = fsopen(&(0x7f0000000440)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24004800) read(r2, &(0x7f00000004c0)=""/1024, 0x400) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) 9m34.414644208s ago: executing program 0 (id=711): r0 = getpid() syz_pidfd_open(r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000580)={0x802, 0x80000}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9m34.32252842s ago: executing program 0 (id=712): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x183001, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) poll(&(0x7f0000005c80)=[{r0, 0x8283}], 0x1, 0x50c00000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000005cc0)=0x2) 9m33.355700664s ago: executing program 0 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000004c0)='./file0/../file0\x00', 0x1) 9m33.183029278s ago: executing program 0 (id=721): unshare(0x24020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) 9m32.971263153s ago: executing program 0 (id=723): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) close(0xffffffffffffffff) 9m32.541573874s ago: executing program 32 (id=723): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) close(0xffffffffffffffff) 8m55.832932835s ago: executing program 2 (id=881): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x110000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 8m55.62609479s ago: executing program 2 (id=882): gettid() listen(0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='tracefs\x00', 0x1) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r3, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1, 0x4b, r3, 0x3}, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 8m55.2671347s ago: executing program 2 (id=883): syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000000a}) 8m55.038258635s ago: executing program 2 (id=885): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x210000, &(0x7f0000000880)={[{@lazytime}, {@sysvgroups}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000000940)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000f80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000fc0)=0x6) syz_mount_image$ext4(&(0x7f0000001000)='ext3\x00', &(0x7f0000001040)='./cgroup\x00', 0x11, &(0x7f0000001080)={[{@dioread_lock}, {@acl}]}, 0x1, 0x66a, &(0x7f00000010c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x866c6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001780)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001800), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000001840), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs$namespace(r0, &(0x7f0000001880)='ns/pid_for_children\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001900)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001980)={&(0x7f00000019c0)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x892b6c9ef85ca55c}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xa, 0xb, &(0x7f0000001ac0)=ANY=[@ANYBLOB, @ANYBLOB="505fdebf53a218af37eacddd0d24ab25ca353b761f95dffbdc6ff5138f085d473b55b7bb1a65f44a277904a4feccbcad4cb01ef041e42a4ee601ade5148545b09de0d3f17cd6072690d264a15b21b2c38084f01dc8970465b7e1b9dd8335efd09b20e6e8fdd192dc"], 0x0, 0xc595, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x11, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0)={0x3, 0x8, 0x5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff2e}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001d40)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10120, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001d80)='./bus\x00', &(0x7f0000001dc0), 0x8, &(0x7f0000001e00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001e40)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d332c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c696f636861727365743d6d614363656c7469632c636f6465706167653d3737352c646f733178666c6f7070792c757466383d302c756e695f786c6174653d312c726f6469722c696f636861727365743d63703836302c757466383d302c004c5ce37545cebac1e8dcbd2600929cbf89fd9504e5dd99b31e70743170d7ac5a76591e56f4d1aab6ab124153267651e2f2187d29ebaf1aceeb2dac3c8584433f2984e40ce810b80cad8cb59b0731340b1b3f764980f82a82015a1478574ce94362e3773c5ca66ecb395724fa3db5f63080bf4c1adafe67334a5948c534b596b058b27f900b8c429750764be1de3cb337132ae586af613ee9373b368673f6d3a48049a832e69a6feec90fadb83f3b8826bafff38487420590e1d4a751000ccb4da1f7775664839d68b427685123587ee11ed9f162e70f2192c4730441c8d724fd69fa1a82580541c8248b7ed3b62dfeb4"], 0x3, 0x28e, &(0x7f00000004c0)="$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") 8m52.212454264s ago: executing program 2 (id=890): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e932057", 0x17e}, {&(0x7f0000000780)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442", 0x7b}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000a80)=0xdf8, 0x4) writev(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d7156236f0edc44c4c268168596acd7c225338921f9e7b97e55fd594eaa95067216139cad3915f7", 0xad}], 0x1) write(r0, &(0x7f0000000c00)="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", 0x343) 8m49.595494899s ago: executing program 2 (id=897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xd, &(0x7f0000000380)=0x0) r6 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f010000000000000000000624"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x961b, 0x2, 0x2}, &(0x7f00000000c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x84, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x110a, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 8m48.672190361s ago: executing program 33 (id=897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xd, &(0x7f0000000380)=0x0) r6 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f010000000000000000000624"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x961b, 0x2, 0x2}, &(0x7f00000000c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x84, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x110a, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 8m14.731154385s ago: executing program 5 (id=1024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x110000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 8m14.441378382s ago: executing program 5 (id=1026): rseq(&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_ublk_setup_io_uring(0x3f84, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) 8m14.230357387s ago: executing program 5 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1200}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 8m13.774949948s ago: executing program 5 (id=1032): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3, &(0x7f0000000180)={[{@user_xattr}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0xffffffffffffffff, r0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f00000000c0)={0x0, 0x0, '\x00', 0x7f0aa8ade1217b54, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000f00)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m13.014961907s ago: executing program 5 (id=1034): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x110000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 8m9.675905569s ago: executing program 5 (id=1039): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000001080)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x14}}, 0x408c0) 8m9.025631575s ago: executing program 34 (id=1039): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000001080)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x14}}, 0x408c0) 2m23.419151591s ago: executing program 6 (id=2995): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/249, 0xf9) 2m22.64317403s ago: executing program 6 (id=2998): r0 = io_uring_setup(0x542b, &(0x7f0000000240)={0x0, 0xee92, 0x80, 0x12, 0x2d9}) close_range(r0, r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000640)=0x7ff, 0x12) 2m14.354727194s ago: executing program 6 (id=3023): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x48041, 0x10) close(r0) socket$inet6(0xa, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0) 2m13.70333883s ago: executing program 6 (id=3025): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x439c, &(0x7f0000000680)={0x0, 0x61db, 0x1000, 0x2, 0x6f}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f000000a9c0)=[{0x4, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000700)=""/253, 0xfd}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/57, 0x39}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/39, 0x27}, {&(0x7f0000001980)=""/34, 0x22}]}, {0x4, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001a40)=""/170, 0xaa}, {&(0x7f0000001b00)=""/222, 0xde}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/37, 0x25}, {&(0x7f0000002c40)=""/75, 0x4b}]}, {0xf, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002d40)=""/36, 0x24}]}, {0x5, 0x0, &(0x7f0000002dc0)}, {0x50, 0x0, &(0x7f0000004f80)=[{&(0x7f0000002e00)=""/96, 0x60}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/7, 0x7}, {&(0x7f0000003ec0)}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/64, 0x40}, {&(0x7f0000004f40)=""/37, 0x25}]}, {0x2c, 0x0, &(0x7f0000007100)=[{&(0x7f0000005000)=""/31, 0x1f}, {&(0x7f0000005040)=""/13, 0xd}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/66, 0x42}, {&(0x7f0000006100)=""/4096, 0x1000}]}, {0x0, 0x0, &(0x7f0000008280)=[{0x0}, {&(0x7f0000007280)=""/4096, 0x1000}]}, {0x15, 0x0, &(0x7f0000009700)=[{&(0x7f00000082c0)=""/13, 0xd}, {&(0x7f0000008300)=""/37, 0x25}, {&(0x7f0000008340)=""/4096, 0x1000}, {&(0x7f0000009340)=""/250, 0xfa}, {&(0x7f0000009440)=""/181, 0xb5}, {&(0x7f0000009500)=""/238, 0xee}, {&(0x7f0000009600)=""/130, 0x82}, {0x0}]}, {0xfffff82f, 0x0, &(0x7f000000a940)=[{&(0x7f0000009780)=""/62, 0x3e}, {&(0x7f00000097c0)=""/1, 0x1}, {&(0x7f0000009800)=""/183, 0xb7}, {&(0x7f00000098c0)=""/4096, 0x1000}, {&(0x7f000000a8c0)=""/37, 0x25}, {0x0}]}], 0x9) epoll_create(0xb75) r2 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x1a50, &(0x7f000000ac00)={0x0, 0x4, 0x8, 0x100004, 0x4008055}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002bbd"], 0x14}, 0x1, 0x0, 0x0, 0x20048084}, 0x20000000) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x3d, 0x0, r2, 0x0, &(0x7f0000000380)={0x0, 0x5b, &(0x7f00000003c0)=[{&(0x7f000000af00)=""/189, 0xbc}], 0x1}, 0x0, 0x40000102, 0x1, {0x1000}}) r6 = mmap$IORING_OFF_SQES(0x0, 0x4, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = getpid() r9 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000080), 0x4) recvmmsg(r9, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f000000ac80)=[{&(0x7f000000acc0)=""/174, 0xae}], 0x1, &(0x7f000000ad80)=""/72, 0x48}, 0x1}], 0x1, 0x40012122, 0x0) sendmsg$tipc(r9, &(0x7f000000ae00)={&(0x7f000000ae40)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x2}}, 0x10, &(0x7f000000ae80)=[{&(0x7f000000aec0)='//', 0x2}], 0x1}, 0x44810) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, r6, &(0x7f0000000540)={0x2e, 0x8, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffff00000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x1, 0xb42, 0x0, 0x0, 0x1000, 0x2c, r8}}}, &(0x7f00000005c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_emit_ethernet(0x1e, &(0x7f000000ab80)=ANY=[@ANYBLOB="03f90eb6171680050000008663ecee8b2bdbd5cd955d0000000000000000"], &(0x7f000000abc0)={0x0, 0x1, [0x2cc, 0x691, 0xa2e, 0x379]}) clock_getres(0xfffffffffffffffb, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f000000aa80)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002dc0), 0x41, 0x0) write$nbd(r11, &(0x7f0000003ec0)=ANY=[@ANYBLOB="01"], 0x40) 2m7.491066242s ago: executing program 6 (id=3037): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='never', 0x5) 1m52.486854101s ago: executing program 6 (id=3053): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = fsopen(&(0x7f0000000180)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x2) fsmount(r4, 0x0, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m51.832820077s ago: executing program 35 (id=3053): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = fsopen(&(0x7f0000000180)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x2) fsmount(r4, 0x0, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m20.989046514s ago: executing program 7 (id=3131): r0 = syz_open_procfs(0x0, &(0x7f0000001140)='mounts\x00') io_setup(0x3fe, &(0x7f0000001280)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000013c0)='./proc\x00', &(0x7f0000001400)='proc\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x20000) io_submit(r1, 0x1, &(0x7f0000001180)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x5, 0xfdfe, r0, 0x0}]) 1m20.615907103s ago: executing program 7 (id=3132): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) 1m20.194727294s ago: executing program 7 (id=3135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6c", 0x0, 0x41}) syz_ublk_setup_io_uring(0x6962, &(0x7f0000000380)={0x0, 0x9a64, 0x2000, 0x1, 0x13c}, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x42, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x1ff, 0xfffffff8, 0x0, 0xff, 0xff, 0xff}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m19.646950587s ago: executing program 7 (id=3137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002840)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x200}]}}}]}, 0x48}}, 0x0) 1m19.490622581s ago: executing program 7 (id=3139): syz_read_part_table(0x105f, &(0x7f00000007c0)="$eJzsz71NAzEABeBn3Q/nCjaAMdiAgpoJGOQQ47ACBT0jMAuSI+cuGSFJ8X2FC7/3ZDlcVS1JhvG5JG3tFw93WzCmJ2WvTfn+HctH8pg1rR07yxb9vE5L2v2w9PbfS/2s+2bux397Pz1VMqcmT+U8zdvXxT4KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfsEAAA//865g4i") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) 1m18.395960148s ago: executing program 7 (id=3144): sched_setattr(0x0, &(0x7f0000000e00)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/173, 0xad}], 0x1, 0x7fffffff, 0x100, 0xa) 1m3.340026257s ago: executing program 36 (id=3144): sched_setattr(0x0, &(0x7f0000000e00)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/173, 0xad}], 0x1, 0x7fffffff, 0x100, 0xa) 59.315759466s ago: executing program 1 (id=3234): syz_mount_image$erofs(&(0x7f00000017c0), &(0x7f0000001800)='./file0\x00', 0x1000801, &(0x7f0000001840)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="78cd4e86f938b6bc06e6fad108c083e67531db667e030110e889413d713533a483788422c57d5796c063a23edf08b84967c808da7626e8a7fac0374f5148421ab5d8eb33565986215290195d7b55ada270264944ec790f3e7c1cefbb5dc7bed827e24b47d33cbb0c46d7e98a8dfd13708dd5ecacd833ca11f6ab1b06e544ee93719ddf3526"], 0x0, 0x1da, &(0x7f0000001900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001b00)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./file1\x00', 0x1c0) mount$overlay(0x0, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000001c00)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001c40)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x200) 58.579541524s ago: executing program 1 (id=3236): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000000041e000009"], 0x50) 58.111210556s ago: executing program 1 (id=3238): read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = fanotify_init(0xf00, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) fanotify_mark(r2, 0x105, 0x40009965, r1, 0x0) 57.574215249s ago: executing program 1 (id=3242): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x24, 0x7, 0x4f, 0x43, 0xbb, 0x10, 0x6, 0xfe, 0x4, 0x8, 0x6, 0x9}, {0xb, 0xa6f7, 0x6, 0x48, 0x6, 0xfd, 0x3, 0x87, 0xa, 0x13, 0x7, 0x6, 0xffffffffffffffff}, {0x1fd, 0x407, 0xd, 0x21, 0x25, 0x1, 0x1, 0x6, 0x7, 0x15, 0x0, 0x1, 0x80000000004}], 0x2}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0x3fe, 0x4000000000000000, 0x1000, 0x1, 0x4002004c4, 0x1000, 0x0, 0x97, 0x7c, 0x2, 0x2, 0x4, 0x0, 0x1aa], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 57.055186021s ago: executing program 1 (id=3245): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = fsopen(&(0x7f0000000180)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x2) fsmount(r5, 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x4000005) 56.309637529s ago: executing program 1 (id=3251): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x20088000) mkdirat(0xffffffffffffff9c, &(0x7f0000001c40)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000001c80)='./mysys\x00', &(0x7f0000001cc0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) 55.231167296s ago: executing program 3 (id=3258): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x3, 0x80, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x3, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000002c0)=@x86={0x5, 0x8, 0xfe, 0x0, 0x6ed, 0x2, 0xe, 0xd, 0x9, 0x2, 0xe8, 0x26, 0x0, 0xe5, 0x74, 0x7, 0x2, 0xd, 0x9, '\x00', 0x2, 0x4000000b}) ioctl$KVM_RUN(r3, 0xae80, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 55.158074508s ago: executing program 4 (id=3259): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = fanotify_init(0xf00, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) fanotify_mark(r2, 0x105, 0x40009965, r1, 0x0) 54.700994599s ago: executing program 4 (id=3260): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = fsopen(&(0x7f0000000180)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x2) fsmount(r5, 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x4000005) 54.280808009s ago: executing program 4 (id=3261): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000000041e000009"], 0x50) 54.127030203s ago: executing program 3 (id=3262): r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x24, 0x7, 0x4f, 0x43, 0xbb, 0x10, 0x6, 0xfe, 0x4, 0x8, 0x6, 0x9}, {0xb, 0xa6f7, 0x6, 0x48, 0x6, 0xfd, 0x3, 0x87, 0xa, 0x13, 0x7, 0x6, 0xffffffffffffffff}, {0x1fd, 0x407, 0xd, 0x21, 0x25, 0x1, 0x1, 0x6, 0x7, 0x15, 0x0, 0x1, 0x80000000004}], 0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0x3fe, 0x4000000000000000, 0x1000, 0x1, 0x4002004c4, 0x1000, 0x0, 0x97, 0x7c, 0x2, 0x2, 0x4, 0x0, 0x1aa], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.915658979s ago: executing program 4 (id=3263): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x100) mkdir(0x0, 0x4) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) 53.8570112s ago: executing program 3 (id=3264): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x83) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x2000008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000f40)='3', 0x4e) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) 53.067282829s ago: executing program 4 (id=3265): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x19c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x34) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x200002, 0x200003, 0x803, 0x4, 0x7, 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xde0f9e45a02cc902) 52.975981471s ago: executing program 3 (id=3266): openat$kvm(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000108, 0x0, 0x5}]}) 52.777093546s ago: executing program 4 (id=3267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000900001c"], 0x4a) 49.277601842s ago: executing program 8 (id=3226): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$inet6(0x10, 0x2, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) syslog(0x0, 0x0, 0x0) 49.007147788s ago: executing program 3 (id=3268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x200) 48.9617914s ago: executing program 8 (id=3269): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1c0) mkdir(&(0x7f0000000100)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1/file2\x00', 0x200) 48.776065144s ago: executing program 8 (id=3270): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYBLOB="540012801100010062"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000300)='tracefs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r3, &(0x7f0000000380)=@other={'lock', ' ', 'none'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 48.626706148s ago: executing program 3 (id=3271): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000980), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000000041e000009"], 0x50) 37.550312019s ago: executing program 37 (id=3251): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x20088000) mkdirat(0xffffffffffffff9c, &(0x7f0000001c40)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000001c80)='./mysys\x00', &(0x7f0000001cc0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) 33.070427729s ago: executing program 38 (id=3267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000900001c"], 0x4a) 32.22100269s ago: executing program 8 (id=3274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) syz_ublk_setup_io_uring(0x6962, &(0x7f0000000380)={0x0, 0x9a64, 0x2000, 0x1, 0x13c}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x42, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x1ff, 0xfffffff8, 0x0, 0xff, 0xff, 0xff}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.052722992s ago: executing program 39 (id=3271): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000980), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000000041e000009"], 0x50) 20.227975904s ago: executing program 