last executing test programs: 5m49.206743861s ago: executing program 1 (id=50): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006140)=@delchain={0x4c, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {}, {0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 5m48.885979077s ago: executing program 1 (id=52): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48050000003f000008000a00", @ANYRES32=r5, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 5m48.567521182s ago: executing program 1 (id=56): add_key$user(0x0, 0x0, &(0x7f0000000080)="845907d5", 0x4, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 5m48.111975004s ago: executing program 1 (id=60): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x8008976) write$cgroup_pid(r0, 0x0, 0x0) 5m47.062396705s ago: executing program 1 (id=67): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000400)='./sys\x00', 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, r1) 5m46.319777361s ago: executing program 1 (id=75): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}, {0x0}], 0x2) sendto(0xffffffffffffffff, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x202, 0x12) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) 5m45.817791435s ago: executing program 32 (id=75): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}, {0x0}], 0x2) sendto(0xffffffffffffffff, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x202, 0x12) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) 4.81427381s ago: executing program 4 (id=2910): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) sendfile(r2, r3, 0x0, 0xe3aa6ea) 4.445621069s ago: executing program 2 (id=2913): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x2, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.374932072s ago: executing program 2 (id=2914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) 4.083971516s ago: executing program 0 (id=2915): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='2', 0x1) 4.039277448s ago: executing program 3 (id=2916): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="054b24298a00000000006b00000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 3.820072289s ago: executing program 0 (id=2917): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = fanotify_init(0x40, 0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 3.748663753s ago: executing program 3 (id=2918): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat2(r1, 0x0, 0x0, 0x1100) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffe4) 3.638831959s ago: executing program 4 (id=2919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x1, 0x2}, {0x6, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 3.535199824s ago: executing program 0 (id=2920): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000600), 0x0) 3.523394544s ago: executing program 3 (id=2921): socket$igmp(0x2, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) socket(0x1, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 3.335193943s ago: executing program 0 (id=2922): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x2, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.334130503s ago: executing program 3 (id=2923): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./sys\x00', 0x0, &(0x7f00000001c0)={[{@i_version}, {@nolazytime}, {@inlinecrypt}, {@noload}, {@acl}]}, 0xfb, 0x28f, &(0x7f0000000980)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 2.900543925s ago: executing program 4 (id=2924): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x8080) 2.900145945s ago: executing program 2 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0xa0, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x45}, {0x74, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0x4}}, @TCA_U32_MARK={0x0, 0xa, {0x28, 0x1180000}}]}}]}, 0xa0}}, 0x24000010) 2.80513292s ago: executing program 0 (id=2926): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="054b24298a00000000006b00000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 2.702461105s ago: executing program 4 (id=2927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100ce03cde5fa01002bbd7000db0100ffff0000dd000000010c000101080013000f000000"], 0x24}}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000100)={0x24, 0x37, 0x2, {0x2, 0x3, 0x8, 0x0, 0x6, '}\'@)%.'