8 (id=3276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x19c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x34) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x200002, 0x200003, 0x803, 0x4, 0x7, 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xde0f9e45a02cc902) 0s ago: executing program 40 (id=3276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x19c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x34) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x200002, 0x200003, 0x803, 0x4, 0x7, 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xde0f9e45a02cc902) kernel console output (not intermixed with test programs): he newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.920702][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.953675][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.986345][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.016476][T12581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.049063][T12581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.064285][T12581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.081336][T12581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.115049][T12581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.318055][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.340290][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.401843][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.426072][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.010664][T12841] ip6gre1: entered promiscuous mode [ 529.024396][T12841] ip6gre1: entered allmulticast mode [ 529.061705][T12841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.627417][T12863] ip_tables: iptables: counters copy to user failed while replacing table [ 529.876877][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.902285][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.910620][ T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.103490][ T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.284888][ T28] audit: type=1326 audit(2000000329.340:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 530.350553][T12877] FAULT_INJECTION: forcing a failure. [ 530.350553][T12877] name failslab, interval 1, probability 0, space 0, times 0 [ 530.383818][ T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.390075][ T28] audit: type=1326 audit(2000000329.350:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 530.414892][T12877] CPU: 1 PID: 12877 Comm: syz.1.2182 Not tainted syzkaller #0 [ 530.422864][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 530.432980][T12877] Call Trace: [ 530.436304][T12877] [ 530.439282][T12877] dump_stack_lvl+0x18c/0x250 [ 530.444019][T12877] ? show_regs_print_info+0x20/0x20 [ 530.449268][T12877] ? load_image+0x420/0x420 [ 530.453858][T12877] ? __might_sleep+0xe0/0xe0 [ 530.458515][T12877] ? __lock_acquire+0x7eb0/0x7eb0 [ 530.463591][T12877] should_fail_ex+0x394/0x4c0 [ 530.468352][T12877] should_failslab+0x9/0x20 [ 530.472931][T12877] slab_pre_alloc_hook+0x59/0x300 [ 530.478002][T12877] kmem_cache_alloc+0x5a/0x2c0 [ 530.482817][T12877] ? __proc_create+0x373/0x8b0 [ 530.484604][ T28] audit: type=1326 audit(2000000329.350:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 530.487658][T12877] __proc_create+0x373/0x8b0 [ 530.487688][T12877] ? proc_symlink+0x260/0x260 [ 530.521139][T12877] ? _raw_write_unlock+0x28/0x40 [ 530.526216][T12877] ? proc_register+0x5d5/0x7f0 [ 530.531067][T12877] proc_create_reg+0x8b/0x110 [ 530.535797][T12877] proc_create_net_data+0x99/0x1b0 [ 530.540970][T12877] ? bpf_iter_fini_seq_net+0xc0/0xc0 [ 530.546313][T12877] ? __kmalloc+0xe5/0x240 [ 530.550700][T12877] ? fib_default_rule_add+0x1fe/0x390 [ 530.556232][T12877] ip6mr_net_init+0x2f4/0x3b0 [ 530.561076][T12877] ops_init+0x391/0x640 [ 530.565296][T12877] setup_net+0x3b6/0xa20 [ 530.569589][T12877] ? copy_net_ns+0x530/0x530 [ 530.574233][T12877] ? copy_net_ns+0x347/0x530 [ 530.578870][T12877] ? down_read_killable+0x1d0/0x340 [ 530.584129][T12877] copy_net_ns+0x361/0x530 [ 530.584518][ T28] audit: type=1326 audit(2000000329.350:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 530.588589][T12877] create_new_namespaces+0x3ce/0x700 [ 530.618106][T12877] unshare_nsproxy_namespaces+0x11a/0x160 [ 530.623885][T12877] ksys_unshare+0x4fa/0x8f0 [ 530.628445][T12877] ? sighand_ctor+0x50/0x50 [ 530.633000][T12877] ? lock_chain_count+0x20/0x20 [ 530.637914][T12877] __x64_sys_unshare+0x38/0x40 [ 530.642730][T12877] do_syscall_64+0x55/0xb0 [ 530.647200][T12877] ? clear_bhb_loop+0x40/0x90 [ 530.651916][T12877] ? clear_bhb_loop+0x40/0x90 [ 530.656655][T12877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.662603][T12877] RIP: 0033:0x7fab7319e559 [ 530.667064][T12877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.686712][T12877] RSP: 002b:00007fab73ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 530.694308][ T28] audit: type=1326 audit(2000000329.350:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 530.695157][T12877] RAX: ffffffffffffffda RBX: 00007fab73425fa0 RCX: 00007fab7319e559 [ 530.695176][T12877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 530.695192][T12877] RBP: 00007fab732358b0 R08: 0000000000000000 R09: 0000000000000000 [ 530.743281][T12877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.751292][T12877] R13: 00007fab73426038 R14: 00007fab73425fa0 R15: 00007fffeeecd688 [ 530.759351][T12877] [ 530.791889][ T28] audit: type=1326 audit(2000000329.350:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 530.905134][ T28] audit: type=1326 audit(2000000329.350:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 531.006103][ T28] audit: type=1326 audit(2000000329.360:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 531.100218][ T28] audit: type=1326 audit(2000000329.360:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 531.189103][ T28] audit: type=1326 audit(2000000329.360:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 533.040862][T12931] overlayfs: failed to clone lowerpath [ 533.720261][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.131089][T12963] ip_tables: iptables: counters copy to user failed while replacing table [ 536.158519][T12961] ip_tables: iptables: counters copy to user failed while replacing table [ 536.215962][T12961] trusted_key: encrypted_key: insufficient parameters specified [ 536.237095][T12961] trusted_key: encrypted_key: insufficient parameters specified [ 536.592652][T12984] syzkaller0: entered promiscuous mode [ 536.599442][T12984] syzkaller0: entered allmulticast mode [ 536.612386][T12988] overlayfs: failed to clone upperpath [ 537.267828][T13003] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 537.280056][T13003] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 538.951879][T13012] sit0: left promiscuous mode [ 538.988596][T13012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.001566][T13012] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.018914][T13012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.260255][T13029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.497728][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 539.497744][ T28] audit: type=1326 audit(2000000338.570:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 539.594297][ T28] audit: type=1326 audit(2000000338.570:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 539.670812][ T28] audit: type=1326 audit(2000000338.610:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 539.728333][ T28] audit: type=1326 audit(2000000338.610:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 539.794296][ T28] audit: type=1326 audit(2000000338.610:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 539.844205][ T28] audit: type=1326 audit(2000000338.610:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 539.919805][ T28] audit: type=1326 audit(2000000338.610:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 539.994278][ T28] audit: type=1326 audit(2000000338.610:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 540.057477][ T28] audit: type=1326 audit(2000000338.610:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 540.124245][ T28] audit: type=1326 audit(2000000338.610:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab619e559 code=0x7ffc0000 [ 540.372048][T13038] loop1: detected capacity change from 0 to 40427 [ 540.442602][T13038] F2FS-fs (loop1): invalid crc value [ 540.469761][T13038] F2FS-fs (loop1): Found nat_bits in checkpoint [ 540.614687][T13038] F2FS-fs (loop1): Start checkpoint disabled! [ 540.649727][T13038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 540.725373][T13038] xt_TCPMSS: Only works on TCP SYN packets [ 540.757243][T13038] syz.1.2236: attempt to access beyond end of device [ 540.757243][T13038] loop1: rw=2049, sector=53248, nr_sectors = 1056 limit=40427 [ 540.771429][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.778540][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.785774][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.792939][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.799925][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.806912][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.813843][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.820801][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.827937][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.834897][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.841818][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.848838][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.855824][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.862769][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.869763][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.876741][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.883656][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.890878][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.898063][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.905011][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.911924][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.919506][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.926479][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.933395][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.940342][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.947322][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.954319][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.961243][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.969347][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.976661][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.983590][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.990869][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 540.998153][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.005135][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.012065][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.019043][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.025996][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.032906][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.039873][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.046875][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.053800][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.060908][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.067908][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.074888][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.081818][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.088818][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.096019][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.103219][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.110217][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.117180][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.124161][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.131085][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.138076][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.145140][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.152056][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.159542][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.166509][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.173441][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.180414][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.187408][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.194617][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.201789][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.208777][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.215707][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.222622][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.229596][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.236650][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.243551][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.250547][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.257472][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.264413][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.271327][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.278305][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.285283][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.292221][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.299467][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.306779][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.313684][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.320849][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.331738][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.338746][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.345722][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.352625][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.359591][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.366538][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.373435][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.380391][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.387338][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.394405][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.401560][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.408695][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.415718][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.422664][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.429638][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.436620][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.443526][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.450575][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.457528][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.464467][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.471407][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.478538][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.485527][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.492500][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.499749][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.506994][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.513930][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.520880][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.527888][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.534875][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.541789][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.548793][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.556241][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.563200][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.570217][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.577169][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.584085][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.591095][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.598166][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.605403][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.612578][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.619549][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.626526][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.633458][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.640447][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.647405][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.654381][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.661739][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.668719][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.675690][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.682599][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.713445][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.720455][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.727449][T13038] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 541.839984][T13076] FAULT_INJECTION: forcing a failure. [ 541.839984][T13076] name failslab, interval 1, probability 0, space 0, times 0 [ 541.894251][T13076] CPU: 1 PID: 13076 Comm: syz.3.2249 Not tainted syzkaller #0 [ 541.901781][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 541.911879][T13076] Call Trace: [ 541.915200][T13076] [ 541.918164][T13076] dump_stack_lvl+0x18c/0x250 [ 541.922885][T13076] ? show_regs_print_info+0x20/0x20 [ 541.928122][T13076] ? load_image+0x420/0x420 [ 541.932686][T13076] ? __might_sleep+0xe0/0xe0 [ 541.937332][T13076] ? __lock_acquire+0x7eb0/0x7eb0 [ 541.942411][T13076] should_fail_ex+0x394/0x4c0 [ 541.947150][T13076] should_failslab+0x9/0x20 [ 541.951707][T13076] slab_pre_alloc_hook+0x59/0x300 [ 541.956786][T13076] ? __lock_acquire+0x7eb0/0x7eb0 [ 541.961857][T13076] ? security_prepare_creds+0x4b/0x130 [ 541.967357][T13076] ? security_prepare_creds+0x4b/0x130 [ 541.972854][T13076] __kmem_cache_alloc_node+0x53/0x250 [ 541.978267][T13076] ? security_prepare_creds+0x4b/0x130 [ 541.983758][T13076] __kmalloc+0xa7/0x240 [ 541.988083][T13076] security_prepare_creds+0x4b/0x130 [ 541.993491][T13076] prepare_creds+0x427/0x5d0 [ 541.998132][T13076] __sys_setreuid+0x105/0x980 [ 542.002844][T13076] ? syscall_enter_from_user_mode+0x25/0x80 [ 542.008804][T13076] ? lockdep_hardirqs_on+0x98/0x150 [ 542.014181][T13076] do_syscall_64+0x55/0xb0 [ 542.018650][T13076] ? clear_bhb_loop+0x40/0x90 [ 542.023376][T13076] ? clear_bhb_loop+0x40/0x90 [ 542.028087][T13076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.034026][T13076] RIP: 0033:0x7fdab619e559 [ 542.038475][T13076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.058118][T13076] RSP: 002b:00007fdab70f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 542.066579][T13076] RAX: ffffffffffffffda RBX: 00007fdab6425fa0 RCX: 00007fdab619e559 [ 542.074581][T13076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 542.082578][T13076] RBP: 00007fdab62358b0 R08: 0000000000000000 R09: 0000000000000000 [ 542.090594][T13076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.098591][T13076] R13: 00007fdab6426038 R14: 00007fdab6425fa0 R15: 00007ffe3f4da608 [ 542.106604][T13076] [ 542.962821][T13105] md: ram0 does not have a valid v1.2 superblock, not importing! [ 544.147955][T13151] 9pnet_fd: Insufficient options for proto=fd [ 544.417016][T13158] overlayfs: failed to clone lowerpath [ 545.266077][T13183] overlayfs: failed to clone lowerpath [ 545.531164][T13194] sit1: entered promiscuous mode [ 545.540002][T13194] sit1: entered allmulticast mode [ 545.563605][T13194] team0: Device sit1 is of different type [ 545.719000][T13200] ip_tables: iptables: counters copy to user failed while replacing table [ 546.399207][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 546.399224][ T28] audit: type=1326 audit(2000000345.474:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 546.454391][ T28] audit: type=1326 audit(2000000345.474:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 546.523765][ T28] audit: type=1326 audit(2000000345.484:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 546.569021][ T28] audit: type=1326 audit(2000000345.484:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 546.624249][ T28] audit: type=1326 audit(2000000345.484:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 546.693711][ T28] audit: type=1326 audit(2000000345.484:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 546.694735][T13224] ip_tables: iptables: counters copy to user failed while replacing table [ 546.796750][ T28] audit: type=1326 audit(2000000345.484:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 546.864512][ T28] audit: type=1326 audit(2000000345.484:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 546.941622][ T28] audit: type=1326 audit(2000000345.484:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 547.024249][ T28] audit: type=1326 audit(2000000345.504:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.4.2311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc19e559 code=0x7ffc0000 [ 547.119852][T13237] FAULT_INJECTION: forcing a failure. [ 547.119852][T13237] name failslab, interval 1, probability 0, space 0, times 0 [ 547.158341][T13237] CPU: 1 PID: 13237 Comm: syz.1.2317 Not tainted syzkaller #0 [ 547.165893][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 547.175998][T13237] Call Trace: [ 547.179338][T13237] [ 547.182308][T13237] dump_stack_lvl+0x18c/0x250 [ 547.187041][T13237] ? show_regs_print_info+0x20/0x20 [ 547.192301][T13237] ? load_image+0x420/0x420 [ 547.196867][T13237] ? __might_sleep+0xe0/0xe0 [ 547.201522][T13237] ? __lock_acquire+0x7eb0/0x7eb0 [ 547.206602][T13237] ? mas_prev+0x43/0xa0 [ 547.210913][T13237] should_fail_ex+0x394/0x4c0 [ 547.215653][T13237] should_failslab+0x9/0x20 [ 547.220212][T13237] slab_pre_alloc_hook+0x59/0x300 [ 547.225292][T13237] kmem_cache_alloc+0x5a/0x2c0 [ 547.230376][T13237] ? __anon_vma_prepare+0xb6/0x440 [ 547.235544][T13237] __anon_vma_prepare+0xb6/0x440 [ 547.240537][T13237] do_wp_page+0x24b7/0x34d0 [ 547.245112][T13237] ? folio_put+0xd0/0xd0 [ 547.249422][T13237] ? do_raw_spin_lock+0x11f/0x2b0 [ 547.254507][T13237] ? __rwlock_init+0x150/0x150 [ 547.259364][T13237] handle_mm_fault+0x1306/0x4a50 [ 547.264354][T13237] ? handle_mm_fault+0xe6/0x4a50 [ 547.269366][T13237] ? numa_migrate_prep+0x350/0x350 [ 547.274540][T13237] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 547.279871][T13237] do_user_addr_fault+0x736/0x12d0 [ 547.285070][T13237] exc_page_fault+0x64/0x100 [ 547.289707][T13237] asm_exc_page_fault+0x26/0x30 [ 547.294602][T13237] RIP: 0010:rep_movs_alternative+0x15/0x90 [ 547.300470][T13237] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 [ 547.320158][T13237] RSP: 0018:ffffc9000c2bf8f0 EFLAGS: 00050202 [ 547.326282][T13237] RAX: ffffffff8434c500 RBX: 0000000000000004 RCX: 0000000000000004 [ 547.334318][T13237] RDX: 0000000000000000 RSI: ffffc9000c2bf9c0 RDI: 0000000000000000 [ 547.342337][T13237] RBP: ffffc9000c2bfc20 R08: 0000000000000003 R09: 0000000000000004 [ 547.350349][T13237] R10: dffffc0000000000 R11: fffff52001857f38 R12: 0000000000000004 [ 547.358373][T13237] R13: ffffc9000c2bf9c0 R14: 0000000000000000 R15: ffffc9000c2bf9c0 [ 547.366409][T13237] ? _copy_to_user+0x10/0xa0 [ 547.371067][T13237] _copy_to_user+0x85/0xa0 [ 547.375535][T13237] do_ipv6_getsockopt+0x1031/0x2510 [ 547.380914][T13237] ? ipv6_setsockopt+0x190/0x190 [ 547.386009][T13237] ? __lock_acquire+0x1431/0x7eb0 [ 547.391092][T13237] ? plist_add+0x3db/0x490 [ 547.395571][T13237] ? aa_sk_perm+0x970/0x970 [ 547.400120][T13237] ? verify_lock_unused+0x140/0x140 [ 547.405379][T13237] ? verify_lock_unused+0x140/0x140 [ 547.410640][T13237] ? __might_sleep+0xe0/0xe0 [ 547.415314][T13237] ipv6_getsockopt+0xbe/0x2e0 [ 547.420050][T13237] ? ipv6_getsockopt_sticky+0x190/0x190 [ 547.425669][T13237] rawv6_getsockopt+0x291/0x550 [ 547.430568][T13237] ? rawv6_setsockopt+0x5d0/0x5d0 [ 547.435669][T13237] ? __might_fault+0xaa/0x120 [ 547.440391][T13237] ? __might_fault+0xc6/0x120 [ 547.445120][T13237] ? __might_fault+0xaa/0x120 [ 547.449844][T13237] ? sock_common_getsockopt+0x2d/0xb0 [ 547.455343][T13237] ? sock_recv_errqueue+0x5e0/0x5e0 [ 547.460596][T13237] do_sock_getsockopt+0x379/0x450 [ 547.465722][T13237] ? __ia32_sys_setsockopt+0x200/0x200 [ 547.471237][T13237] ? local_clock_noinstr+0xc0/0xd0 [ 547.476422][T13237] __x64_sys_getsockopt+0x1d6/0x280 [ 547.481677][T13237] ? local_clock_noinstr+0xc0/0xd0 [ 547.486832][T13237] ? local_clock_noinstr+0xc0/0xd0 [ 547.491992][T13237] do_syscall_64+0x55/0xb0 [ 547.496449][T13237] ? clear_bhb_loop+0x40/0x90 [ 547.501181][T13237] ? clear_bhb_loop+0x40/0x90 [ 547.505901][T13237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.511842][T13237] RIP: 0033:0x7fab7319e559 [ 547.516301][T13237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.535949][T13237] RSP: 002b:00007fab73ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 547.544411][T13237] RAX: ffffffffffffffda RBX: 00007fab73425fa0 RCX: 00007fab7319e559 [ 547.552432][T13237] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000003 [ 547.560539][T13237] RBP: 00007fab732358b0 R08: 0000000000000000 R09: 0000000000000000 [ 547.568559][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.576579][T13237] R13: 00007fab73426038 R14: 00007fab73425fa0 R15: 00007fffeeecd688 [ 547.584632][T13237] [ 547.786391][T13248] xt_TCPMSS: Only works on TCP SYN packets [ 550.904868][T13342] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 550.913274][T13338] 9pnet: Could not find request transport: xen [ 551.250341][T13344] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 552.049217][ T28] kauditd_printk_skb: 225 callbacks suppressed [ 552.049233][ T28] audit: type=1326 audit(2000000351.124:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 552.134374][ T28] audit: type=1326 audit(2000000351.134:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 552.186525][ T28] audit: type=1326 audit(2000000351.134:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 552.252256][ T28] audit: type=1326 audit(2000000351.164:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 552.328046][ T28] audit: type=1326 audit(2000000351.164:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 552.414937][ T28] audit: type=1326 audit(2000000351.164:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 552.504371][ T28] audit: type=1326 audit(2000000351.164:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 552.544447][T13367] overlayfs: overlapping lowerdir path [ 552.583785][ T28] audit: type=1326 audit(2000000351.164:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 552.661430][ T28] audit: type=1326 audit(2000000351.164:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 552.803079][ T28] audit: type=1326 audit(2000000351.164:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 553.146557][T13382] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 553.185036][T13382] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 553.385618][T13388] xt_CT: No such helper "syz1" [ 554.317502][T13416] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 554.335625][T13416] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 554.444065][T13426] ip_tables: iptables: counters copy to user failed while replacing table [ 554.645837][T13433] FAULT_INJECTION: forcing a failure. [ 554.645837][T13433] name failslab, interval 1, probability 0, space 0, times 0 [ 554.684002][T13433] CPU: 0 PID: 13433 Comm: syz.1.2394 Not tainted syzkaller #0 [ 554.691638][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 554.701829][T13433] Call Trace: [ 554.705142][T13433] [ 554.708222][T13433] dump_stack_lvl+0x18c/0x250 [ 554.712952][T13433] ? show_regs_print_info+0x20/0x20 [ 554.718201][T13433] ? load_image+0x420/0x420 [ 554.722757][T13433] ? __might_sleep+0xe0/0xe0 [ 554.727408][T13433] ? __lock_acquire+0x7eb0/0x7eb0 [ 554.732584][T13433] should_fail_ex+0x394/0x4c0 [ 554.737318][T13433] should_failslab+0x9/0x20 [ 554.741873][T13433] slab_pre_alloc_hook+0x59/0x300 [ 554.746950][T13433] ? crypto_create_tfm_node+0x77/0x380 [ 554.752467][T13433] ? crypto_create_tfm_node+0x77/0x380 [ 554.757981][T13433] __kmem_cache_alloc_node+0x53/0x250 [ 554.763405][T13433] ? __up_read+0x2b8/0x6b0 [ 554.767870][T13433] ? crypto_create_tfm_node+0x77/0x380 [ 554.773376][T13433] __kmalloc_node+0xa6/0x240 [ 554.778037][T13433] crypto_create_tfm_node+0x77/0x380 [ 554.783379][T13433] crypto_spawn_tfm2+0x5c/0x90 [ 554.788184][T13433] hmac_init_tfm+0x7e/0x1a0 [ 554.792729][T13433] crypto_shash_init_tfm+0x1be/0x310 [ 554.798145][T13433] crypto_create_tfm_node+0x155/0x380 [ 554.803581][T13433] ? crypto_alg_mod_lookup+0x1ad/0x570 [ 554.809084][T13433] crypto_alloc_tfm_node+0x17b/0x360 [ 554.814427][T13433] sctp_inet_listen+0x5b4/0xaa0 [ 554.819460][T13433] ? sctp_sock_migrate+0xf70/0xf70 [ 554.824718][T13433] ? aa_sk_perm+0x83c/0x970 [ 554.829281][T13433] ? aa_af_perm+0x330/0x330 [ 554.833862][T13433] ? bpf_lsm_socket_listen+0x9/0x10 [ 554.839128][T13433] __sys_listen+0x1a4/0x220 [ 554.843693][T13433] __x64_sys_listen+0x5a/0x70 [ 554.848416][T13433] do_syscall_64+0x55/0xb0 [ 554.852884][T13433] ? clear_bhb_loop+0x40/0x90 [ 554.857608][T13433] ? clear_bhb_loop+0x40/0x90 [ 554.862333][T13433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.868287][T13433] RIP: 0033:0x7fab7319e559 [ 554.872753][T13433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.892485][T13433] RSP: 002b:00007fab73ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 554.900961][T13433] RAX: ffffffffffffffda RBX: 00007fab73425fa0 RCX: 00007fab7319e559 [ 554.909096][T13433] RDX: 0000000000000000 RSI: 00000000fffff789 RDI: 0000000000000003 [ 554.917147][T13433] RBP: 00007fab732358b0 R08: 0000000000000000 R09: 0000000000000000 [ 554.925268][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.933291][T13433] R13: 00007fab73426038 R14: 00007fab73425fa0 R15: 00007fffeeecd688 [ 554.941342][T13433] [ 555.026003][T13433] sctp: failed to load transform for md5: -12 [ 555.514642][T13451] ip_tables: iptables: counters copy to user failed while replacing table [ 555.699375][T13459] FAULT_INJECTION: forcing a failure. [ 555.699375][T13459] name failslab, interval 1, probability 0, space 0, times 0 [ 555.789518][T13459] CPU: 1 PID: 13459 Comm: syz.3.2404 Not tainted syzkaller #0 [ 555.797078][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 555.807187][T13459] Call Trace: [ 555.810562][T13459] [ 555.813537][T13459] dump_stack_lvl+0x18c/0x250 [ 555.818374][T13459] ? show_regs_print_info+0x20/0x20 [ 555.823619][T13459] ? load_image+0x420/0x420 [ 555.828189][T13459] ? __might_sleep+0xe0/0xe0 [ 555.832819][T13459] ? __lock_acquire+0x7eb0/0x7eb0 [ 555.837920][T13459] should_fail_ex+0x394/0x4c0 [ 555.842663][T13459] should_failslab+0x9/0x20 [ 555.847224][T13459] slab_pre_alloc_hook+0x59/0x300 [ 555.852303][T13459] ? mempool_init_node+0x1e9/0x480 [ 555.857475][T13459] ? mempool_init_node+0x1e9/0x480 [ 555.862642][T13459] __kmem_cache_alloc_node+0x53/0x250 [ 555.868095][T13459] ? mempool_init_node+0x1e9/0x480 [ 555.873247][T13459] __kmalloc+0xa7/0x240 [ 555.877455][T13459] ? ____kasan_slab_free+0x112/0x1f0 [ 555.882777][T13459] ? mempool_free_slab+0x20/0x20 [ 555.887775][T13459] mempool_init_node+0x1e9/0x480 [ 555.892797][T13459] ? mempool_kmalloc+0x20/0x20 [ 555.897622][T13459] ? mempool_free_slab+0x20/0x20 [ 555.902608][T13459] mempool_init+0x3a/0x50 [ 555.906982][T13459] fanotify_add_mark+0x6e2/0xd30 [ 555.911966][T13459] do_fanotify_mark+0xc45/0xdb0 [ 555.916857][T13459] ? copy_fid_info_to_user+0x6f0/0x6f0 [ 555.922440][T13459] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 555.928448][T13459] ? lock_chain_count+0x20/0x20 [ 555.933326][T13459] __x64_sys_fanotify_mark+0xb5/0xd0 [ 555.938644][T13459] do_syscall_64+0x55/0xb0 [ 555.943087][T13459] ? clear_bhb_loop+0x40/0x90 [ 555.947803][T13459] ? clear_bhb_loop+0x40/0x90 [ 555.952515][T13459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.958472][T13459] RIP: 0033:0x7fdab619e559 [ 555.962920][T13459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.982560][T13459] RSP: 002b:00007fdab70f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 555.991013][T13459] RAX: ffffffffffffffda RBX: 00007fdab6425fa0 RCX: 00007fdab619e559 [ 555.999012][T13459] RDX: 0000000040009965 RSI: 0000000000000105 RDI: 000000000000000b [ 556.007010][T13459] RBP: 00007fdab62358b0 R08: 0000000000000000 R09: 0000000000000000 [ 556.015005][T13459] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 556.022993][T13459] R13: 00007fdab6426038 R14: 00007fdab6425fa0 R15: 00007ffe3f4da608 [ 556.031010][T13459] [ 556.422683][T13478] ip_tables: iptables: counters copy to user failed while replacing table [ 556.675131][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 556.689172][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 556.862418][T13491] hsr_slave_1 (unregistering): left promiscuous mode [ 556.985155][T13498] ip_tables: iptables: counters copy to user failed while replacing table [ 557.207772][T13507] "syz.3.2425" (13507) uses obsolete ecb(arc4) skcipher [ 557.380714][T13515] FAULT_INJECTION: forcing a failure. [ 557.380714][T13515] name failslab, interval 1, probability 0, space 0, times 0 [ 557.404438][T13515] CPU: 1 PID: 13515 Comm: syz.1.2427 Not tainted syzkaller #0 [ 557.411972][T13515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 557.422071][T13515] Call Trace: [ 557.425391][T13515] [ 557.428358][T13515] dump_stack_lvl+0x18c/0x250 [ 557.433096][T13515] ? show_regs_print_info+0x20/0x20 [ 557.438329][T13515] ? load_image+0x420/0x420 [ 557.442867][T13515] ? __lock_acquire+0x7eb0/0x7eb0 [ 557.447923][T13515] should_fail_ex+0x394/0x4c0 [ 557.452632][T13515] should_failslab+0x9/0x20 [ 557.457171][T13515] slab_pre_alloc_hook+0x59/0x300 [ 557.462222][T13515] ? lockdep_softirqs_off+0x440/0x440 [ 557.467627][T13515] kmem_cache_alloc_lru+0x4d/0x2b0 [ 557.472791][T13515] ? hugetlbfs_alloc_inode+0xf3/0x140 [ 557.478230][T13515] hugetlbfs_alloc_inode+0xf3/0x140 [ 557.483464][T13515] ? hugetlbfs_fill_super+0x900/0x900 [ 557.488886][T13515] new_inode_pseudo+0x63/0x1d0 [ 557.493677][T13515] new_inode+0x22/0x1d0 [ 557.497853][T13515] ? resv_map_alloc+0x1c4/0x2c0 [ 557.502723][T13515] hugetlbfs_get_inode+0x78/0x500 [ 557.507773][T13515] ? _raw_spin_unlock+0x28/0x40 [ 557.512657][T13515] ? alloc_fd+0x590/0x640 [ 557.517019][T13515] hugetlb_file_setup+0x215/0x610 [ 557.522086][T13515] __se_sys_memfd_create+0x3ce/0x660 [ 557.527397][T13515] do_syscall_64+0x55/0xb0 [ 557.531833][T13515] ? clear_bhb_loop+0x40/0x90 [ 557.536534][T13515] ? clear_bhb_loop+0x40/0x90 [ 557.541227][T13515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.547152][T13515] RIP: 0033:0x7fab7319e559 [ 557.551584][T13515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.571561][T13515] RSP: 002b:00007fab73ffe028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 557.580019][T13515] RAX: ffffffffffffffda RBX: 00007fab73425fa0 RCX: 00007fab7319e559 [ 557.588025][T13515] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000001800 [ 557.596030][T13515] RBP: 00007fab732358b0 R08: 0000000000000000 R09: 0000000000000000 [ 557.604121][T13515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.612132][T13515] R13: 00007fab73426038 R14: 00007fab73425fa0 R15: 00007fffeeecd688 [ 557.620151][T13515] [ 557.912972][T13522] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 557.940050][T13522] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 558.012499][T13522] bond1: entered allmulticast mode [ 558.023809][T13522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.335535][T13539] loop1: detected capacity change from 0 to 2048 [ 558.449869][T13539] loop1: p3 p4 < > [ 558.459268][T13539] loop1: p3 start 4284289 is beyond EOD, truncated [ 558.491742][T13541] xt_CT: No such helper "syz1" [ 558.683369][T13230] udevd[13230]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 558.721157][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2442'. [ 559.182101][T13562] 9pnet_fd: Insufficient options for proto=fd [ 559.530106][T13570] loop1: detected capacity change from 0 to 2048 [ 559.611836][T13570] Alternate GPT is invalid, using primary GPT. [ 559.645142][T13570] loop1: p2 p3 p7 [ 560.202493][T13580] loop1: detected capacity change from 0 to 128 [ 560.218481][T13580] FAT-fs (loop1): Unrecognized mount option "vfat" or missing value [ 560.249851][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 560.249868][ T28] audit: type=1326 audit(2000000359.324:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.1.2455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 560.354752][ T28] audit: type=1326 audit(2000000359.354:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.1.2455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 560.424668][ T28] audit: type=1326 audit(2000000359.354:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.1.2455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 560.495387][ T28] audit: type=1326 audit(2000000359.364:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.1.2455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 560.549216][ T28] audit: type=1326 audit(2000000359.364:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.1.2455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 560.597785][ T28] audit: type=1326 audit(2000000359.364:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.1.2455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 560.648502][ T28] audit: type=1326 audit(2000000359.364:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.1.2455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 560.701450][ T28] audit: type=1326 audit(2000000359.364:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.1.2455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 560.890779][T13589] device-mapper: table: 248:1: mirror: Invalid offset (-EINVAL) [ 560.903935][T13589] device-mapper: ioctl: error adding target to table [ 561.563399][ T28] audit: type=1326 audit(2000000360.634:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13607 comm="syz.1.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 561.639215][ T28] audit: type=1326 audit(2000000360.634:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13607 comm="syz.1.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7ffc0000 [ 562.510799][T13620] FAULT_INJECTION: forcing a failure. [ 562.510799][T13620] name failslab, interval 1, probability 0, space 0, times 0 [ 562.557007][T13620] CPU: 0 PID: 13620 Comm: syz.1.2469 Not tainted syzkaller #0 [ 562.564563][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 562.574678][T13620] Call Trace: [ 562.578006][T13620] [ 562.580993][T13620] dump_stack_lvl+0x18c/0x250 [ 562.585778][T13620] ? show_regs_print_info+0x20/0x20 [ 562.591518][T13620] ? load_image+0x420/0x420 [ 562.596135][T13620] ? __lock_acquire+0x7eb0/0x7eb0 [ 562.601239][T13620] should_fail_ex+0x394/0x4c0 [ 562.605991][T13620] should_failslab+0x9/0x20 [ 562.610558][T13620] slab_pre_alloc_hook+0x59/0x300 [ 562.615646][T13620] ? sctp_endpoint_new+0x86/0xa10 [ 562.620812][T13620] __kmem_cache_alloc_node+0x53/0x250 [ 562.626286][T13620] ? sctp_endpoint_new+0x86/0xa10 [ 562.631372][T13620] kmalloc_trace+0x2a/0xe0 [ 562.635894][T13620] sctp_endpoint_new+0x86/0xa10 [ 562.640803][T13620] ? __raw_spin_lock_init+0x45/0x100 [ 562.646152][T13620] sctp_init_sock+0x95f/0x11f0 [ 562.650974][T13620] sctp_v6_init_sock+0x16/0x70 [ 562.655792][T13620] inet6_create+0xdf9/0x1160 [ 562.660929][T13620] __sock_create+0x49e/0x940 [ 562.665586][T13620] __sys_socket+0xd7/0x1b0 [ 562.670066][T13620] __x64_sys_socket+0x7a/0x90 [ 562.674800][T13620] do_syscall_64+0x55/0xb0 [ 562.679299][T13620] ? clear_bhb_loop+0x40/0x90 [ 562.684021][T13620] ? clear_bhb_loop+0x40/0x90 [ 562.688728][T13620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.694669][T13620] RIP: 0033:0x7fab7319e559 [ 562.699113][T13620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.718754][T13620] RSP: 002b:00007fab73ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 562.727205][T13620] RAX: ffffffffffffffda RBX: 00007fab73425fa0 RCX: 00007fab7319e559 [ 562.735204][T13620] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 562.743201][T13620] RBP: 00007fab732358b0 R08: 0000000000000000 R09: 0000000000000000 [ 562.751193][T13620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.759184][T13620] R13: 00007fab73426038 R14: 00007fab73425fa0 R15: 00007fffeeecd688 [ 562.767197][T13620] [ 563.091497][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.101156][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.293930][T13669] FAULT_INJECTION: forcing a failure. [ 565.293930][T13669] name failslab, interval 1, probability 0, space 0, times 0 [ 565.330337][T13669] CPU: 1 PID: 13669 Comm: syz.3.2486 Not tainted syzkaller #0 [ 565.337882][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 565.347985][T13669] Call Trace: [ 565.351305][T13669] [ 565.354273][T13669] dump_stack_lvl+0x18c/0x250 [ 565.359005][T13669] ? show_regs_print_info+0x20/0x20 [ 565.364242][T13669] ? load_image+0x420/0x420 [ 565.368803][T13669] ? __might_sleep+0xe0/0xe0 [ 565.373447][T13669] ? __lock_acquire+0x7eb0/0x7eb0 [ 565.378533][T13669] should_fail_ex+0x394/0x4c0 [ 565.383282][T13669] should_failslab+0x9/0x20 [ 565.387848][T13669] slab_pre_alloc_hook+0x59/0x300 [ 565.392921][T13669] kmem_cache_alloc_lru+0x4d/0x2b0 [ 565.398088][T13669] ? proc_alloc_inode+0x2a/0xb0 [ 565.402989][T13669] proc_alloc_inode+0x2a/0xb0 [ 565.407804][T13669] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 565.414286][T13669] new_inode_pseudo+0x63/0x1d0 [ 565.419113][T13669] new_inode+0x22/0x1d0 [ 565.423331][T13669] proc_pid_make_inode+0x24/0x190 [ 565.428417][T13669] proc_fd_instantiate+0x56/0x2a0 [ 565.433492][T13669] ? tid_fd_mode+0x1b1/0x200 [ 565.438133][T13669] proc_lookupfd_common+0x103/0x220 [ 565.443444][T13669] ? proc_readfd_common+0x8b0/0x8b0 [ 565.448705][T13669] ? tid_fd_mode+0x200/0x200 [ 