}}, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x1010, 0xffffffffffffffff, 0xb18c000) getrlimit(0x7, &(0x7f0000000300)) r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.540031343s ago: executing program 2 (id=2928): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = fanotify_init(0x40, 0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 2.511721565s ago: executing program 0 (id=2929): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x3004050, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0xbf, 0x1063e, &(0x7f0000020c80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x18a) getdents64(r0, &(0x7f0000004440)=""/4096, 0x1000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1.557351942s ago: executing program 3 (id=2930): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat2(r1, 0x0, 0x0, 0x1100) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffe4) 451.708527ms ago: executing program 2 (id=2931): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c3, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 357.681131ms ago: executing program 3 (id=2932): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0xa0400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) syz_open_procfs$userns(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffe8f, 0x0, 0x0, &(0x7f0000000840), 0x100}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 244.515087ms ago: executing program 4 (id=2933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x1, 0x2}, {0x6, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 154.432732ms ago: executing program 2 (id=2934): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x20, 0x0, 0x121, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 4 (id=2935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x8080) kernel console output (not intermixed with test programs): : 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.386283][T12557] R13: 00007f1c31c26038 R14: 00007f1c31c25fa0 R15: 00007ffcc5f5b638 [ 353.394417][T12557] [ 353.509323][ T51] Bluetooth: hci4: command tx timeout [ 354.019490][ T2964] hsr_slave_0: left promiscuous mode [ 354.039994][ T2964] hsr_slave_1: left promiscuous mode [ 354.074484][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.083504][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.108101][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.129199][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.149983][ T2964] bridge_slave_1: left allmulticast mode [ 354.155769][ T2964] bridge_slave_1: left promiscuous mode [ 354.183799][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.238861][ T2964] bridge_slave_0: left allmulticast mode [ 354.251556][ T2964] bridge_slave_0: left promiscuous mode [ 354.257415][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.399688][ T2964] veth1_macvtap: left promiscuous mode [ 354.415617][ T2964] veth0_macvtap: left promiscuous mode [ 354.433185][ T2964] veth1_vlan: left promiscuous mode [ 354.438608][ T2964] veth0_vlan: left promiscuous mode [ 354.871424][ T2964] bond10 (unregistering): Released all slaves [ 354.936721][ T2964] bond9 (unregistering): Released all slaves [ 355.055601][ T2964] bond8 (unregistering): (slave bridge9): Releasing backup interface [ 355.174059][ T2964] bond8 (unregistering): Released all slaves [ 355.351949][ T2964] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 355.427898][ T2964] bond7 (unregistering): Released all slaves [ 355.467896][ T2964] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 355.565571][ T2964] bond6 (unregistering): Released all slaves [ 355.585116][T12593] overlayfs: missing 'workdir' [ 355.590164][ T51] Bluetooth: hci4: command tx timeout [ 355.646171][ T2964] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 355.735165][ T2964] bond5 (unregistering): Released all slaves [ 355.800624][ T2964] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 355.884765][ T2964] bond4 (unregistering): Released all slaves [ 355.962003][ T2964] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 356.080371][ T2964] bond3 (unregistering): Released all slaves [ 356.192471][ T2964] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 356.272429][ T2964] bond2 (unregistering): Released all slaves [ 356.348656][ T2964] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 356.473754][ T2964] bond1 (unregistering): Released all slaves [ 356.505709][T12607] FAULT_INJECTION: forcing a failure. [ 356.505709][T12607] name failslab, interval 1, probability 0, space 0, times 0 [ 356.518897][T12607] CPU: 1 PID: 12607 Comm: syz.0.2337 Not tainted syzkaller #0 [ 356.526438][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.536551][T12607] Call Trace: [ 356.539889][T12607] [ 356.542875][T12607] dump_stack_lvl+0x18c/0x250 [ 356.547648][T12607] ? show_regs_print_info+0x20/0x20 [ 356.552930][T12607] ? load_image+0x420/0x420 [ 356.557513][T12607] ? __might_sleep+0xe0/0xe0 [ 356.562199][T12607] ? __lock_acquire+0x7d80/0x7d80 [ 356.567300][T12607] should_fail_ex+0x394/0x4c0 [ 356.572059][T12607] should_failslab+0x9/0x20 [ 356.576643][T12607] slab_pre_alloc_hook+0x59/0x300 [ 356.581760][T12607] ? legacy_init_fs_context+0x51/0xc0 [ 356.587224][T12607] __kmem_cache_alloc_node+0x53/0x250 [ 356.592666][T12607] ? legacy_init_fs_context+0x51/0xc0 [ 356.598108][T12607] kmalloc_trace+0x2a/0xe0 [ 356.602593][T12607] legacy_init_fs_context+0x51/0xc0 [ 356.607852][T12607] alloc_fs_context+0x618/0x7a0 [ 356.612776][T12607] do_new_mount+0x10e/0xa40 [ 356.617393][T12607] __se_sys_mount+0x2e7/0x3d0 [ 356.622137][T12607] ? __x64_sys_mount+0xc0/0xc0 [ 356.626960][T12607] ? lockdep_hardirqs_on+0x98/0x150 [ 356.632223][T12607] ? __x64_sys_mount+0x20/0xc0 [ 356.637052][T12607] do_syscall_64+0x55/0xb0 [ 356.641548][T12607] ? clear_bhb_loop+0x40/0x90 [ 356.646328][T12607] ? clear_bhb_loop+0x40/0x90 [ 356.651082][T12607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.657041][T12607] RIP: 0033:0x7f1c3199e159 [ 356.661527][T12607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.681227][T12607] RSP: 002b:00007f1c327fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.689713][T12607] RAX: ffffffffffffffda RBX: 00007f1c31c25fa0 RCX: 00007f1c3199e159 [ 356.697749][T12607] RDX: 0000200000000380 RSI: 0000200000000680 RDI: 0000000000000000 [ 356.705785][T12607] RBP: 00007f1c31a3503b R08: 0000200000002780 R09: 0000000000000000 [ 356.713821][T12607] R10: 0000000000014c98 R11: 0000000000000246 R12: 0000000000000000 [ 356.721851][T12607] R13: 00007f1c31c26038 R14: 00007f1c31c25fa0 R15: 00007ffcc5f5b638 [ 356.729885][T12607] [ 357.669125][ T51] Bluetooth: hci4: command tx timeout [ 357.777360][T12633] loop4: detected capacity change from 0 to 256 [ 358.012404][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 358.163450][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 358.370562][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.538465][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.466761][ T2964] bond0 (unregistering): Released all slaves [ 359.849977][T12671] FAULT_INJECTION: forcing a failure. [ 359.849977][T12671] name fail_futex, interval 1, probability 0, space 0, times 0 [ 359.865158][T12671] CPU: 0 PID: 12671 Comm: syz.0.2359 Not tainted syzkaller #0 [ 359.873152][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.883274][T12671] Call Trace: [ 359.886605][T12671] [ 359.889585][T12671] dump_stack_lvl+0x18c/0x250 [ 359.894327][T12671] ? show_regs_print_info+0x20/0x20 [ 359.899602][T12671] ? load_image+0x420/0x420 [ 359.904165][T12671] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 359.910266][T12671] ? lock_chain_count+0x20/0x20 [ 359.915212][T12671] should_fail_ex+0x394/0x4c0 [ 359.919965][T12671] get_futex_key+0x136/0x1030 [ 359.924791][T12671] ? asm_exc_page_fault+0x26/0x30 [ 359.929898][T12671] ? strncpy_from_user+0x21e/0x2f0 [ 359.935064][T12671] ? futex_setup_timer+0xc0/0xc0 [ 359.940054][T12671] ? strncpy_from_user+0x2cb/0x2f0 [ 359.945244][T12671] futex_wake+0x127/0x4f0 [ 359.949646][T12671] ? futex_wake_mark+0x150/0x150 [ 359.954645][T12671] ? __lock_acquire+0x7d80/0x7d80 [ 359.959732][T12671] ? __se_sys_keyctl+0x6ca/0xb50 [ 359.964791][T12671] do_futex+0x35d/0x3e0 [ 359.969011][T12671] ? __ia32_sys_get_robust_list+0x110/0x110 [ 359.974982][T12671] __se_sys_futex+0x3a9/0x440 [ 359.979732][T12671] ? __x64_sys_futex+0xf0/0xf0 [ 359.984572][T12671] ? __x64_sys_futex+0x21/0xf0 [ 359.989436][T12671] do_syscall_64+0x55/0xb0 [ 359.993917][T12671] ? clear_bhb_loop+0x40/0x90 [ 359.998661][T12671] ? clear_bhb_loop+0x40/0x90 [ 360.003415][T12671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.009372][T12671] RIP: 0033:0x7f1c3199e159 [ 360.013853][T12671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.033525][T12671] RSP: 002b:00007f1c327fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 360.042009][T12671] RAX: ffffffffffffffda RBX: 00007f1c31c25fa8 RCX: 00007f1c3199e159 [ 360.050042][T12671] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1c31c25fac [ 360.058085][T12671] RBP: 00007f1c31c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 360.066120][T12671] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 360.074150][T12671] R13: 00007f1c31c26038 R14: 00007ffcc5f5b550 R15: 00007ffcc5f5b638 [ 360.082243][T12671] [ 361.062127][T12703] loop2: detected capacity change from 0 to 256 [ 361.126574][T12703] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.191991][T12703] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.362838][T12475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.415072][T12475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.463570][T12475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.505576][T12475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.815246][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.916876][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.958655][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.965999][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.992888][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.000192][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.146133][ T28] audit: type=1326 