565.453349][T13669] ? proc_fd_permission+0x220/0x220 [ 565.458600][T13669] path_openat+0x1110/0x3270 [ 565.463275][T13669] ? do_filp_open+0x430/0x430 [ 565.468023][T13669] do_filp_open+0x1f2/0x430 [ 565.472583][T13669] ? vfs_tmpfile+0x620/0x620 [ 565.477230][T13669] ? noop_direct_IO+0x20/0x20 [ 565.481971][T13669] ? _raw_spin_unlock+0x28/0x40 [ 565.486877][T13669] ? alloc_fd+0x590/0x640 [ 565.491275][T13669] do_sys_openat2+0x134/0x1d0 [ 565.496013][T13669] ? do_sys_open+0xe0/0xe0 [ 565.500489][T13669] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 565.506526][T13669] ? lock_chain_count+0x20/0x20 [ 565.511446][T13669] __x64_sys_openat+0x139/0x160 [ 565.516371][T13669] do_syscall_64+0x55/0xb0 [ 565.520854][T13669] ? clear_bhb_loop+0x40/0x90 [ 565.525589][T13669] ? clear_bhb_loop+0x40/0x90 [ 565.530343][T13669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.536295][T13669] RIP: 0033:0x7fdab615ed8e [ 565.540760][T13669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 565.560589][T13669] RSP: 002b:00007fdab70f3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 565.569090][T13669] RAX: ffffffffffffffda RBX: 00007fdab70f46c0 RCX: 00007fdab615ed8e [ 565.577169][T13669] RDX: 0000000000000002 RSI: 00007fdab70f3f90 RDI: ffffffffffffff9c [ 565.585192][T13669] RBP: 00007fdab62358b0 R08: 0000000000000000 R09: 0000000000000000 [ 565.593208][T13669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.601233][T13669] R13: 00007fdab6426038 R14: 00007fdab6425fa0 R15: 00007ffe3f4da608 [ 565.609278][T13669] [ 566.784364][T13700] overlayfs: failed to clone upperpath [ 566.818276][T13700] overlayfs: failed to clone upperpath [ 566.870191][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 566.870209][ T28] audit: type=1326 audit(2000000365.934:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.1.2491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7fc00000 [ 567.793533][T13730] xt_CT: No such helper "syz1" [ 568.097584][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 568.481341][ T28] audit: type=1326 audit(2000000367.554:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.3.2508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab619e559 code=0x7fc00000 [ 568.903681][T13759] rxe_eth0 speed is unknown, defaulting to 1000 [ 570.003679][T13802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2536'. [ 570.053469][T13804] macvtap1: entered allmulticast mode [ 570.063890][T13804] vlan0: entered allmulticast mode [ 570.071030][T13804] veth0_vlan: entered allmulticast mode [ 570.125814][ T28] audit: type=1326 audit(2000000369.204:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.4.2528" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcc19e559 code=0x7fc00000 [ 570.295355][ T5857] smpboot: CPU 1 is now offline [ 570.720366][T13824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2546'. [ 571.030782][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2550'. [ 571.378479][T13839] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 571.679997][ T28] audit: type=1326 audit(2000000370.754:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.6.2549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21f99e559 code=0x7fc00000 [ 571.889881][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2558'. [ 571.907221][T13848] xt_CT: No such helper "syz1" [ 572.017355][T13856] kvm: emulating exchange as write [ 572.867652][T13884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2569'. [ 573.438135][ T28] audit: type=1326 audit(2000000372.514:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.2566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7fc00000 [ 575.234869][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2579'. [ 575.940138][T13927] overlayfs: failed to clone upperpath [ 576.746437][ T28] audit: type=1326 audit(2000000375.824:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13924 comm="syz.1.2585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7319e559 code=0x7fc00000 [ 579.223139][T14010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2611'. [ 580.407219][T14039] overlayfs: failed to clone lowerpath [ 581.283919][T14049] rxe_eth0 speed is unknown, defaulting to 1000 [ 582.124582][T14073] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 583.823995][T14098] FAULT_INJECTION: forcing a failure. [ 583.823995][T14098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 583.911483][T14098] CPU: 0 PID: 14098 Comm: syz.3.2645 Not tainted syzkaller #0 [ 583.918999][T14098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 583.929065][T14098] Call Trace: [ 583.932355][T14098] [ 583.935290][T14098] dump_stack_lvl+0x18c/0x250 [ 583.939976][T14098] ? show_regs_print_info+0x20/0x20 [ 583.945182][T14098] ? load_image+0x420/0x420 [ 583.949711][T14098] ? __lock_acquire+0x7eb0/0x7eb0 [ 583.954770][T14098] ? verify_lock_unused+0x140/0x140 [ 583.959977][T14098] should_fail_ex+0x394/0x4c0 [ 583.964673][T14098] prepare_alloc_pages+0x1e1/0x5b0 [ 583.969799][T14098] __alloc_pages+0x134/0x460 [ 583.974400][T14098] ? zone_statistics+0x170/0x170 [ 583.979358][T14098] ? blk_cgroup_congested+0x1f/0x220 [ 583.984667][T14098] pte_alloc_one+0x84/0x540 [ 583.989202][T14098] ? pfn_modify_allowed+0x560/0x560 [ 583.994412][T14098] ? blk_cgroup_congested+0x1f/0x220 [ 583.999706][T14098] ? blk_cgroup_congested+0x211/0x220 [ 584.005092][T14098] ? __folio_throttle_swaprate+0xac/0x1a0 [ 584.010813][T14098] do_huge_pmd_anonymous_page+0x5a8/0x18b0 [ 584.016636][T14098] ? count_memcg_event_mm+0x36f/0x3c0 [ 584.022009][T14098] ? count_memcg_event_mm+0x8e/0x3c0 [ 584.027296][T14098] ? vma_thp_gfp_mask+0x160/0x160 [ 584.032332][T14098] ? hugepage_vma_check+0x47d/0x560 [ 584.037550][T14098] handle_mm_fault+0x1184/0x4a50 [ 584.042489][T14098] ? handle_mm_fault+0xe6/0x4a50 [ 584.047435][T14098] ? numa_migrate_prep+0x350/0x350 [ 584.052564][T14098] __get_user_pages+0x604/0x1580 [ 584.057543][T14098] ? populate_vma_page_range+0x380/0x380 [ 584.063195][T14098] populate_vma_page_range+0x2c1/0x380 [ 584.068669][T14098] ? fixup_user_fault+0x750/0x750 [ 584.073706][T14098] ? down_read+0x1ac/0x2e0 [ 584.078221][T14098] __mm_populate+0x260/0x390 [ 584.082818][T14098] ? faultin_page_range+0x8a0/0x8a0 [ 584.088030][T14098] ? up_write+0x1be/0x410 [ 584.092374][T14098] do_mlock+0x5d2/0x740 [ 584.096627][T14098] ? lru_gen_add_folio+0xe00/0xe00 [ 584.101742][T14098] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 584.107759][T14098] ? lock_chain_count+0x20/0x20 [ 584.112629][T14098] ? syscall_enter_from_user_mode+0x25/0x80 [ 584.118537][T14098] __x64_sys_mlock+0x60/0x70 [ 584.123154][T14098] do_syscall_64+0x55/0xb0 [ 584.127688][T14098] ? clear_bhb_loop+0x40/0x90 [ 584.132384][T14098] ? clear_bhb_loop+0x40/0x90 [ 584.137075][T14098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.142994][T14098] RIP: 0033:0x7fdab619e559 [ 584.147414][T14098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.167050][T14098] RSP: 002b:00007fdab70f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 584.175477][T14098] RAX: ffffffffffffffda RBX: 00007fdab6425fa0 RCX: 00007fdab619e559 [ 584.183472][T14098] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 584.191485][T14098] RBP: 00007fdab62358b0 R08: 0000000000000000 R09: 0000000000000000 [ 584.199593][T14098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.207586][T14098] R13: 00007fdab6426038 R14: 00007fdab6425fa0 R15: 00007ffe3f4da608 [ 584.215582][T14098] [ 584.502732][T14100] xt_TCPMSS: Only works on TCP SYN packets [ 585.252702][T14114] overlayfs: failed to clone upperpath [ 586.114280][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 587.495729][T14138] overlayfs: failed to clone lowerpath [ 588.287243][T14159] overlayfs: failed to clone lowerpath [ 588.320350][T14160] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 588.874893][T14175] overlayfs: failed to clone lowerpath [ 590.293862][T14180] xt_TCPMSS: Only works on TCP SYN packets [ 591.296548][T14232] overlayfs: failed to clone upperpath [ 592.643254][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 592.654034][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 592.665922][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 592.674014][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 592.681655][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 592.690665][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 592.847468][T14262] rxe_eth0 speed is unknown, defaulting to 1000 [ 592.929403][T14268] overlayfs: failed to clone lowerpath [ 593.365129][T14273] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 593.424234][T14273] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 593.463228][T14273] bond1: entered allmulticast mode [ 593.501502][T14273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.141720][T14262] chnl_net:caif_netlink_parms(): no params data found [ 594.226116][T14292] ip_tables: iptables: counters copy to user failed while replacing table [ 594.501412][T14299] overlayfs: failed to clone lowerpath [ 594.756351][ T5087] Bluetooth: hci4: command tx timeout [ 594.766485][T14305] 9pnet_fd: Insufficient options for proto=fd [ 594.792711][ T3466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.086377][ T3466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.158850][T14315] fuse: Bad value for 'fd' [ 595.178490][T14262] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.197332][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.247175][T14262] bridge_slave_0: entered allmulticast mode [ 595.293223][T14262] bridge_slave_0: entered promiscuous mode [ 595.322323][T14262] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.362620][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.405661][T14262] bridge_slave_1: entered allmulticast mode [ 595.457675][T14262] bridge_slave_1: entered promiscuous mode [ 595.623132][ T3466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.654852][T14325] overlayfs: failed to clone lowerpath [ 595.883166][ T3466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.960185][T14262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.062045][T14262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.317219][T14262] team0: Port device team_slave_0 added [ 596.367708][T14262] team0: Port device team_slave_1 added [ 596.669439][T14262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.712375][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.844676][ T5087] Bluetooth: hci4: command tx timeout [ 596.854401][T14262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.908277][T14262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.944373][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.061893][T14262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.403978][T14350] xt_TCPMSS: Only works on TCP SYN packets [ 597.642241][T14352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.725812][T14352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.761453][T14262] hsr_slave_0: entered promiscuous mode [ 597.771620][T14352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.821971][T14262] hsr_slave_1: entered promiscuous mode [ 597.862155][T14358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.887298][T14262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.921217][T14262] Cannot create hsr debugfs directory [ 597.940047][T14358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.984333][T14358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.992731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.044370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.085304][T14351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.914004][T14382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 598.933605][ T5087] Bluetooth: hci4: command tx timeout [ 599.691096][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.744910][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.774773][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.783390][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.851361][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.898229][T14405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.952752][T14405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.997960][T14405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.998227][ T5087] Bluetooth: hci4: command tx timeout [ 602.340777][T14262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 602.468197][T14262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 602.559760][T14262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 602.656133][T14262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 602.788321][ T3466] hsr_slave_0: left promiscuous mode [ 602.867433][ T3466] hsr_slave_1: left promiscuous mode [ 602.895530][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.902985][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.038219][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.070392][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.149867][ T3466] bridge_slave_1: left allmulticast mode [ 603.168974][ T3466] bridge_slave_1: left promiscuous mode [ 603.217344][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.338674][ T3466] bridge_slave_0: left allmulticast mode [ 603.358607][ T3466] bridge_slave_0: left promiscuous mode [ 603.399227][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.856777][ T3466] veth1_vlan: left promiscuous mode [ 603.874629][ T3466] veth0_vlan: left promiscuous mode [ 604.843082][ T3466] bond1 (unregistering): Released all slaves [ 604.853158][T14496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2788'. [ 604.971107][ T3466] pim6reg (unregistering): left allmulticast mode [ 606.992945][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 607.210473][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 607.464333][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.716524][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.213271][ T3466] bond0 (unregistering): Released all slaves [ 609.834614][T14262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.947527][T14262] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.013988][T10679] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.021167][T10679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.120482][T10679] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.127668][T10679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.481917][T14262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.358610][T14262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.627184][T14262] veth0_vlan: entered promiscuous mode [ 611.690253][T14262] veth1_vlan: entered promiscuous mode [ 611.863362][T14262] veth0_macvtap: entered promiscuous mode [ 611.913999][T14262] veth1_macvtap: entered promiscuous mode [ 611.982017][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.053295][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.089379][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.132042][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.143596][T14593] overlayfs: overlapping lowerdir path [ 612.197943][T14262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.275177][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.331927][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.363979][T14262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.410708][T14262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.457187][T14262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.512211][T14262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.552057][T14262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.600672][T14262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.634179][T14262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.961081][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.014302][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.172587][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.235479][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.461819][T14619] 9pnet_fd: Insufficient options for proto=fd [ 613.692679][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.731345][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.776193][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.792589][T14629] overlayfs: overlapping lowerdir path [ 613.825751][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.851437][T14621] VFS: Mount too revealing [ 613.858796][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.889432][T14634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.898040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.909218][T14631] overlayfs: failed to resolve './file0': -2 [ 613.933124][T14627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.941617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.996542][T14632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.751458][T14653] 9pnet_fd: Insufficient options for proto=fd [ 614.938002][T14657] overlayfs: overlapping lowerdir path [ 618.638246][T14759] overlayfs: failed to clone lowerpath [ 620.117585][T14796] FAULT_INJECTION: forcing a failure. [ 620.117585][T14796] name fail_futex, interval 1, probability 0, space 0, times 0 [ 620.337049][T14796] CPU: 0 PID: 14796 Comm: syz.3.2897 Not tainted syzkaller #0 [ 620.344558][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 620.354615][T14796] Call Trace: [ 620.357902][T14796] [ 620.360848][T14796] dump_stack_lvl+0x18c/0x250 [ 620.365544][T14796] ? show_regs_print_info+0x20/0x20 [ 620.370748][T14796] ? load_image+0x420/0x420 [ 620.375255][T14796] ? stack_trace_save+0xaa/0x100 [ 620.380229][T14796] should_fail_ex+0x394/0x4c0 [ 620.384927][T14796] get_futex_key+0x136/0x1030 [ 620.389620][T14796] ? futex_setup_timer+0xc0/0xc0 [ 620.394567][T14796] futex_wake+0x127/0x4f0 [ 620.398932][T14796] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 620.404932][T14796] ? futex_wake_mark+0x150/0x150 [ 620.409909][T14796] ? lockdep_hardirqs_on+0x98/0x150 [ 620.415120][T14796] do_futex+0x35d/0x3e0 [ 620.419289][T14796] ? __ia32_sys_get_robust_list+0x110/0x110 [ 620.425225][T14796] __se_sys_futex+0x3a9/0x440 [ 620.429922][T14796] ? __x64_sys_futex+0xf0/0xf0 [ 620.434697][T14796] ? __x64_sys_futex+0x21/0xf0 [ 620.439486][T14796] do_syscall_64+0x55/0xb0 [ 620.443916][T14796] ? clear_bhb_loop+0x40/0x90 [ 620.448621][T14796] ? clear_bhb_loop+0x40/0x90 [ 620.453331][T14796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.459501][T14796] RIP: 0033:0x7fdab619e559 [ 620.463945][T14796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.483558][T14796] RSP: 002b:00007fdab70f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 620.491992][T14796] RAX: ffffffffffffffda RBX: 00007fdab6425fa8 RCX: 00007fdab619e559 [ 620.499973][T14796] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdab6425fac [ 620.507950][T14796] RBP: 00007fdab6425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 620.515938][T14796] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 620.523913][T14796] R13: 00007fdab6426038 R14: 00007ffe3f4da520 R15: 00007ffe3f4da608 [ 620.531912][T14796] [ 620.537741][T14803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2901'. [ 621.526343][T14821] net_ratelimit: 3 callbacks suppressed [ 621.526427][T14821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.597965][T14821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.641858][T14821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.685438][T14821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.693820][T14821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.782035][T14822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.807811][T14822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.841681][T14822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.175122][T14830] program syz.1.2912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.320372][T14833] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2913'. [ 623.847515][T14864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2924'. [ 623.956546][T14870] loop1: detected capacity change from 0 to 16 [ 624.014501][T14870] erofs: (device loop1): mounted with root inode @ nid 36. [ 624.332787][T14874] bond2: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 624.353903][T14874] bond2: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 624.397179][T14874] bond2: entered allmulticast mode [ 624.422919][T14874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.534518][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.540842][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.923935][T14886] overlayfs: failed to clone upperpath [ 625.564565][T14897] bond3: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 625.634633][T14897] bond3: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 625.657554][T14897] bond3: entered allmulticast mode [ 625.683597][T14897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.209788][T14914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.218169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.075689][T14929] bond4: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 