audit(1789150158.032:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.4.2372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f430119e159 code=0x0 [ 362.753425][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.917853][T12475] veth0_vlan: entered promiscuous mode [ 362.984349][T12475] veth1_vlan: entered promiscuous mode [ 363.093871][T12475] veth0_macvtap: entered promiscuous mode [ 363.116264][T12475] veth1_macvtap: entered promiscuous mode [ 363.178762][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.204945][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.236651][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.270661][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.306220][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.337578][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.364196][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.417842][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.447894][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.457975][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.475855][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.485842][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.501872][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.516176][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.561959][T12475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.596071][T12761] FAULT_INJECTION: forcing a failure. [ 363.596071][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 363.609113][T12475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.609198][T12475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.609229][T12475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.688423][T12761] CPU: 1 PID: 12761 Comm: syz.4.2379 Not tainted syzkaller #0 [ 363.696002][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.706117][T12761] Call Trace: [ 363.709516][T12761] [ 363.712487][T12761] dump_stack_lvl+0x18c/0x250 [ 363.717215][T12761] ? show_regs_print_info+0x20/0x20 [ 363.722461][T12761] ? load_image+0x420/0x420 [ 363.727005][T12761] ? __lock_acquire+0x7d80/0x7d80 [ 363.732082][T12761] should_fail_ex+0x394/0x4c0 [ 363.736805][T12761] should_failslab+0x9/0x20 [ 363.741363][T12761] slab_pre_alloc_hook+0x59/0x300 [ 363.746471][T12761] ? sbitmap_queue_init_node+0x24f/0x660 [ 363.752342][T12761] __kmem_cache_alloc_node+0x53/0x250 [ 363.757869][T12761] ? sbitmap_queue_init_node+0x24f/0x660 [ 363.763547][T12761] kmalloc_node_trace+0x26/0xe0 [ 363.768462][T12761] sbitmap_queue_init_node+0x24f/0x660 [ 363.773982][T12761] blk_mq_init_tags+0x15d/0x280 [ 363.779101][T12761] blk_mq_alloc_map_and_rqs+0xc5/0x910 [ 363.784613][T12761] ? kasan_quarantine_put+0xd8/0x220 [ 363.789946][T12761] ? lockdep_hardirqs_on+0x98/0x150 [ 363.795251][T12761] blk_mq_alloc_set_map_and_rqs+0x1a0/0x800 [ 363.801197][T12761] blk_mq_alloc_tag_set+0x868/0x1020 [ 363.806534][T12761] loop_add+0x2eb/0x990 [ 363.810768][T12761] loop_control_ioctl+0x128/0x590 [ 363.815840][T12761] ? loop_set_hw_queue_depth+0x110/0x110 [ 363.821601][T12761] ? bpf_lsm_file_ioctl+0x9/0x10 [ 363.826575][T12761] ? security_file_ioctl+0x80/0xa0 [ 363.831728][T12761] ? loop_set_hw_queue_depth+0x110/0x110 [ 363.837398][T12761] __se_sys_ioctl+0xfd/0x170 [ 363.842055][T12761] do_syscall_64+0x55/0xb0 [ 363.846537][T12761] ? clear_bhb_loop+0x40/0x90 [ 363.851271][T12761] ? clear_bhb_loop+0x40/0x90 [ 363.855994][T12761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.861928][T12761] RIP: 0033:0x7f430119e159 [ 363.866381][T12761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.886116][T12761] RSP: 002b:00007f4301fa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.894684][T12761] RAX: ffffffffffffffda RBX: 00007f4301425fa0 RCX: 00007f430119e159 [ 363.902721][T12761] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 363.910724][T12761] RBP: 00007f430123503b R08: 0000000000000000 R09: 0000000000000000 [ 363.918723][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.926732][T12761] R13: 00007f4301426038 R14: 00007f4301425fa0 R15: 00007ffe4ba3c1b8 [ 363.934749][T12761] [ 363.962274][T12761] blk-mq: reduced tag depth (128 -> 64) [ 364.156000][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.192601][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.286301][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.304861][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.522123][T12778] ipvlan2: entered promiscuous mode [ 364.561157][T12778] team0: Device ipvlan2 failed to register rx_handler [ 364.890122][T12787] syz.4.2385 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 365.799617][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.818361][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.827762][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.842937][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.858497][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 