627.123287][T14929] bond4: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 627.169491][T14929] bond4: entered allmulticast mode [ 627.200263][T14929] 8021q: adding VLAN 0 to HW filter on device bond4 [ 627.668410][T14939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.698647][T14939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.743579][T14939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.793512][T14939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.802921][T14940] FAULT_INJECTION: forcing a failure. [ 627.802921][T14940] name failslab, interval 1, probability 0, space 0, times 0 [ 627.840099][T14939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.871099][T14943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.909910][T14943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.937100][T14943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.973782][T14940] CPU: 0 PID: 14940 Comm: syz.3.2955 Not tainted syzkaller #0 [ 627.981283][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 627.991341][T14940] Call Trace: [ 627.994627][T14940] [ 627.997586][T14940] dump_stack_lvl+0x18c/0x250 [ 628.002291][T14940] ? show_regs_print_info+0x20/0x20 [ 628.007492][T14940] ? load_image+0x420/0x420 [ 628.012008][T14940] ? __might_sleep+0xe0/0xe0 [ 628.016616][T14940] ? __lock_acquire+0x7eb0/0x7eb0 [ 628.021649][T14940] should_fail_ex+0x394/0x4c0 [ 628.026350][T14940] should_failslab+0x9/0x20 [ 628.030904][T14940] slab_pre_alloc_hook+0x59/0x300 [ 628.035942][T14940] kmem_cache_alloc+0x5a/0x2c0 [ 628.040716][T14940] ? dup_fd+0x56/0xa20 [ 628.044795][T14940] dup_fd+0x56/0xa20 [ 628.048723][T14940] ? __ia32_sys_get_robust_list+0x110/0x110 [ 628.054627][T14940] ? __lock_acquire+0x7eb0/0x7eb0 [ 628.059662][T14940] __close_range+0x19d/0x690 [ 628.064268][T14940] ? pick_file+0x1e0/0x1e0 [ 628.068711][T14940] __x64_sys_close_range+0x7a/0x90 [ 628.073827][T14940] do_syscall_64+0x55/0xb0 [ 628.078246][T14940] ? clear_bhb_loop+0x40/0x90 [ 628.082923][T14940] ? clear_bhb_loop+0x40/0x90 [ 628.087603][T14940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.093503][T14940] RIP: 0033:0x7fdab619e559 [ 628.097940][T14940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.117552][T14940] RSP: 002b:00007fdab70f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 628.125970][T14940] RAX: ffffffffffffffda RBX: 00007fdab6425fa0 RCX: 00007fdab619e559 [ 628.133942][T14940] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 628.141909][T14940] RBP: 00007fdab62358b0 R08: 0000000000000000 R09: 0000000000000000 [ 628.149881][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.157864][T14940] R13: 00007fdab6426038 R14: 00007fdab6425fa0 R15: 00007ffe3f4da608 [ 628.165859][T14940] [ 628.394343][T14949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2962'. [ 628.714689][T14954] bond5: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 628.754204][T14954] bond5: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 628.804801][T14954] bond5: entered allmulticast mode [ 628.824529][T14954] 8021q: adding VLAN 0 to HW filter on device bond5 [ 629.987911][T14980] bond6: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 630.044188][T14980] bond6: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 630.098174][T14980] bond6: entered allmulticast mode [ 630.128733][T14980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 630.614853][T14989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.658494][T14989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.537499][T15011] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 632.753356][T15011] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 633.065415][T15011] bond1: entered allmulticast mode [ 633.070928][T15011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 633.373902][T12583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 633.389263][T12583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 633.404623][T12583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 633.413320][T12583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 633.421391][T12583] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 633.428820][T12583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 633.678809][T15026] rxe_eth0 speed is unknown, defaulting to 1000 [ 634.071657][T10362] tipc: Resetting bearer [ 634.363012][T10362] syz_tun (unregistering): left allmulticast mode [ 634.393534][T10362] tipc: Disabling bearer [ 634.862653][T14630] syz.6.2826 (14630) used greatest stack depth: 18328 bytes left [ 634.959626][T15026] chnl_net:caif_netlink_parms(): no params data found [ 635.474970][T12583] Bluetooth: hci0: command tx timeout [ 635.654943][T15065] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 635.687955][T15065] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 635.729840][T15065] bond1: entered allmulticast mode [ 635.753131][T15065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.777371][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.820683][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.857356][T15026] bridge_slave_0: entered allmulticast mode [ 635.893859][T15026] bridge_slave_0: entered promiscuous mode [ 636.137681][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.184221][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.219963][T15026] bridge_slave_1: entered allmulticast mode [ 636.275208][T15026] bridge_slave_1: entered promiscuous mode [ 636.520091][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.573626][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.048060][T15026] team0: Port device team_slave_0 added [ 637.084856][T15026] team0: Port device team_slave_1 added [ 637.197013][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.204002][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.333886][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.386108][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.393072][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.514102][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.554858][T12583] Bluetooth: hci0: command tx timeout [ 637.842869][T15026] hsr_slave_0: entered promiscuous mode [ 637.872509][T15026] hsr_slave_1: entered promiscuous mode [ 638.129291][T10679] tipc: Left network mode [ 638.278607][T15100] bond2: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 638.345548][T15100] bond2: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 638.411139][T15100] bond2: entered allmulticast mode [ 638.440546][T15100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 638.828566][T15108] overlayfs: upper fs does not support file handles, falling back to index=off. [ 639.468592][T15118] overlayfs: missing 'lowerdir' [ 639.634776][T12583] Bluetooth: hci0: command tx timeout [ 641.351612][T15138] bond3: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 641.387495][T15138] bond3: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 641.421165][T15138] bond3: entered allmulticast mode [ 641.454494][T15138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 641.716162][ T5087] Bluetooth: hci0: command tx timeout [ 641.960203][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 642.585496][T15153] overlayfs: missing 'lowerdir' [ 643.913210][T15026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 644.593948][T15182] bond4: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 644.665379][T15182] bond4: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 644.743568][T15182] bond4: entered allmulticast mode [ 644.781050][T15182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 644.828978][T15026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 645.308146][T15026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 645.357326][T15026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 646.474783][ T9259] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 646.781415][ T9259] CPU: 0 PID: 9259 Comm: syz-executor Not tainted syzkaller #0 [ 646.789093][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 646.799164][ T9259] Call Trace: [ 646.802444][ T9259] [ 646.805379][ T9259] dump_stack_lvl+0x18c/0x250 [ 646.810088][ T9259] ? show_regs_print_info+0x20/0x20 [ 646.815295][ T9259] ? load_image+0x420/0x420 [ 646.819806][ T9259] ? ___ratelimit+0x478/0x610 [ 646.824492][ T9259] ? radix_tree_cpu_dead+0x160/0x160 [ 646.829786][ T9259] dump_header+0xd8/0x820 [ 646.834138][ T9259] oom_kill_process+0x390/0x580 [ 646.838999][ T9259] out_of_memory+0xe0e/0x1200 [ 646.843707][ T9259] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 646.849383][ T9259] ? mutex_lock_nested+0x20/0x20 [ 646.854343][ T9259] ? unregister_oom_notifier+0x20/0x20 [ 646.859845][ T9259] mem_cgroup_out_of_memory+0x2c2/0x390 [ 646.865416][ T9259] ? try_charge_memcg+0xc91/0x17c0 [ 646.870547][ T9259] ? drain_local_stock+0x630/0x630 [ 646.875672][ T9259] ? do_raw_spin_unlock+0x121/0x230 [ 646.880879][ T9259] try_charge_memcg+0xca1/0x17c0 [ 646.885821][ T9259] ? get_page_from_freelist+0x2181/0x22a0 [ 646.891544][ T9259] ? verify_lock_unused+0x140/0x140 [ 646.896749][ T9259] ? folio_flags+0x120/0x120 [ 646.901343][ T9259] ? __next_zones_zonelist+0x9d/0x130 [ 646.906755][ T9259] charge_memcg+0x11b/0x3b0 [ 646.911277][ T9259] ? __mem_cgroup_charge+0x80/0x80 [ 646.916396][ T9259] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 646.922563][ T9259] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 646.928679][ T9259] __read_swap_cache_async+0x3f4/0x9c0 [ 646.934173][ T9259] swap_cluster_readahead+0x536/0x670 [ 646.939571][ T9259] ? read_swap_cache_async+0x90/0x90 [ 646.944874][ T9259] ? xas_load+0x12b/0x140 [ 646.949234][ T9259] ? filemap_get_entry+0xce/0x3f0 [ 646.954277][ T9259] ? filemap_get_entry+0xce/0x3f0 [ 646.959315][ T9259] ? filemap_get_entry+0x375/0x3f0 [ 646.964442][ T9259] swapin_readahead+0x108/0xa60 [ 646.969306][ T9259] ? get_swap_device+0x96/0x3f0 [ 646.974203][ T9259] ? exit_swap_address_space+0x290/0x290 [ 646.979847][ T9259] ? __filemap_get_folio+0x939/0xbe0 [ 646.985150][ T9259] ? swap_cache_get_folio+0xad/0x590 [ 646.990897][ T9259] ? get_swap_device+0x26e/0x3f0 [ 646.995855][ T9259] do_swap_page+0x435/0x3f50 [ 647.000448][ T9259] ? print_unlock_imbalance_bug+0x160/0x160 [ 647.006362][ T9259] ? do_swap_page+0xcf/0x3f50 [ 647.011040][ T9259] ? pte_offset_map_nolock+0xb9/0x130 [ 647.016417][ T9259] ? handle_mm_fault+0xe6/0x4a50 [ 647.021357][ T9259] handle_mm_fault+0x10a6/0x4a50 [ 647.026300][ T9259] ? handle_mm_fault+0xe6/0x4a50 [ 647.031270][ T9259] ? lock_vma_under_rcu+0x52c/0x660 [ 647.036470][ T9259] ? numa_migrate_prep+0x350/0x350 [ 647.041579][ T9259] ? lock_vma_under_rcu+0xe5/0x660 [ 647.046719][ T9259] ? do_user_addr_fault+0x1cb/0x12d0 [ 647.052007][ T9259] do_user_addr_fault+0xad2/0x12d0 [ 647.057125][ T9259] ? rcu_is_watching+0x15/0xb0 [ 647.061907][ T9259] exc_page_fault+0x64/0x100 [ 647.066505][ T9259] ? clear_bhb_loop+0x40/0x90 [ 647.071233][ T9259] asm_exc_page_fault+0x26/0x30 [ 647.076208][ T9259] RIP: 0033:0x7fb21f95ed8e [ 647.080648][ T9259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 647.100257][ T9259] RSP: 002b:00007ffeadd92c68 EFLAGS: 00010246 [ 647.106353][ T9259] RAX: 0000000000000000 RBX: 000055557f82e500 RCX: 00007fb21f95ed8e [ 647.114331][ T9259] RDX: 00007ffeadd92cc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.122306][ T9259] RBP: 00007ffeadd92d2c R08: 0000000000000000 R09: 0000000000000000 [ 647.130286][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 647.138260][ T9259] R13: 00000000000927c0 R14: 000000000009d7ad R15: 00007ffeadd92d80 [ 647.146245][ T9259] [ 647.195687][T15026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.211143][T15026] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.241680][T15026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 647.252128][T15026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.953878][ T9259] memory: usage 307196kB, limit 307200kB, failcnt 29846 [ 648.003872][ T9259] memory+swap: usage 308200kB, limit 9007199254740988kB, failcnt 0 [ 648.056626][ T9259] kmem: usage 2320kB, limit 9007199254740988kB, failcnt 0 [ 648.085315][ T9259] Memory cgroup stats for /syz6: [ 648.085878][ T9259] cache 312188928 [ 648.194950][ T9259] rss 0 [ 648.197746][ T9259] rss_huge 0 [ 648.239108][ T9259] shmem 0 [ 648.242083][ T9259] mapped_file 0 [ 648.267674][ T9259] dirty 0 [ 648.270650][ T9259] writeback 0 [ 648.273947][ T9259] workingset_refault_anon 134 [ 648.315335][T10679] hsr_slave_0: left promiscuous mode [ 648.329315][ T9259] workingset_refault_file 1918 [ 648.364239][ T9259] swap 1028096 [ 648.367631][ T9259] pgpgin 422752 [ 648.408685][ T9259] pgpgout 346533 [ 648.412270][ T9259] pgfault 395851 [ 648.427369][ T9259] pgmajfault 78 [ 648.441631][ T9259] inactive_anon 0 [ 648.467927][ T9259] active_anon 0 [ 648.471412][ T9259] inactive_file 0 [ 648.506881][ T9259] active_file 0 [ 648.525064][ T9259] unevictable 312188928 [ 648.529252][ T9259] hierarchical_memory_limit 314572800 [ 648.561799][ T9259] hierarchical_memsw_limit 9223372036854771712 [ 648.584702][T10679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.610325][ T9259] total_cache 312188928 [ 648.624285][ T9259] total_rss 0 [ 648.627582][ T9259] total_rss_huge 0 [ 648.661787][ T9259] total_shmem 0 [ 648.669352][ T9259] total_mapped_file 0 [ 648.673357][ T9259] total_dirty 0 [ 648.685275][T10679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.713585][ T9259] total_writeback 0 [ 648.744173][ T9259] total_workingset_refault_anon 134 [ 648.749981][T10679] bridge_slave_1: left allmulticast mode [ 648.761741][ T9259] total_workingset_refault_file 1918 [ 648.767563][T10679] bridge_slave_1: left promiscuous mode [ 648.784160][ T9259] total_swap 1028096 [ 648.788295][T10679] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.799948][T15223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3033'. [ 648.809324][ T9259] total_pgpgin 422752 [ 648.824151][ T9259] total_pgpgout 346533 [ 648.838150][ T9259] total_pgfault 395851 [ 648.845430][T10679] bridge_slave_0: left allmulticast mode [ 648.851111][T10679] bridge_slave_0: left promiscuous mode [ 648.866597][ T9259] total_pgmajfault 78 [ 648.879051][ T9259] total_inactive_anon 0 [ 648.899757][ T9259] total_active_anon 0 [ 648.903922][T10679] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.921465][ T9259] total_inactive_file 0 [ 648.938897][ T9259] total_active_file 0 [ 648.942899][ T9259] total_unevictable 312188928 [ 648.971945][ T9259] anon_cost 0 [ 648.984364][ T9259] file_cost 0 [ 648.997585][ T9259] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3025,pid=15178,uid=0 [ 649.051034][ T9259] Memory cgroup out of memory: Killed process 15179 (syz.6.3025) total-vm:102520kB, anon-rss:1380kB, file-rss:23040kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 649.169324][T14404] syz.6.2753 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 649.215844][T14404] CPU: 0 PID: 14404 Comm: syz.6.2753 Not tainted syzkaller #0 [ 649.223364][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 649.233431][T14404] Call Trace: [ 649.236718][T14404] [ 649.239660][T14404] dump_stack_lvl+0x18c/0x250 [ 649.244355][T14404] ? show_regs_print_info+0x20/0x20 [ 649.249565][T14404] ? load_image+0x420/0x420 [ 649.254100][T14404] ? ___ratelimit+0x478/0x610 [ 649.258805][T14404] ? radix_tree_cpu_dead+0x160/0x160 [ 649.264106][T14404] dump_header+0xd8/0x820 [ 649.268453][T14404] oom_kill_process+0x390/0x580 [ 649.273325][T14404] out_of_memory+0xe0e/0x1200 [ 649.278021][T14404] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 649.283668][T14404] ? mutex_lock_nested+0x20/0x20 [ 649.288619][T14404] ? unregister_oom_notifier+0x20/0x20 [ 649.294188][T14404] mem_cgroup_out_of_memory+0x2c2/0x390 [ 649.299764][T14404] ? try_charge_memcg+0xc91/0x17c0 [ 649.304889][T14404] ? drain_local_stock+0x630/0x630 [ 649.310024][T14404] ? do_raw_spin_unlock+0x121/0x230 [ 649.315237][T14404] try_charge_memcg+0xca1/0x17c0 [ 649.320197][T14404] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 649.326031][T14404] ? folio_flags+0x120/0x120 [ 649.330661][T14404] ? shmem_alloc_folio+0x1f4/0x2a0 [ 649.335793][T14404] ? percpu_ref_tryget+0x15/0x180 [ 649.340833][T14404] ? get_mem_cgroup_from_mm+0x38/0x290 [ 649.346305][T14404] charge_memcg+0x11b/0x3b0 [ 649.350823][T14404] ? __mem_cgroup_charge+0x80/0x80 [ 649.355942][T14404] ? get_mem_cgroup_from_mm+0x38/0x290 [ 649.361408][T14404] ? get_mem_cgroup_from_mm+0x38/0x290 [ 649.366883][T14404] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 649.372455][T14404] __mem_cgroup_charge+0x25/0x80 [ 649.377400][T14404] shmem_add_to_page_cache+0x8d3/0x1b80 [ 649.382955][T14404] ? xas_load+0x12b/0x140 [ 649.387323][T14404] ? shmem_alloc_folio+0x2a0/0x2a0 [ 649.392453][T14404] shmem_get_folio_gfp+0x1037/0x2b40 [ 649.397760][T14404] shmem_fault+0x1b8/0x820 [ 649.402185][T14404] ? zero_pipe_buf_get+0x10/0x10 [ 649.407143][T14404] ? handle_mm_fault+0xe6/0x4a50 [ 649.412085][T14404] ? __lock_acquire+0x7eb0/0x7eb0 [ 649.417118][T14404] __do_fault+0x13b/0x4d0 [ 649.421473][T14404] ? handle_mm_fault+0x3929/0x4a50 [ 649.426587][T14404] ? handle_mm_fault+0xe6/0x4a50 [ 649.431528][T14404] handle_mm_fault+0x3945/0x4a50 [ 649.436483][T14404] ? handle_mm_fault+0xe6/0x4a50 [ 649.441447][T14404] ? numa_migrate_prep+0x350/0x350 [ 649.446576][T14404] ? follow_page_pte+0x6d0/0x1ae0 [ 649.451612][T14404] ? pmd_lock+0x60/0x60 [ 649.455791][T14404] __get_user_pages+0x604/0x1580 [ 649.460759][T14404] ? generic_file_write_iter+0x1dd/0x2e0 [ 649.466396][T14404] ? populate_vma_page_range+0x380/0x380 [ 649.472037][T14404] ? get_dump_page+0xb6/0x200 [ 649.476719][T14404] ? down_read_killable+0x1d0/0x340 [ 649.481924][T14404] get_dump_page+0x10c/0x200 [ 649.486542][T14404] ? fault_in_readable+0x150/0x150 [ 649.491677][T14404] ? __asan_memset+0x22/0x40 [ 649.496272][T14404] ? iov_iter_bvec+0xd4/0x1b0 [ 649.500972][T14404] dump_user_range+0x127/0x840 [ 649.505750][T14404] ? dump_skip+0x40/0x40 [ 649.509998][T14404] ? dump_emit+0x78/0xe0 [ 649.514259][T14404] ? dump_emit+0xa6/0xe0 [ 649.518502][T14404] ? elf_core_dump+0x2dbb/0x37c0 [ 649.523455][T14404] elf_core_dump+0x320e/0x37c0 [ 649.528257][T14404] ? load_elf_binary+0x2850/0x2850 [ 649.533396][T14404] ? verify_lock_unused+0x140/0x140 [ 649.538593][T14404] ? __lock_acquire+0x7eb0/0x7eb0 [ 649.543636][T14404] ? mas_next_slot+0x94c/0x980 [ 649.548451][T14404] ? rcu_read_lock_any_held+0xb4/0x140 [ 649.553913][T14404] ? 0xffffffffff600000 [ 649.558090][T14404] do_coredump+0x1791/0x24a0 [ 649.562702][T14404] ? nfs_stat_to_errno+0x170/0x170 [ 649.567845][T14404] ? lock_chain_count+0x20/0x20 [ 649.572707][T14404] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.577914][T14404] ? lockdep_hardirqs_on+0x98/0x150 [ 649.583118][T14404] get_signal+0x10da/0x1390 [ 649.587640][T14404] arch_do_signal_or_restart+0xc2/0x7b0 [ 649.593227][T14404] ? get_sigframe_size+0x20/0x20 [ 649.598182][T14404] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 649.604172][T14404] ? exit_to_user_mode_loop+0x3b/0x110 [ 649.609644][T14404] exit_to_user_mode_loop+0x70/0x110 [ 649.614968][T14404] exit_to_user_mode_prepare+0xee/0x180 [ 649.620573][T14404] irqentry_exit_to_user_mode+0x9/0x30 [ 649.626047][T14404] exc_page_fault+0x8c/0x100 [ 649.630641][T14404] asm_exc_page_fault+0x26/0x30 [ 649.635498][T14404] RIP: 0033:0x7fb21f853cb7 [ 649.639911][T14404] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 62 12 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 649.659523][T14404] RSP: 002b:00007fb2208ff120 EFLAGS: 00010202 [ 649.665628][T14404] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb21f99e559 [ 649.673604][T14404] RDX: 00007fb2208ff140 RSI: 00007fb2208ff270 RDI: 000000000000000b [ 649.681676][T14404] RBP: 00007fb21fa358b0 R08: 0000000000000000 R09: 0000000000000000 [ 649.689647][T14404] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 649.697646][T14404] R13: 00007fb21fc26038 R14: 00007fb21fc25fa0 R15: 00007ffeadd92988 [ 649.705634][T14404] [ 650.427797][T14404] memory: usage 307200kB, limit 307200kB, failcnt 30076 [ 650.457537][T14404] memory+swap: usage 308056kB, limit 9007199254740988kB, failcnt 0 [ 650.501710][T14404] kmem: usage 2320kB, limit 9007199254740988kB, failcnt 0 [ 650.536372][T14404] Memory cgroup stats for /syz6: [ 650.536648][T14404] cache 312193024 [ 650.572684][T14404] rss 0 [ 650.579693][T14404] rss_huge 0 [ 650.595763][T14404] shmem 0 [ 650.600931][T14404] mapped_file 0 [ 650.624378][T14404] dirty 0 [ 650.627352][T14404] writeback 0 [ 650.651707][T14404] workingset_refault_anon 199 [ 650.662784][T14404] workingset_refault_file 1918 [ 650.685110][T10679] bond6 (unregistering): Released all slaves [ 650.704443][T14404] swap 876544 [ 650.707761][T14404] pgpgin 422832 [ 650.711220][T14404] pgpgout 346612 [ 650.749666][T14404] pgfault 395968 [ 650.753239][T14404] pgmajfault 132 [ 650.772115][T14404] inactive_anon 0 [ 650.781274][T14404] active_anon 0 [ 650.823504][T14404] inactive_file 0 [ 650.827275][T14404] active_file 0 [ 650.830744][T14404] unevictable 312193024 [ 650.894587][T14404] hierarchical_memory_limit 314572800 [ 650.900002][T14404] hierarchical_memsw_limit 9223372036854771712 [ 650.964394][T14404] total_cache 312193024 [ 650.983543][T14404] total_rss 0 [ 650.994299][T14404] total_rss_huge 0 [ 650.998034][T14404] total_shmem 0 [ 651.019080][T14404] total_mapped_file 0 [ 651.023078][T14404] total_dirty 0 [ 651.050704][T14404] total_writeback 0 [ 651.065596][T14404] total_workingset_refault_anon 199 [ 651.071869][T14404] total_workingset_refault_file 1918 [ 651.098580][T14404] total_swap 876544 [ 651.102410][T14404] total_pgpgin 422832 [ 651.142353][T14404] total_pgpgout 346612 [ 651.157610][T14404] total_pgfault 395968 [ 651.161734][T14404] total_pgmajfault 132 [ 651.171127][T14404] total_inactive_anon 0 [ 651.187312][T14404] total_active_anon 0 [ 651.201525][T14404] total_inactive_file 0 [ 651.215992][T14404] total_active_file 0 [ 651.219991][T14404] total_unevictable 312193024 [ 651.246123][T14404] anon_cost 0 [ 651.249428][T14404] file_cost 0 [ 651.252712][T14404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor,pid=9259,uid=0 [ 651.335252][T14404] Memory cgroup out of memory: Killed process 9259 (syz-executor) total-vm:98284kB, anon-rss:1344kB, file-rss:21844kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:0 [ 651.991559][T10679] bond5 (unregistering): Released all slaves [ 653.416814][T10679] bond4 (unregistering): Released all slaves [ 653.438529][T15246] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3042'. [ 653.776144][T14459] syz.6.2776 (14459) used greatest stack depth: 17784 bytes left [ 654.239817][T10679] bond3 (unregistering): Released all slaves [ 654.929163][T10679] bond2 (unregistering): Released all slaves [ 655.768257][T10679] bond1 (unregistering): Released all slaves [ 656.167198][T10679] pim6reg (unregistering): left allmulticast mode [ 658.360301][T10679] team0 (unregistering): Port device team_slave_1 removed [ 658.502467][T10679] team0 (unregistering): Port device team_slave_0 removed [ 658.794965][T10679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.002434][T10679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.947483][T10679] bond0 (unregistering): Released all slaves [ 661.287244][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.294431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.335171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.342298][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.470810][T15228] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 661.764558][T14404] tipc: Resetting bearer [ 662.186724][T14404] tipc: Disabling bearer [ 663.412570][T15026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.552110][T15026] veth0_vlan: entered promiscuous mode [ 664.631354][T15026] veth1_vlan: entered promiscuous mode [ 664.793612][T15026] veth0_macvtap: entered promiscuous mode [ 664.859027][T15026] veth1_macvtap: entered promiscuous mode [ 664.985852][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.018338][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.079034][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.128338][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.184222][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.234585][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.275329][T15026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.560804][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.604258][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.657348][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.709457][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.758519][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.817081][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.882833][T15026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.927046][T15026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.976893][T15026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.016636][T15026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.074140][T15026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.595821][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.634537][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.714730][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 666.728507][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 666.738470][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 666.747074][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 666.756451][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 666.763767][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 666.898829][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.910922][T15324] rxe_eth0 speed is unknown, defaulting to 1000 [ 666.944194][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.256248][T10679] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.288090][T15329] device-mapper: ioctl: name not supplied when creating device [ 667.611507][T10679] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.843158][T15339] netlink: 1288 bytes leftover after parsing attributes in process `syz.4.3059'. [ 668.041635][T10679] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.380512][T10679] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.552748][T15347] loop4: detected capacity change from 0 to 16 [ 668.634968][T15347] erofs: (device loop4): mounted with root inode @ nid 36. [ 668.840354][T15326] Bluetooth: hci1: command tx timeout [ 668.907382][T15324] chnl_net:caif_netlink_parms(): no params data found [ 669.151954][T15351] loop1: detected capacity change from 0 to 164 [ 669.393550][T15324] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.531638][T15324] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.550167][T15351] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 669.594927][T15363] device-mapper: ioctl: name not supplied when creating device [ 669.603774][T15324] bridge_slave_0: entered allmulticast mode [ 669.641481][T15360] overlayfs: missing 'lowerdir' [ 669.647309][T15324] bridge_slave_0: entered promiscuous mode [ 669.685835][T10679] tipc: Left network mode [ 669.702365][T15324] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.746475][T15324] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.779833][T15324] bridge_slave_1: entered allmulticast mode [ 669.816689][T15324] bridge_slave_1: entered promiscuous mode [ 669.914016][T15351] futex_wake_op: syz.1.3063 tries to shift op by 144; fix this program [ 669.936140][T15324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.070734][T15351] futex_wake_op: syz.1.3063 tries to shift op by 144; fix this program [ 670.503720][T15324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.693314][T15324] team0: Port device team_slave_0 added [ 670.776646][T15324] team0: Port device team_slave_1 added [ 670.846261][T15381] loop4: detected capacity change from 0 to 164 [ 670.917232][T15326] Bluetooth: hci1: command tx timeout [ 670.959752][T15324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.004303][T15324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.142497][T15324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.567229][T15324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.596808][T15324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.716585][T15324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.804023][T15388] rxe_eth0 speed is unknown, defaulting to 1000 [ 672.433896][T15324] hsr_slave_0: entered promiscuous mode [ 672.535427][T15324] hsr_slave_1: entered promiscuous mode [ 672.630210][T15324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.654141][T15324] Cannot create hsr debugfs directory [ 672.997579][T15326] Bluetooth: hci1: command tx timeout [ 673.568451][T15411] overlay: Unknown parameter '/' [ 675.087312][T15326] Bluetooth: hci1: command tx timeout [ 675.383474][T15419] rxe_eth0 speed is unknown, defaulting to 1000 [ 676.364152][T15324] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 676.609392][T15324] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 677.064111][T15324] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 677.203055][T15324] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 677.601981][T15451] syz.1.3080 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 677.769781][T15451] CPU: 0 PID: 15451 Comm: syz.1.3080 Not tainted syzkaller #0 [ 677.777288][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 677.787356][T15451] Call Trace: [ 677.790637][T15451] [ 677.793574][T15451] dump_stack_lvl+0x18c/0x250 [ 677.798269][T15451] ? show_regs_print_info+0x20/0x20 [ 677.803476][T15451] ? load_image+0x420/0x420 [ 677.807992][T15451] ? ___ratelimit+0x478/0x610 [ 677.812688][T15451] ? radix_tree_cpu_dead+0x160/0x160 [ 677.817987][T15451] dump_header+0xd8/0x820 [ 677.822338][T15451] oom_kill_process+0x390/0x580 [ 677.827211][T15451] out_of_memory+0xe0e/0x1200 [ 677.831909][T15451] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 677.837659][T15451] ? mutex_lock_nested+0x20/0x20 [ 677.842611][T15451] ? unregister_oom_notifier+0x20/0x20 [ 677.848097][T15451] mem_cgroup_out_of_memory+0x2c2/0x390 [ 677.853659][T15451] ? try_charge_memcg+0xc91/0x17c0 [ 677.858782][T15451] ? drain_local_stock+0x630/0x630 [ 677.863916][T15451] ? do_raw_spin_unlock+0x121/0x230 [ 677.869130][T15451] try_charge_memcg+0xca1/0x17c0 [ 677.874102][T15451] ? folio_flags+0x120/0x120 [ 677.878722][T15451] ? percpu_ref_tryget+0x15/0x180 [ 677.883762][T15451] ? get_mem_cgroup_from_mm+0x38/0x290 [ 677.889256][T15451] charge_memcg+0x11b/0x3b0 [ 677.893773][T15451] ? __mem_cgroup_charge+0x80/0x80 [ 677.898895][T15451] ? get_mem_cgroup_from_mm+0x38/0x290 [ 677.904400][T15451] ? get_mem_cgroup_from_mm+0x38/0x290 [ 677.909873][T15451] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 677.915432][T15451] __mem_cgroup_charge+0x25/0x80 [ 677.920387][T15451] handle_mm_fault+0x1b00/0x4a50 [ 677.925424][T15451] ? handle_mm_fault+0xe6/0x4a50 [ 677.930380][T15451] ? numa_migrate_prep+0x350/0x350 [ 677.935513][T15451] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 677.940809][T15451] do_user_addr_fault+0x736/0x12d0 [ 677.945945][T15451] exc_page_fault+0x64/0x100 [ 677.950561][T15451] asm_exc_page_fault+0x26/0x30 [ 677.955416][T15451] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 677.961242][T15451] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 677.980867][T15451] RSP: 0018:ffffc90003657df0 EFLAGS: 00050246 [ 677.986966][T15451] RAX: 0000000500000004 RBX: 0000000000000008 RCX: 0000000000000008 [ 677.994955][T15451] RDX: 0000000000000000 RSI: ffffc90003657e60 RDI: 0000200000002200 [ 678.002931][T15451] RBP: ffffc90003657f00 R08: ffffc90003657e67 R09: 1ffff920006cafcc [ 678.010911][T15451] R10: dffffc0000000000 R11: fffff520006cafcd R12: 0000200000002208 [ 678.018897][T15451] R13: 1ffff920006cafc8 R14: 0000200000002200 R15: ffffc90003657e60 [ 678.026912][T15451] _copy_to_user+0x85/0xa0 [ 678.031350][T15451] do_pipe2+0xd5/0x190 [ 678.035436][T15451] ? _compound_head+0x120/0x120 [ 678.040322][T15451] ? lock_chain_count+0x20/0x20 [ 678.045189][T15451] ? syscall_enter_from_user_mode+0x25/0x80 [ 678.051125][T15451] __x64_sys_pipe+0x3a/0x40 [ 678.055657][T15451] do_syscall_64+0x55/0xb0 [ 678.060100][T15451] ? clear_bhb_loop+0x40/0x90 [ 678.064787][T15451] ? clear_bhb_loop+0x40/0x90 [ 678.069476][T15451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.075386][T15451] RIP: 0033:0x7f4d1bf9e559 [ 678.079810][T15451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.099425][T15451] RSP: 002b:00007f4d1cebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 678.107851][T15451] RAX: ffffffffffffffda RBX: 00007f4d1c225fa0 RCX: 00007f4d1bf9e559 [ 678.115831][T15451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002200 [ 678.123805][T15451] RBP: 00007f4d1c0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 678.131774][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.139763][T15451] R13: 00007f4d1c226038 R14: 00007f4d1c225fa0 R15: 00007ffd59b773b8 [ 678.147751][T15451] [ 678.342454][T15451] memory: usage 307200kB, limit 307200kB, failcnt 20160 [ 678.360135][T15451] memory+swap: usage 428032kB, limit 9007199254740988kB, failcnt 0 [ 678.380127][T15451] kmem: usage 2980kB, limit 9007199254740988kB, failcnt 0 [ 678.440274][T15451] Memory cgroup stats for /syz1: [ 678.440722][T15451] cache 310403072 [ 678.478788][T15451] rss 1114112 [ 678.482147][T15451] rss_huge 0 [ 678.509277][T15451] shmem 310255616 [ 678.528151][T10679] hsr_slave_0: left promiscuous mode [ 678.549743][T15451] mapped_file 217128960 [ 678.553933][T15451] dirty 147456 [ 678.557799][T10679] hsr_slave_1: left promiscuous mode [ 678.575159][T10679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.582582][T10679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.604166][T15451] writeback 0 [ 678.607479][T15451] workingset_refault_anon 39 [ 678.612069][T15451] workingset_refault_file 16 [ 678.652740][T10679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.662561][T15451] swap 123731968 [ 678.672818][T15451] pgpgin 517987 [ 678.676678][T10679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.694858][T15451] pgpgout 442443 [ 678.698504][T15451] pgfault 504836 [ 678.702058][T15451] pgmajfault 280 [ 678.707709][T10679] bridge_slave_1: left allmulticast mode [ 678.713394][T10679] bridge_slave_1: left promiscuous mode [ 678.744219][T15451] inactive_anon 279576576 [ 678.748601][T15451] active_anon 31793152 [ 678.752691][T15451] inactive_file 147456 [ 678.774824][T10679] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.788197][T15451] active_file 4096 [ 678.791943][T15451] unevictable 0 [ 678.798313][T15451] hierarchical_memory_limit 314572800 [ 678.803707][T15451] hierarchical_memsw_limit 9223372036854771712 [ 678.847811][T15451] total_cache 310403072 [ 678.851991][T15451] total_rss 1114112 [ 678.861838][T15451] total_rss_huge 0 [ 678.874365][T15451] total_shmem 310255616 [ 678.878530][T15451] total_mapped_file 217128960 [ 678.883201][T15451] total_dirty 147456 [ 678.894771][T10679] bridge_slave_0: left allmulticast mode [ 678.900426][T10679] bridge_slave_0: left promiscuous mode [ 678.911667][T15451] total_writeback 0 [ 678.919245][T10679] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.934550][T15451] total_workingset_refault_anon 39 [ 678.939700][T15451] total_workingset_refault_file 16 [ 678.967788][T15451] total_swap 123731968 [ 678.971892][T15451] total_pgpgin 517987 [ 678.998620][T10679] vlan0: left allmulticast mode [ 679.003515][T10679] veth0_vlan: left allmulticast mode [ 679.009300][T15451] total_pgpgout 442443 [ 679.013434][T15451] total_pgfault 504836 [ 679.023795][T15451] total_pgmajfault 280 [ 679.028072][T15451] total_inactive_anon 279576576 [ 679.032926][T15451] total_active_anon 31793152 [ 679.042535][T10679] veth1_macvtap: left promiscuous mode [ 679.057637][T10679] veth0_macvtap: left promiscuous mode [ 679.063252][T10679] veth1_vlan: left promiscuous mode [ 679.069209][T15451] total_inactive_file 147456 [ 679.073820][T15451] total_active_file 4096 [ 679.102238][T10679] veth0_vlan: left promiscuous mode [ 679.108569][T15451] total_unevictable 0 [ 679.112568][T15451] anon_cost 0 [ 679.120662][T15451] file_cost 0 [ 679.123992][T15451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3020,pid=15147,uid=0 [ 679.180265][T15451] Memory cgroup out of memory: Killed process 15147 (syz.1.3020) total-vm:200564kB, anon-rss:1544kB, file-rss:20608kB, shmem-rss:92288kB, UID:0 pgtables:300kB oom_score_adj:1000 [ 680.395553][T10679] bond1 (unregistering): Released all slaves [ 680.762372][T14262] syz-executor invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 680.836510][T14783] syz.3.2889 (14783) used greatest stack depth: 17544 bytes left [ 680.907213][T14262] CPU: 0 PID: 14262 Comm: syz-executor Not tainted syzkaller #0 [ 680.914890][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 680.924946][T14262] Call Trace: [ 680.928226][T14262] [ 680.931162][T14262] dump_stack_lvl+0x18c/0x250 [ 680.935853][T14262] ? show_regs_print_info+0x20/0x20 [ 680.941062][T14262] ? load_image+0x420/0x420 [ 680.945575][T14262] ? ___ratelimit+0x478/0x610 [ 680.950262][T14262] ? radix_tree_cpu_dead+0x160/0x160 [ 680.955557][T14262] dump_header+0xd8/0x820 [ 680.959901][T14262] oom_kill_process+0x390/0x580 [ 680.964783][T14262] out_of_memory+0xe0e/0x1200 [ 680.969488][T14262] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 680.975222][T14262] ? print_unlock_imbalance_bug+0x160/0x160 [ 680.981126][T14262] ? mutex_lock_nested+0x20/0x20 [ 680.986076][T14262] ? unregister_oom_notifier+0x20/0x20 [ 680.991567][T14262] mem_cgroup_out_of_memory+0x2c2/0x390 [ 680.997126][T14262] ? try_charge_memcg+0xc91/0x17c0 [ 681.002244][T14262] ? drain_local_stock+0x630/0x630 [ 681.007382][T14262] ? do_raw_spin_unlock+0x121/0x230 [ 681.012603][T14262] try_charge_memcg+0xca1/0x17c0 [ 681.017559][T14262] ? folio_flags+0x120/0x120 [ 681.022176][T14262] ? percpu_ref_tryget+0x15/0x180 [ 681.027222][T14262] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 681.032973][T14262] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 681.038984][T14262] ? percpu_ref_tryget+0x15/0x180 [ 681.044018][T14262] ? percpu_ref_tryget+0x15/0x180 [ 681.049057][T14262] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 681.054786][T14262] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 681.060536][T14262] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 681.066368][T14262] obj_cgroup_charge+0x36e/0x630 [ 681.071312][T14262] ? get_obj_cgroup_from_current+0xd4/0x280 [ 681.077213][T14262] ? obj_cgroup_charge+0xed/0x630 [ 681.082334][T14262] ? mod_objcg_mlstate+0x320/0x320 [ 681.087488][T14262] ? percpu_ref_tryget+0x15/0x180 [ 681.092528][T14262] ? get_obj_cgroup_from_current+0xd4/0x280 [ 681.098427][T14262] ? get_obj_cgroup_from_current+0xd4/0x280 [ 681.104333][T14262] slab_pre_alloc_hook+0x2e2/0x300 [ 681.109450][T14262] ? mark_lock+0x94/0x320 [ 681.113790][T14262] kmem_cache_alloc+0x5a/0x2c0 [ 681.118566][T14262] ? alloc_empty_file+0x9e/0x1d0 [ 681.123599][T14262] alloc_empty_file+0x9e/0x1d0 [ 681.128367][T14262] path_openat+0x120/0x3270 [ 681.132888][T14262] ? kasan_set_track+0x5f/0x70 [ 681.137661][T14262] ? verify_lock_unused+0x140/0x140 [ 681.143034][T14262] ? do_sys_openat2+0xda/0x1d0 [ 681.147824][T14262] ? __x64_sys_openat+0x139/0x160 [ 681.152857][T14262] ? do_syscall_64+0x55/0xb0 [ 681.157548][T14262] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.163671][T14262] ? verify_lock_unused+0x140/0x140 [ 681.168893][T14262] ? do_filp_open+0x430/0x430 [ 681.173583][T14262] do_filp_open+0x1f2/0x430 [ 681.178096][T14262] ? vfs_tmpfile+0x620/0x620 [ 681.182703][T14262] ? _raw_spin_unlock+0x28/0x40 [ 681.187561][T14262] ? alloc_fd+0x590/0x640 [ 681.191909][T14262] do_sys_openat2+0x134/0x1d0 [ 681.196596][T14262] ? do_sys_open+0xe0/0xe0 [ 681.201140][T14262] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 681.207148][T14262] ? lock_chain_count+0x20/0x20 [ 681.212067][T14262] __x64_sys_openat+0x139/0x160 [ 681.216952][T14262] do_syscall_64+0x55/0xb0 [ 681.221386][T14262] ? clear_bhb_loop+0x40/0x90 [ 681.226072][T14262] ? clear_bhb_loop+0x40/0x90 [ 681.230751][T14262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.236672][T14262] RIP: 0033:0x7f4d1bf9d87c [ 681.241087][T14262] Code: 4c 89 54 24 18 41 89 f2 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 44 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 681.260698][T14262] RSP: 002b:00007ffd59b776b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 681.269129][T14262] RAX: ffffffffffffffda RBX: 000000000000012e RCX: 00007f4d1bf9d87c [ 681.277112][T14262] RDX: 0000000000090800 RSI: 00007f4d1c0351e5 RDI: 00000000ffffff9c [ 681.285083][T14262] RBP: 00007ffd59b7775c R08: 0000000000000000 R09: 0000000000000000 [ 681.293095][T14262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000077 [ 681.301074][T14262] R13: 0000000000000000 R14: 00000000000a55f5 R15: 00007ffd59b777b0 [ 681.309071][T14262] [ 682.510776][T10679] team0 (unregistering): Port device team_slave_1 removed [ 682.679633][T10679] team0 (unregistering): Port device team_slave_0 removed [ 682.848586][T10679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.007392][T10679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.974256][T14262] memory: usage 290360kB, limit 307200kB, failcnt 20893 [ 683.981248][T14262] memory+swap: usage 411192kB, limit 9007199254740988kB, failcnt 0 [ 684.100828][T14262] kmem: usage 2424kB, limit 9007199254740988kB, failcnt 0 [ 684.172787][T14262] Memory cgroup stats for /syz1: [ 684.173104][T14262] cache 297582592 [ 684.234262][T14262] rss 671744 [ 684.237512][T14262] rss_huge 0 [ 684.240704][T14262] shmem 297435136 [ 684.269564][T10679] bond0 (unregistering): Released all slaves [ 684.350167][T14262] mapped_file 163430400 [ 684.373130][T14262] dirty 0 [ 684.397491][T14262] writeback 0 [ 684.400805][T14262] workingset_refault_anon 39 [ 684.450876][T14262] workingset_refault_file 16 [ 