365.867682][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.076899][T12815] FAULT_INJECTION: forcing a failure. [ 366.076899][T12815] name failslab, interval 1, probability 0, space 0, times 0 [ 366.099519][T12815] CPU: 1 PID: 12815 Comm: syz.3.2391 Not tainted syzkaller #0 [ 366.107261][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.117470][T12815] Call Trace: [ 366.120894][T12815] [ 366.123886][T12815] dump_stack_lvl+0x18c/0x250 [ 366.128745][T12815] ? show_regs_print_info+0x20/0x20 [ 366.134058][T12815] ? load_image+0x420/0x420 [ 366.138641][T12815] ? __might_sleep+0xe0/0xe0 [ 366.143313][T12815] ? __lock_acquire+0x7d80/0x7d80 [ 366.148425][T12815] should_fail_ex+0x394/0x4c0 [ 366.153178][T12815] should_failslab+0x9/0x20 [ 366.157754][T12815] slab_pre_alloc_hook+0x59/0x300 [ 366.162902][T12815] ? get_fs_type+0x3f9/0x480 [ 366.167564][T12815] ? tomoyo_encode+0x2ad/0x570 [ 366.172426][T12815] ? tomoyo_encode+0x2ad/0x570 [ 366.177276][T12815] __kmem_cache_alloc_node+0x53/0x250 [ 366.182732][T12815] ? tomoyo_encode+0x2ad/0x570 [ 366.187572][T12815] __kmalloc+0xa7/0x240 [ 366.191807][T12815] tomoyo_encode+0x2ad/0x570 [ 366.196481][T12815] tomoyo_mount_permission+0x50b/0x9d0 [ 366.202014][T12815] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 366.207836][T12815] ? kasan_set_track+0x4e/0x70 [ 366.212669][T12815] ? tomoyo_get_name+0x570/0x570 [ 366.217677][T12815] ? user_path_at_empty+0x4c/0x60 [ 366.222819][T12815] ? kasan_quarantine_put+0xd8/0x220 [ 366.228171][T12815] ? lockdep_hardirqs_on+0x98/0x150 [ 366.233483][T12815] security_sb_mount+0x87/0xc0 [ 366.238324][T12815] path_mount+0xbc/0xfa0 [ 366.242648][T12815] ? kmem_cache_free+0xf8/0x290 [ 366.247588][T12815] __se_sys_mount+0x2e7/0x3d0 [ 366.252339][T12815] ? __x64_sys_mount+0xc0/0xc0 [ 366.257176][T12815] ? lockdep_hardirqs_on+0x98/0x150 [ 366.262457][T12815] ? __x64_sys_mount+0x20/0xc0 [ 366.267282][T12815] do_syscall_64+0x55/0xb0 [ 366.271760][T12815] ? clear_bhb_loop+0x40/0x90 [ 366.276498][T12815] ? clear_bhb_loop+0x40/0x90 [ 366.281248][T12815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.287204][T12815] RIP: 0033:0x7f5ccd19e159 [ 366.291679][T12815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.311346][T12815] RSP: 002b:00007f5ccdfd1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.319830][T12815] RAX: ffffffffffffffda RBX: 00007f5ccd425fa0 RCX: 00007f5ccd19e159 [ 366.327863][T12815] RDX: 0000200000000380 RSI: 0000200000000300 RDI: 0000000000000000 [ 366.335894][T12815] RBP: 00007f5ccd23503b R08: 00002000000003c0 R09: 0000000000000000 [ 366.343930][T12815] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 366.351965][T12815] R13: 00007f5ccd426038 R14: 00007f5ccd425fa0 R15: 00007ffcff22fef8 [ 366.360027][T12815] [ 366.730916][T12806] chnl_net:caif_netlink_parms(): no params data found [ 367.168847][T12806] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.217687][T12806] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.233365][T12806] bridge_slave_0: entered allmulticast mode [ 367.242930][T12806] bridge_slave_0: entered promiscuous mode [ 367.287665][T12806] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.316962][T12806] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.340352][T12806] bridge_slave_1: entered allmulticast mode [ 367.368059][T12806] bridge_slave_1: entered promiscuous mode [ 367.376234][T12843] loop3: detected capacity change from 0 to 16 [ 367.439475][T12843] erofs: (device loop3): mounted with root inode @ nid 36. [ 367.530888][T12806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.602761][T12806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.712203][T12854] bridge0: port 3(syz_tun) entered blocking state [ 367.718838][T12854] bridge0: port 3(syz_tun) entered disabled state [ 367.732646][T12854] syz_tun: entered allmulticast mode [ 367.753596][T12854] syz_tun: entered promiscuous mode [ 367.779744][T12854] bridge0: port 3(syz_tun) entered blocking state [ 367.786519][T12854] bridge0: port 3(syz_tun) entered forwarding state [ 367.836823][T12806] team0: Port device team_slave_0 added [ 367.858578][T12806] team0: Port device team_slave_1 added [ 367.910100][ T51] Bluetooth: hci0: command tx timeout [ 367.924400][T12860] FAULT_INJECTION: forcing a failure. [ 367.924400][T12860] name failslab, interval 1, probability 0, space 0, times 0 [ 367.969676][T12860] CPU: 0 PID: 12860 Comm: syz.4.2400 Not tainted syzkaller #0 [ 367.977244][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.987366][T12860] Call Trace: [ 367.990706][T12860] [ 367.993685][T12860] dump_stack_lvl+0x18c/0x250 [ 367.998528][T12860] ? show_regs_print_info+0x20/0x20 [ 368.003806][T12860] ? load_image+0x420/0x420 [ 