684.475982][T14262] swap 121298944 [ 684.479658][T14262] pgpgin 537950 [ 684.483118][T14262] pgpgout 465644 [ 684.532770][T15324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.721610][T14262] pgfault 514821 [ 684.733204][T14262] pgmajfault 280 [ 684.754436][T14262] inactive_anon 30388224 [ 684.759677][T14262] active_anon 267698176 [ 684.763832][T14262] inactive_file 151552 [ 684.828240][T15324] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.912776][T14262] active_file 0 [ 684.976996][T14262] unevictable 0 [ 684.980522][T14262] hierarchical_memory_limit 314572800 [ 685.067039][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.074222][ T4503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.137819][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.145082][ T4503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.154123][T14262] hierarchical_memsw_limit 9223372036854771712 [ 685.160292][T14262] total_cache 297582592 [ 685.324839][T14262] total_rss 671744 [ 685.328592][T14262] total_rss_huge 0 [ 685.332395][T14262] total_shmem 297435136 [ 685.644633][T14262] total_mapped_file 163430400 [ 685.649370][T14262] total_dirty 0 [ 685.652866][T14262] total_writeback 0 [ 685.959885][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.974182][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.992814][T14262] total_workingset_refault_anon 39 [ 686.063025][T14262] total_workingset_refault_file 16 [ 686.102873][T15479] loop4: detected capacity change from 0 to 128 [ 686.184195][T14262] total_swap 121298944 [ 686.188298][T14262] total_pgpgin 537950 [ 686.193216][T14262] total_pgpgout 465644 [ 686.362971][T15324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.524251][T14262] total_pgfault 514821 [ 686.528371][T14262] total_pgmajfault 280 [ 686.532438][T14262] total_inactive_anon 30388224 [ 686.856404][T14262] total_active_anon 267698176 [ 686.861122][T14262] total_inactive_file 151552 [ 687.044103][T14262] total_active_file 0 [ 687.048145][T14262] total_unevictable 0 [ 687.052128][T14262] anon_cost 0 [ 687.240504][T14262] file_cost 0 [ 687.343858][T14262] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3028,pid=15191,uid=0 [ 687.473441][T15324] veth0_vlan: entered promiscuous mode [ 687.513812][T15324] veth1_vlan: entered promiscuous mode [ 687.665756][T14262] Memory cgroup out of memory: Killed process 15191 (syz.1.3028) total-vm:200564kB, anon-rss:1544kB, file-rss:20608kB, shmem-rss:100864kB, UID:0 pgtables:316kB oom_score_adj:1000 [ 687.699448][T15510] FAULT_INJECTION: forcing a failure. [ 687.699448][T15510] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 687.716459][T15324] veth0_macvtap: entered promiscuous mode [ 687.749275][T15324] veth1_macvtap: entered promiscuous mode [ 687.772919][T15510] CPU: 0 PID: 15510 Comm: syz.4.3088 Not tainted syzkaller #0 [ 687.780416][T15510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 687.790481][T15510] Call Trace: [ 687.793768][T15510] [ 687.796706][T15510] dump_stack_lvl+0x18c/0x250 [ 687.801564][T15510] ? show_regs_print_info+0x20/0x20 [ 687.806772][T15510] ? load_image+0x420/0x420 [ 687.811288][T15510] ? __might_fault+0xaa/0x120 [ 687.815980][T15510] ? __lock_acquire+0x7eb0/0x7eb0 [ 687.821019][T15510] should_fail_ex+0x394/0x4c0 [ 687.825822][T15510] _copy_from_user+0x2f/0xe0 [ 687.830428][T15510] ___sys_sendmsg+0x1c7/0x360 [ 687.835127][T15510] ? __sys_sendmsg+0x2b0/0x2b0 [ 687.839938][T15510] __se_sys_sendmsg+0x1d0/0x2c0 [ 687.844804][T15510] ? __x64_sys_sendmsg+0x80/0x80 [ 687.849765][T15510] ? lockdep_hardirqs_on+0x98/0x150 [ 687.854975][T15510] do_syscall_64+0x55/0xb0 [ 687.859399][T15510] ? clear_bhb_loop+0x40/0x90 [ 687.864080][T15510] ? clear_bhb_loop+0x40/0x90 [ 687.868777][T15510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.874691][T15510] RIP: 0033:0x7f76c839e559 [ 687.879114][T15510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.898741][T15510] RSP: 002b:00007f76c9244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.907160][T15510] RAX: ffffffffffffffda RBX: 00007f76c8625fa0 RCX: 00007f76c839e559 [ 687.915149][T15510] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000004 [ 687.923139][T15510] RBP: 00007f76c84358b0 R08: 0000000000000000 R09: 0000000000000000 [ 687.931130][T15510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.939116][T15510] R13: 00007f76c8626038 R14: 00007f76c8625fa0 R15: 00007ffdc4db3818 [ 687.947105][T15510] [ 687.982390][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.038524][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.058562][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.125087][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.160855][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.199983][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.246147][T15324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.311566][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.379996][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.454120][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.494424][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.567677][T15324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.610924][T15324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.662550][T15324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.735566][T15324] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.787145][T15324] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.834263][T15324] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.843107][T15324] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.848941][T10679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.890399][T10679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.066782][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.110413][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.208549][ T30] oom_reaper: reaped process 15191 (syz.1.3028), now anon-rss:20kB, file-rss:20480kB, shmem-rss:1188kB [ 692.199500][T15602] FAULT_INJECTION: forcing a failure. [ 692.199500][T15602] name failslab, interval 1, probability 0, space 0, times 0 [ 692.287317][T15602] CPU: 0 PID: 15602 Comm: syz.4.3111 Not tainted syzkaller #0 [ 692.294925][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 692.304985][T15602] Call Trace: [ 692.308271][T15602] [ 692.311205][T15602] dump_stack_lvl+0x18c/0x250 [ 692.315885][T15602] ? show_regs_print_info+0x20/0x20 [ 692.321086][T15602] ? load_image+0x420/0x420 [ 692.325597][T15602] ? __might_sleep+0xe0/0xe0 [ 692.330202][T15602] ? __lock_acquire+0x7eb0/0x7eb0 [ 692.335251][T15602] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 692.341238][T15602] should_fail_ex+0x394/0x4c0 [ 692.345943][T15602] should_failslab+0x9/0x20 [ 692.350459][T15602] slab_pre_alloc_hook+0x59/0x300 [ 692.355505][T15602] ? ktime_get_coarse_real_ts64+0x2f/0x120 [ 692.361327][T15602] kmem_cache_alloc_lru+0x4d/0x2b0 [ 692.366451][T15602] ? __d_alloc+0x31/0x710 [ 692.370887][T15602] __d_alloc+0x31/0x710 [ 692.375083][T15602] d_alloc_pseudo+0x1d/0x70 [ 692.379602][T15602] alloc_file_pseudo+0xe4/0x210 [ 692.384477][T15602] ? fput+0x1a0/0x1a0 [ 692.388476][T15602] ? inode_update_timestamps+0x600/0x600 [ 692.394120][T15602] ? debug_mutex_init+0x38/0x70 [ 692.398975][T15602] ? create_pipe_files+0x2c7/0x700 [ 692.404116][T15602] create_pipe_files+0x3ac/0x700 [ 692.409079][T15602] __do_pipe_flags+0x4c/0x2c0 [ 692.413773][T15602] do_pipe2+0xab/0x190 [ 692.417859][T15602] ? _compound_head+0x120/0x120 [ 692.422741][T15602] ? lock_chain_count+0x20/0x20 [ 692.427600][T15602] ? syscall_enter_from_user_mode+0x25/0x80 [ 692.433509][T15602] __x64_sys_pipe2+0x5a/0x70 [ 692.438107][T15602] do_syscall_64+0x55/0xb0 [ 692.442522][T15602] ? clear_bhb_loop+0x40/0x90 [ 692.447204][T15602] ? clear_bhb_loop+0x40/0x90 [ 692.452000][T15602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.457963][T15602] RIP: 0033:0x7f76c839e559 [ 692.462411][T15602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.482021][T15602] RSP: 002b:00007f76c9244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 692.490440][T15602] RAX: ffffffffffffffda RBX: 00007f76c8625fa0 RCX: 00007f76c839e559 [ 692.498415][T15602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.506390][T15602] RBP: 00007f76c84358b0 R08: 0000000000000000 R09: 0000000000000000 [ 692.514372][T15602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.522345][T15602] R13: 00007f76c8626038 R14: 00007f76c8625fa0 R15: 00007ffdc4db3818 [ 692.530341][T15602] [ 694.520659][T15147] syz.1.3020 (15147) used greatest stack depth: 17288 bytes left [ 695.016323][T15650] FAULT_INJECTION: forcing a failure. [ 695.016323][T15650] name failslab, interval 1, probability 0, space 0, times 0 [ 695.079895][T15650] CPU: 0 PID: 15650 Comm: syz.7.3120 Not tainted syzkaller #0 [ 695.087384][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 695.097441][T15650] Call Trace: [ 695.100722][T15650] [ 695.103676][T15650] dump_stack_lvl+0x18c/0x250 [ 695.108369][T15650] ? show_regs_print_info+0x20/0x20 [ 695.113571][T15650] ? load_image+0x420/0x420 [ 695.118100][T15650] ? __might_sleep+0xe0/0xe0 [ 695.122696][T15650] ? __lock_acquire+0x7eb0/0x7eb0 [ 695.127752][T15650] should_fail_ex+0x394/0x4c0 [ 695.132442][T15650] should_failslab+0x9/0x20 [ 695.136948][T15650] slab_pre_alloc_hook+0x59/0x300 [ 695.141968][T15650] ? mempool_init_node+0x1e9/0x480 [ 695.147095][T15650] ? mempool_init_node+0x1e9/0x480 [ 695.152214][T15650] __kmem_cache_alloc_node+0x53/0x250 [ 695.157620][T15650] ? mempool_init_node+0x1e9/0x480 [ 695.162761][T15650] __kmalloc+0xa7/0x240 [ 695.166939][T15650] ? ____kasan_slab_free+0x112/0x1f0 [ 695.172250][T15650] ? mempool_free_slab+0x20/0x20 [ 695.177210][T15650] mempool_init_node+0x1e9/0x480 [ 695.182164][T15650] ? mempool_kmalloc+0x20/0x20 [ 695.186935][T15650] ? mempool_free_slab+0x20/0x20 [ 695.191877][T15650] mempool_init+0x3a/0x50 [ 695.196217][T15650] fanotify_add_mark+0x6e2/0xd30 [ 695.201214][T15650] do_fanotify_mark+0xc45/0xdb0 [ 695.206089][T15650] ? copy_fid_info_to_user+0x6f0/0x6f0 [ 695.211561][T15650] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 695.217554][T15650] ? lock_chain_count+0x20/0x20 [ 695.222423][T15650] __x64_sys_fanotify_mark+0xb5/0xd0 [ 695.227727][T15650] do_syscall_64+0x55/0xb0 [ 695.232155][T15650] ? clear_bhb_loop+0x40/0x90 [ 695.236831][T15650] ? clear_bhb_loop+0x40/0x90 [ 695.241516][T15650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.247434][T15650] RIP: 0033:0x7f8bc4f9e559 [ 695.251851][T15650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.271452][T15650] RSP: 002b:00007f8bc5ec0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 695.279869][T15650] RAX: ffffffffffffffda RBX: 00007f8bc5225fa0 RCX: 00007f8bc4f9e559 [ 695.287849][T15650] RDX: 0000000040009965 RSI: 0000000000000105 RDI: 0000000000000009 [ 695.295830][T15650] RBP: 00007f8bc50358b0 R08: 0000000000000000 R09: 0000000000000000 [ 695.303797][T15650] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 695.311770][T15650] R13: 00007f8bc5226038 R14: 00007f8bc5225fa0 R15: 00007fff3327a088 [ 695.319758][T15650] [ 697.205004][T15686] rxe_eth0 speed is unknown, defaulting to 1000 [ 698.470786][T15716] loop7: detected capacity change from 0 to 8192 [ 698.643894][T15716] loop7: p1 p2 p3 [ 698.664172][T15716] loop7: partition table partially beyond EOD, truncated [ 698.721634][T15716] loop7: p1 start 51379968 is beyond EOD, truncated [ 698.779287][T15716] loop7: p3 size 100663552 extends beyond EOD, truncated [ 699.543556][T15465] udevd[15465]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 699.566439][T15463] udevd[15463]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 699.779438][T15741] FAULT_INJECTION: forcing a failure. [ 699.779438][T15741] name failslab, interval 1, probability 0, space 0, times 0 [ 699.835960][T15741] CPU: 0 PID: 15741 Comm: syz.3.3146 Not tainted syzkaller #0 [ 699.843465][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 699.853543][T15741] Call Trace: [ 699.856842][T15741] [ 699.859782][T15741] dump_stack_lvl+0x18c/0x250 [ 699.864472][T15741] ? show_regs_print_info+0x20/0x20 [ 699.869672][T15741] ? load_image+0x420/0x420 [ 699.874193][T15741] ? __might_sleep+0xe0/0xe0 [ 699.878815][T15741] ? __lock_acquire+0x7eb0/0x7eb0 [ 699.883880][T15741] should_fail_ex+0x394/0x4c0 [ 699.888592][T15741] should_failslab+0x9/0x20 [ 699.893106][T15741] slab_pre_alloc_hook+0x59/0x300 [ 699.898137][T15741] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 699.903510][T15741] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 699.908806][T15741] __kmem_cache_alloc_node+0x53/0x250 [ 699.914203][T15741] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 699.919509][T15741] __kmalloc+0xa7/0x240 [ 699.923950][T15741] vhost_dev_set_owner+0x2a5/0x9b0 [ 699.929362][T15741] vhost_dev_ioctl+0xa9/0xc00 [ 699.934166][T15741] ? vhost_vsock_dev_ioctl+0x230/0xdd0 [ 699.939641][T15741] ? mutex_lock_nested+0x20/0x20 [ 699.944594][T15741] ? vhost_init_device_iotlb+0x200/0x200 [ 699.950250][T15741] vhost_vsock_dev_ioctl+0x23e/0xdd0 [ 699.955549][T15741] ? vhost_vsock_chr_poll+0x50/0x50 [ 699.960776][T15741] ? bpf_lsm_file_ioctl+0x9/0x10 [ 699.965719][T15741] ? security_file_ioctl+0x80/0xa0 [ 699.970843][T15741] ? vhost_vsock_chr_poll+0x50/0x50 [ 699.976068][T15741] __se_sys_ioctl+0xfd/0x170 [ 699.980674][T15741] do_syscall_64+0x55/0xb0 [ 699.985100][T15741] ? clear_bhb_loop+0x40/0x90 [ 699.989797][T15741] ? clear_bhb_loop+0x40/0x90 [ 699.994486][T15741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.000396][T15741] RIP: 0033:0x7fdab619e559 [ 700.004824][T15741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.024554][T15741] RSP: 002b:00007fdab70f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 700.032979][T15741] RAX: ffffffffffffffda RBX: 00007fdab6425fa0 RCX: 00007fdab619e559 [ 700.040972][T15741] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 700.048953][T15741] RBP: 00007fdab62358b0 R08: 0000000000000000 R09: 0000000000000000 [ 700.056949][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.064929][T15741] R13: 00007fdab6426038 R14: 00007fdab6425fa0 R15: 00007ffe3f4da608 [ 700.072940][T15741] [ 702.389466][T15191] syz.1.3028 (15191) used greatest stack depth: 17192 bytes left [ 704.027251][T15782] loop1: detected capacity change from 0 to 164 [ 705.671187][T15827] overlayfs: failed to resolve './file0': -2 [ 706.407370][T15843] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 706.454275][T15843] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 706.496088][T15843] bond1: entered allmulticast mode [ 706.511569][T15843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 706.943947][T15856] loop4: detected capacity change from 0 to 16 [ 706.972519][T15856] erofs: (device loop4): mounted with root inode @ nid 36. [ 707.086341][T15832] kvm: pic: single mode not supported [ 707.178412][T15256] syz.1.3045 (15256) used greatest stack depth: 16680 bytes left [ 707.822638][T15875] bond2: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 707.834654][T15878] device-mapper: ioctl: name not supplied when creating device [ 707.853947][T15875] bond2: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 707.901929][T15875] bond2: entered allmulticast mode [ 707.928843][T15875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 708.117326][T15886] overlayfs: missing 'lowerdir' [ 709.800663][T15922] device-mapper: ioctl: name not supplied when creating device [ 711.046903][T15927] loop4: detected capacity change from 0 to 40427 [ 711.138115][T15927] F2FS-fs (loop4): invalid crc value [ 711.181384][T15927] F2FS-fs (loop4): Found nat_bits in checkpoint [ 711.407639][T15927] F2FS-fs (loop4): Start checkpoint disabled! [ 711.468463][T15927] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 711.490766][T15970] overlayfs: failed to resolve './bus': -2 [ 711.582834][T15969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.600716][T15974] xt_TCPMSS: Only works on TCP SYN packets [ 711.622294][T15974] syz.4.3201: attempt to access beyond end of device [ 711.622294][T15974] loop4: rw=2049, sector=53248, nr_sectors = 1056 limit=40427 [ 711.636682][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.643568][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.650777][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.657742][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.664753][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.671620][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.678569][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.685481][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.693578][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.700506][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.707528][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.714828][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.721787][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.728677][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.735595][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.742485][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.749452][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.756364][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.763318][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.770225][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.777172][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.784069][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.792090][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.799092][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.806016][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.812884][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.819805][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.826797][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.833660][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.840619][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.847501][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.854494][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.861354][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.868275][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.875223][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.882093][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.889014][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.897064][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.904053][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.910919][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.917878][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.924773][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.931666][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.938583][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.945482][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.952343][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.959359][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.966283][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.973144][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.980067][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.986956][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 711.993817][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.002057][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.009059][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.015961][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.022827][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.029742][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.036793][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.043666][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.050580][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.057485][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.064400][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.071271][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.078228][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.085120][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.091983][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.100102][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.107018][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.113992][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.120959][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.127861][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.134783][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.141655][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.148570][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.155485][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.162347][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.169236][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.176143][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.183005][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.189910][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.197739][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.205911][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.212781][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.219728][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.226647][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.233512][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.240431][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.247318][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.254223][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.261083][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.267969][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.274990][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.281876][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.288854][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.295835][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.303856][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.310810][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.317720][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.324633][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.331497][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.338435][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.345347][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.352261][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.359153][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.366040][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.372972][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.379974][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.386866][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.393724][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.400631][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.408728][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.415644][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.422506][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.429433][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.436349][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.443231][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.450138][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.457122][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.463976][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.470943][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.477890][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.484784][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.491644][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.498565][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.505451][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.513558][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.520737][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.527649][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.534540][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.541405][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.549124][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.556062][T15974] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 712.807242][T15969] batadv_slave_0: entered promiscuous mode [ 712.950821][T15969] batadv_slave_0: entered allmulticast mode [ 713.050564][T15969] net_ratelimit: 16 callbacks suppressed [ 713.050578][T15969] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 713.704878][T15996] overlayfs: failed to resolve './file0': -2 [ 715.092857][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'. [ 715.256353][T16034] overlayfs: missing 'lowerdir' [ 715.413630][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 715.426693][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 715.436645][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 715.448663][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 715.458622][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 715.466164][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 715.597633][T16037] rxe_eth0 speed is unknown, defaulting to 1000 [ 716.436399][T16037] chnl_net:caif_netlink_parms(): no params data found [ 716.695228][T16037] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.704461][T16037] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.712999][T16037] bridge_slave_0: entered allmulticast mode [ 716.761617][T16037] bridge_slave_0: entered promiscuous mode [ 716.800227][T16037] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.827908][T16037] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.863932][T16037] bridge_slave_1: entered allmulticast mode [ 716.887674][T16037] bridge_slave_1: entered promiscuous mode [ 716.983508][T16037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.038986][T16037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.150828][T16037] team0: Port device team_slave_0 added [ 717.196088][T16037] team0: Port device team_slave_1 added [ 717.263920][T16037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.307385][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.411462][T16037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.554231][ T5780] Bluetooth: hci3: command tx timeout [ 718.381478][T16037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.424168][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.517268][T16086] loop1: detected capacity change from 0 to 16 [ 718.534774][T16037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.657404][T16088] dummy0: entered allmulticast mode [ 718.688950][T16086] erofs: (device loop1): mounted with root inode @ nid 36. [ 718.758034][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 718.932613][T16037] hsr_slave_0: entered promiscuous mode [ 718.982571][T16037] hsr_slave_1: entered promiscuous mode [ 719.020043][T16037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.070438][T16037] Cannot create hsr debugfs directory [ 719.116902][T16087] dummy0: left allmulticast mode [ 719.637270][T15326] Bluetooth: hci3: command tx timeout [ 719.827207][T16037] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 719.918837][T16037] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 719.973960][T16037] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 720.019474][T16037] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 720.359821][T16037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.417456][T16112] overlayfs: failed to resolve './file1': -2 [ 720.430187][T16037] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.526530][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.533700][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.607733][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.614926][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.730043][T16116] overlayfs: missing 'workdir' [ 721.340455][T16037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.538960][T16136] xt_TPROXY: Can be used only with -p tcp or -p udp [ 721.715084][T15326] Bluetooth: hci3: command tx timeout [ 721.815323][T16144] overlayfs: failed to resolve './file0': -2 [ 722.065061][T16150] overlayfs: missing 'workdir' [ 722.287075][T16037] veth0_vlan: entered promiscuous mode [ 722.348467][T16037] veth1_vlan: entered promiscuous mode [ 722.465786][T16037] veth0_macvtap: entered promiscuous mode [ 722.511502][T16037] veth1_macvtap: entered promiscuous mode [ 722.600420][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.651359][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.683913][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.728104][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.763401][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.788700][T16158] kvm: pic: non byte write [ 722.812713][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.858793][T16037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.921678][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.961615][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.003660][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.048894][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.093495][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.136762][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.180784][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.219050][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.287544][T16037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.365606][T16037] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.417809][T16037] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.450530][T16037] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.497826][T16037] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.804309][T15326] Bluetooth: hci3: command tx timeout [ 723.905032][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.912899][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.011892][T16167] x86/PAT: syz.1.3251:16167 freeing invalid memtype [mem 0xfe005000-0xfe006fff] [ 724.032608][T16170] FAULT_INJECTION: forcing a failure. [ 724.032608][T16170] name failslab, interval 1, probability 0, space 0, times 0 [ 724.090189][T16171] overlayfs: failed to resolve './file0': -2 [ 724.101335][T10679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.129040][T10679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.150985][T16170] CPU: 0 PID: 16170 Comm: syz.3.3264 Not tainted syzkaller #0 [ 724.158467][T16170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 724.168535][T16170] Call Trace: [ 724.171831][T16170] [ 724.174770][T16170] dump_stack_lvl+0x18c/0x250 [ 724.179471][T16170] ? show_regs_print_info+0x20/0x20 [ 724.184678][T16170] ? load_image+0x420/0x420 [ 724.189190][T16170] ? __might_sleep+0xe0/0xe0 [ 724.193794][T16170] ? __lock_acquire+0x7eb0/0x7eb0 [ 724.198833][T16170] should_fail_ex+0x394/0x4c0 [ 724.203528][T16170] should_failslab+0x9/0x20 [ 724.208058][T16170] slab_pre_alloc_hook+0x59/0x300 [ 724.213093][T16170] kmem_cache_alloc+0x5a/0x2c0 [ 724.217870][T16170] ? ptlock_alloc+0x20/0x70 [ 724.222386][T16170] ptlock_alloc+0x20/0x70 [ 724.226724][T16170] pte_alloc_one+0xcc/0x540 [ 724.231245][T16170] ? pfn_modify_allowed+0x560/0x560 [ 724.236458][T16170] ? mt_find+0x169/0x640 [ 724.240736][T16170] ? __lock_acquire+0x7eb0/0x7eb0 [ 724.245803][T16170] __pte_alloc+0x22/0x2a0 [ 724.250155][T16170] handle_mm_fault+0x3dc6/0x4a50 [ 724.255105][T16170] ? handle_mm_fault+0xe6/0x4a50 [ 724.260066][T16170] ? numa_migrate_prep+0x350/0x350 [ 724.265200][T16170] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 724.270511][T16170] do_user_addr_fault+0x736/0x12d0 [ 724.275667][T16170] exc_page_fault+0x64/0x100 [ 724.280289][T16170] ? clear_bhb_loop+0x40/0x90 [ 724.284999][T16170] asm_exc_page_fault+0x26/0x30 [ 724.289853][T16170] RIP: 0033:0x7fdab60572f6 [ 724.294280][T16170] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 9c dd 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 724.313906][T16170] RSP: 002b:00007fdab70f3f60 EFLAGS: 00010206 [ 724.319991][T16170] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 724.327971][T16170] RDX: 00000000000026f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 724.335948][T16170] RBP: 00007fdab62551a0 R08: 0000000000000000 R09: 0000000000000003 [ 724.343928][T16170] R10: 0000000000000003 R11: 0000000000000000 R12: 00000000003ff000 [ 724.351915][T16170] R13: 0000200000c00000 R14: 00007fdab6425fa0 R15: 0000000000000000 [ 724.359919][T16170] [ 724.464589][T16138] rxe_eth0 speed is unknown, defaulting to 1000 [ 724.534423][T16170] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 724.723655][T16174] overlayfs: upper fs does not support file handles, falling back to index=off. [ 732.062436][T16192] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3270'. [ 732.487629][T16192] bridge_slave_0: left allmulticast mode [ 732.595206][T16192] bridge_slave_0: left promiscuous mode [ 732.726669][T16192] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.531124][T16192] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 747.456772][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.463382][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.777172][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 790.486546][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 798.296259][T16239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 798.348773][T16239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 798.378709][T16239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 798.537871][T16239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 798.593096][T16239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 798.669049][T16239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 804.374920][T16244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 804.460475][T16244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 804.555133][T16244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 804.706254][T16244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 804.808489][T16244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 804.825845][T16244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 808.887416][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.921254][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.579428][T16252] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 810.605547][T16252] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 810.658586][T16252] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 810.834784][T16252] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 810.885210][T16252] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 810.899698][T16252] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 824.294547][ T5087] Bluetooth: hci6: command tx timeout [ 824.301461][ T5087] Bluetooth: hci5: command tx timeout [ 824.309738][ T5087] Bluetooth: hci7: command tx timeout [ 826.435283][T15326] Bluetooth: hci7: command tx timeout [ 826.441032][T15326] Bluetooth: hci5: command tx timeout [ 826.452694][T15326] Bluetooth: hci6: command tx timeout [ 828.614814][ T5087] Bluetooth: hci6: command tx timeout [ 828.620645][ T5087] Bluetooth: hci5: command tx timeout [ 828.640142][ T5087] Bluetooth: hci7: command tx timeout [ 830.765442][T15326] Bluetooth: hci7: command tx timeout [ 830.771178][T15326] Bluetooth: hci5: command tx timeout [ 830.804873][T15326] Bluetooth: hci6: command tx timeout [ 841.860398][T15326] Bluetooth: hci3: command 0x0406 tx timeout [ 865.150545][T16138] x86/PAT: syz.1.3251:16138 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 870.346800][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.353603][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.245659][T15326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.268213][T15326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.327095][T15326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.440884][T15326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.484961][T12583] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 882.535475][T12583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 884.907689][T12583] Bluetooth: hci0: command tx timeout [ 885.535638][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 885.606369][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 885.645325][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 885.664905][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 885.750940][T15326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 885.786616][T15326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 887.024285][T15326] Bluetooth: hci0: command tx timeout [ 888.086183][T15326] Bluetooth: hci3: command tx timeout [ 889.089123][T15326] Bluetooth: hci0: command tx timeout [ 890.175696][T12583] Bluetooth: hci3: command tx timeout [ 890.270630][T12583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 890.384874][T12583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 890.485992][T12583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 890.666294][T12583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 890.883925][T12583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 890.954721][T12583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 891.174882][T15326] Bluetooth: hci0: command tx timeout [ 892.230644][T16194] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.295595][T12583] Bluetooth: hci3: command tx timeout [ 893.374834][T12583] Bluetooth: hci5: command tx timeout [ 894.434239][T12583] Bluetooth: hci3: command tx timeout [ 895.524908][T12583] Bluetooth: hci5: command tx timeout [ 897.582523][T12583] Bluetooth: hci5: command tx timeout [ 899.018842][T16194] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.703799][T12583] Bluetooth: hci5: command tx timeout [ 902.464791][T16300] rxe_eth0 speed is unknown, defaulting to 1000 [ 906.632991][T16194] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.396337][T16194] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.024527][T16291] rxe_eth0 speed is unknown, defaulting to 1000 [ 931.890799][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.914403][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 957.646578][T15326] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 957.690657][T15326] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 957.780436][T15326] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 958.014817][T15326] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 958.172718][T15326] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 958.293582][T15326] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 961.897343][ T5087] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 961.912317][ T5087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 961.946047][ T5087] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 962.154781][ T5087] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 962.274968][ T5087] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 962.305530][ T5087] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 962.732275][T16331] rxe_eth0 speed is unknown, defaulting to 1000 [ 970.173758][T16239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 970.228882][T16239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 970.277189][T16239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 970.424838][T16239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 970.516324][T16239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 970.584675][T16239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 982.300537][T16337] rxe_eth0 speed is unknown, defaulting to 1000 [ 987.487452][T16239] Bluetooth: hci8: command tx timeout [ 987.497863][T16239] Bluetooth: hci7: command tx timeout [ 987.507104][T16239] Bluetooth: hci6: command tx timeout [ 989.619264][T15326] Bluetooth: hci6: command tx timeout [ 989.625827][T15326] Bluetooth: hci7: command tx timeout [ 989.631571][T15326] Bluetooth: hci8: command tx timeout [ 991.784496][T16239] Bluetooth: hci8: command tx timeout [ 991.790300][T16239] Bluetooth: hci7: command tx timeout [ 991.824319][T16239] Bluetooth: hci6: command tx timeout [ 993.265088][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.271814][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.934622][T15326] Bluetooth: hci6: command tx timeout [ 993.940466][T15326] Bluetooth: hci7: command tx timeout [ 993.954290][T15326] Bluetooth: hci8: command tx timeout [ 1005.599302][T15326] Bluetooth: hci0: command 0x0406 tx timeout [ 1011.969234][T16342] rxe_eth0 speed is unknown, defaulting to 1000 [ 1015.794245][T15326] Bluetooth: hci5: command 0x0406 tx timeout [ 1054.667338][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.694488][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.720345][T15326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1055.805120][T15326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1055.879084][T15326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1056.054360][T15326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1056.235972][T15326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1056.321142][T15326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1058.642620][T15326] Bluetooth: hci3: command tx timeout [ 1059.671980][T15326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1059.787784][T15326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1059.929388][T15326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1060.342586][T15326] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1060.534258][T15326] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1060.594824][T15326] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1060.678177][T15326] Bluetooth: hci3: command tx timeout [ 1062.824792][ T5087] Bluetooth: hci3: command tx timeout [ 1063.135249][ T5087] Bluetooth: hci4: command tx timeout [ 1064.918910][ T5087] Bluetooth: hci3: command tx timeout [ 1065.204409][ T5087] Bluetooth: hci4: command tx timeout