368.008385][T12860] ? __might_sleep+0xe0/0xe0 [ 368.013048][T12860] ? __lock_acquire+0x7d80/0x7d80 [ 368.018138][T12860] should_fail_ex+0x394/0x4c0 [ 368.022889][T12860] should_failslab+0x9/0x20 [ 368.027480][T12860] slab_pre_alloc_hook+0x59/0x300 [ 368.032628][T12860] ? get_fs_type+0x3f9/0x480 [ 368.037297][T12860] ? tomoyo_encode+0x2ad/0x570 [ 368.042140][T12860] ? tomoyo_encode+0x2ad/0x570 [ 368.046982][T12860] __kmem_cache_alloc_node+0x53/0x250 [ 368.052447][T12860] ? tomoyo_encode+0x2ad/0x570 [ 368.057285][T12860] __kmalloc+0xa7/0x240 [ 368.061526][T12860] tomoyo_encode+0x2ad/0x570 [ 368.066214][T12860] tomoyo_mount_permission+0x50b/0x9d0 [ 368.071766][T12860] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 368.077498][T12860] ? kasan_set_track+0x4e/0x70 [ 368.082321][T12860] ? tomoyo_get_name+0x570/0x570 [ 368.087309][T12860] ? user_path_at_empty+0x4c/0x60 [ 368.092409][T12860] ? kasan_quarantine_put+0xd8/0x220 [ 368.097752][T12860] ? lockdep_hardirqs_on+0x98/0x150 [ 368.103103][T12860] security_sb_mount+0x87/0xc0 [ 368.107918][T12860] path_mount+0xbc/0xfa0 [ 368.112201][T12860] ? kmem_cache_free+0xf8/0x290 [ 368.117187][T12860] __se_sys_mount+0x2e7/0x3d0 [ 368.121905][T12860] ? __x64_sys_mount+0xc0/0xc0 [ 368.126711][T12860] ? lockdep_hardirqs_on+0x98/0x150 [ 368.131990][T12860] ? __x64_sys_mount+0x20/0xc0 [ 368.136800][T12860] do_syscall_64+0x55/0xb0 [ 368.141255][T12860] ? clear_bhb_loop+0x40/0x90 [ 368.145971][T12860] ? clear_bhb_loop+0x40/0x90 [ 368.150696][T12860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.156638][T12860] RIP: 0033:0x7f430119e159 [ 368.161093][T12860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.180897][T12860] RSP: 002b:00007f4301fa2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.189414][T12860] RAX: ffffffffffffffda RBX: 00007f4301425fa0 RCX: 00007f430119e159 [ 368.197458][T12860] RDX: 0000200000000380 RSI: 0000200000000300 RDI: 0000000000000000 [ 368.206260][T12860] RBP: 00007f430123503b R08: 00002000000003c0 R09: 0000000000000000 [ 368.214277][T12860] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 368.222285][T12860] R13: 00007f4301426038 R14: 00007f4301425fa0 R15: 00007ffe4ba3c1b8 [ 368.230315][T12860] [ 368.240190][T12862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 368.250771][T12806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.258582][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.335547][T12806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.486656][T12806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.507289][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.612265][T12806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.824765][T12879] loop2: detected capacity change from 0 to 16 [ 368.872012][T12879] erofs: (device loop2): mounted with root inode @ nid 36. [ 368.914199][T12879] overlayfs: missing 'lowerdir' [ 368.928226][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.007337][T12806] hsr_slave_0: entered promiscuous mode [ 369.059158][T12884] FAULT_INJECTION: forcing a failure. [ 369.059158][T12884] name failslab, interval 1, probability 0, space 0, times 0 [ 369.079514][T12806] hsr_slave_1: entered promiscuous mode [ 369.109569][T12806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.129169][T12884] CPU: 1 PID: 12884 Comm: syz.3.2407 Not tainted syzkaller #0 [ 369.136759][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.146872][T12884] Call Trace: [ 369.150194][T12884] [ 369.153161][T12884] dump_stack_lvl+0x18c/0x250 [ 369.157883][T12884] ? show_regs_print_info+0x20/0x20 [ 369.163119][T12884] ? load_image+0x420/0x420 [ 369.167668][T12884] ? __might_sleep+0xe0/0xe0 [ 369.172304][T12884] ? __lock_acquire+0x7d80/0x7d80 [ 369.177365][T12884] should_fail_ex+0x394/0x4c0 [ 369.182094][T12884] should_failslab+0x9/0x20 [ 369.186648][T12884] slab_pre_alloc_hook+0x59/0x300 [ 369.191730][T12884] ? kvmalloc_node+0x70/0x180 [ 369.196449][T12884] ? kvmalloc_node+0x70/0x180 [ 369.201173][T12884] __kmem_cache_alloc_node+0x53/0x250 [ 369.206598][T12884] ? kvmalloc_node+0x70/0x180 [ 369.211322][T12884] __kmalloc_node+0xa6/0x240 [ 369.215964][T12884] kvmalloc_node+0x70/0x180 [ 369.220508][T12884] bpf_int_jit_compile+0x375/0x1240 [ 369.225755][T12884] ? emit_bpf_dispatcher+0x1060/0x1060 [ 369.231267][T12884] ? rcu_is_watching+0x15/0xb0 [ 369.236073][T12884] bpf_prog_select_runtime+0x490/0x7d0 [ 369.241581][T12884] ? bpf_prog_realloc+0x175/0x210 [ 369.246643][T12884] bpf_prepare_filter+0x117f/0x1320 [ 369.251900][T12884] ? seccomp_notify_detach+0x220/0x220 [ 369.257410][T12884] ? bpf_prog_create+0x1f0/0x1f0 [ 369.262386][T12884] ? rcu_is_watching+0x15/0xb0 [ 369.267193][T12884] ? kmemdup+0x55/0x70 [ 369.271305][T12884] ? __asan_memcpy+0x40/0x70 [ 369.275941][T12884] bpf_prog_create_from_user+0x2d0/0x420 [ 369.281622][T12884] ? seccomp_notify_detach+0x220/0x220 [ 369.287123][T12884] do_seccomp+0x794/0xdc0 [ 369.291671][T12884] ? prctl_set_seccomp+0x60/0x60 [ 369.296690][T12884] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 369.302730][T12884] ? lockdep_hardirqs_on+0x98/0x150 [ 369.308002][T12884] do_syscall_64+0x55/0xb0 [ 369.312459][T12884] ? clear_bhb_loop+0x40/0x90 [ 369.317171][T12884] ? clear_bhb_loop+0x40/0x90 [ 369.321887][T12884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.327841][T12884] RIP: 0033:0x7f5ccd19e159 [ 369.332298][T12884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.352150][T12884] RSP: 002b:00007f5ccdfd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 369.360624][T12884] RAX: ffffffffffffffda RBX: 00007f5ccd425fa0 RCX: 00007f5ccd19e159 [ 369.368628][T12884] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 369.376724][T12884] RBP: 00007f5ccd23503b R08: 0000000000000000 R09: 0000000000000000 [ 369.384730][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.392737][T12884] R13: 00007f5ccd426038 R14: 00007f5ccd425fa0 R15: 00007ffcff22fef8 [ 369.400762][T12884] [ 369.405447][T12806] Cannot create hsr debugfs directory [ 369.534621][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.734451][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.990412][ T51] Bluetooth: hci0: command tx timeout [ 370.151519][T12898] FAULT_INJECTION: forcing a failure. [ 370.151519][T12898] name failslab, interval 1, probability 0, space 0, times 0 [ 370.167387][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.214057][T12898] CPU: 1 PID: 12898 Comm: syz.2.2410 Not tainted syzkaller #0 [ 370.221615][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.231985][T12898] Call Trace: [ 370.235319][T12898] [ 370.238318][T12898] dump_stack_lvl+0x18c/0x250 [ 370.243083][T12898] ? show_regs_print_info+0x20/0x20 [ 370.248437][T12898] ? load_image+0x420/0x420 [ 370.253212][T12898] ? __might_sleep+0xe0/0xe0 [ 370.257879][T12898] ? __lock_acquire+0x7d80/0x7d80 [ 370.263001][T12898] should_fail_ex+0x394/0x4c0 [ 370.267766][T12898] should_failslab+0x9/0x20 [ 370.272347][T12898] slab_pre_alloc_hook+0x59/0x300 [ 370.277440][T12898] ? get_fs_type+0x3f9/0x480 [ 370.282103][T12898] ? tomoyo_encode+0x2ad/0x570 [ 370.286931][T12898] ? tomoyo_encode+0x2ad/0x570 [ 370.291763][T12898] __kmem_cache_alloc_node+0x53/0x250 [ 370.297223][T12898] ? tomoyo_encode+0x2ad/0x570 [ 370.302055][T12898] __kmalloc+0xa7/0x240 [ 370.306282][T12898] tomoyo_encode+0x2ad/0x570 [ 370.310946][T12898] tomoyo_mount_permission+0x50b/0x9d0 [ 370.316470][T12898] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 370.322174][T12898] ? kasan_set_track+0x4e/0x70 [ 370.327041][T12898] ? tomoyo_get_name+0x570/0x570 [ 370.332048][T12898] ? user_path_at_empty+0x4c/0x60 [ 370.337185][T12898] ? kasan_quarantine_put+0xd8/0x220 [ 370.342542][T12898] ? lockdep_hardirqs_on+0x98/0x150 [ 370.347873][T12898] security_sb_mount+0x87/0xc0 [ 370.352715][T12898] path_mount+0xbc/0xfa0 [ 370.357013][T12898] ? kmem_cache_free+0xf8/0x290 [ 370.361940][T12898] __se_sys_mount+0x2e7/0x3d0 [ 370.366680][T12898] ? __x64_sys_mount+0xc0/0xc0 [ 370.371507][T12898] ? lockdep_hardirqs_on+0x98/0x150 [ 370.376773][T12898] ? __x64_sys_mount+0x20/0xc0 [ 370.381611][T12898] do_syscall_64+0x55/0xb0 [ 370.386202][T12898] ? clear_bhb_loop+0x40/0x90 [ 370.391022][T12898] ? clear_bhb_loop+0x40/0x90 [ 370.395770][T12898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.401833][T12898] RIP: 0033:0x7fe11239e159 [ 370.406303][T12898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.426069][T12898] RSP: 002b:00007fe1131fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 370.434639][T12898] RAX: ffffffffffffffda RBX: 00007fe112625fa0 RCX: 00007fe11239e159 [ 370.442674][T12898] RDX: 0000200000000380 RSI: 0000200000000300 RDI: 0000000000000000 [ 370.450706][T12898] RBP: 00007fe11243503b R08: 00002000000003c0 R09: 0000000000000000 [ 370.458739][T12898] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 370.466777][T12898] R13: 00007fe112626038 R14: 00007fe112625fa0 R15: 00007ffd5025fc88 [ 370.474845][T12898] [ 370.907412][T12916] loop4: detected capacity change from 0 to 16 [ 370.939977][T12916] erofs: (device loop4): mounted with root inode @ nid 36. [ 371.025646][T12916] overlayfs: missing 'lowerdir' [ 371.362151][T12925] loop4: detected capacity change from 0 to 1764 [ 371.766391][T12935] FAULT_INJECTION: forcing a failure. [ 371.766391][T12935] name fail_futex, interval 1, probability 0, space 0, times 0 [ 371.781719][T12935] CPU: 0 PID: 12935 Comm: syz.2.2421 Not tainted syzkaller #0 [ 371.789259][T12935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.799372][T12935] Call Trace: [ 371.802716][T12935] [ 371.805706][T12935] dump_stack_lvl+0x18c/0x250 [ 371.810510][T12935] ? show_regs_print_info+0x20/0x20 [ 371.815775][T12935] ? load_image+0x420/0x420 [ 371.820355][T12935] ? __lock_acquire+0x1336/0x7d80 [ 371.825491][T12935] should_fail_ex+0x394/0x4c0 [ 371.830254][T12935] get_futex_key+0x136/0x1030 [ 371.835008][T12935] ? futex_setup_timer+0xc0/0xc0 [ 371.840011][T12935] futex_wake+0x127/0x4f0 [ 371.844438][T12935] ? futex_wake_mark+0x150/0x150 [ 371.849449][T12935] do_futex+0x35d/0x3e0 [ 371.853662][T12935] ? __might_fault+0xaa/0x120 [ 371.858408][T12935] ? __ia32_sys_get_robust_list+0x110/0x110 [ 371.864455][T12935] ? __might_fault+0xc6/0x120 [ 371.869191][T12935] mm_release+0x184/0x3a0 [ 371.873595][T12935] ? exit_mm_release+0x30/0x30 [ 371.878439][T12935] ? lockdep_hardirqs_on+0x98/0x150 [ 371.883711][T12935] exit_mm+0xa4/0x340 [ 371.887845][T12935] ? sysctl_delayacct+0x220/0x220 [ 371.892920][T12935] ? do_exit+0x2530/0x2530 [ 371.897407][T12935] do_exit+0x909/0x2530 [ 371.901633][T12935] ? put_task_struct+0xc0/0xc0 [ 371.906464][T12935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 371.912499][T12935] ? get_signal+0x100e/0x1390 [ 371.917237][T12935] ? lock_chain_count+0x20/0x20 [ 371.922141][T12935] ? _raw_spin_lock_irq+0xbb/0xf0 [ 371.927327][T12935] do_group_exit+0x22d/0x2f0 [ 371.931987][T12935] ? lockdep_hardirqs_on+0x98/0x150 [ 371.937256][T12935] get_signal+0x12a6/0x1390 [ 371.941836][T12935] arch_do_signal_or_restart+0xc2/0x7b0 [ 371.947474][T12935] ? __ia32_sys_get_robust_list+0x110/0x110 [ 371.953418][T12935] ? slab_free_freelist_hook+0x130/0x1a0 [ 371.959125][T12935] ? get_sigframe_size+0x20/0x20 [ 371.964230][T12935] ? exit_to_user_mode_loop+0x3b/0x110 [ 371.969765][T12935] exit_to_user_mode_loop+0x70/0x110 [ 371.975118][T12935] exit_to_user_mode_prepare+0xee/0x180 [ 371.980724][T12935] syscall_exit_to_user_mode+0x1a/0x50 [ 371.986252][T12935] do_syscall_64+0x61/0xb0 [ 371.990724][T12935] ? clear_bhb_loop+0x40/0x90 [ 371.995479][T12935] ? clear_bhb_loop+0x40/0x90 [ 372.000209][T12935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.006183][T12935] RIP: 0033:0x7fe11239e159 [ 372.010660][T12935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.030339][T12935] RSP: 002b:00007fe1131fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 372.038815][T12935] RAX: fffffffffffffe00 RBX: 00007fe112625fa8 RCX: 00007fe11239e159 [ 372.046841][T12935] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe112625fa8 [ 372.055042][T12935] RBP: 00007fe112625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 372.063076][T12935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.071202][T12935] R13: 00007fe112626038 R14: 00007ffd5025fba0 R15: 00007ffd5025fc88 [ 372.079245][T12935] [ 372.089093][ T51] Bluetooth: hci0: command tx timeout [ 372.659445][T12806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 372.681247][T12806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.801774][T12806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.835452][T12806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.928170][T12944] overlayfs: missing 'lowerdir' [ 373.234867][ T42] hsr_slave_0: left promiscuous mode [ 373.248796][ T42] hsr_slave_1: left promiscuous mode [ 373.275515][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.296681][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.320112][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.338021][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.359965][ T42] bridge_slave_1: left allmulticast mode [ 373.365707][ T42] bridge_slave_1: left promiscuous mode [ 373.390564][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.419784][ T42] bridge_slave_0: left allmulticast mode [ 373.425537][ T42] bridge_slave_0: left promiscuous mode [ 373.432848][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.523217][ T42] veth1_macvtap: left promiscuous mode [ 373.528886][ T42] veth0_macvtap: left promiscuous mode [ 373.554460][ T42] veth1_vlan: left promiscuous mode [ 373.560688][ T42] veth0_vlan: left promiscuous mode [ 373.907181][ T42] bond11 (unregistering): Released all slaves [ 373.961623][ T42] bond10 (unregistering): Released all slaves [ 374.149328][ T51] Bluetooth: hci0: command tx timeout [ 374.315748][ T42] bond9 (unregistering): Released all slaves [ 374.392892][ T42] bond8 (unregistering): Released all slaves [ 374.604285][ T42] bond7 (unregistering): Released all slaves [ 374.710206][ T42] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 374.850763][ T42] bond6 (unregistering): Released all slaves [ 374.888136][T12971] loop2: detected capacity change from 0 to 16 [ 374.933965][T12971] erofs: (device loop2): mounted with root inode @ nid 36. [ 374.962278][ T42] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 375.012851][T12971] overlayfs: missing 'workdir' [ 375.106977][ T42] bond5 (unregistering): Released all slaves [ 375.230631][ T42] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 375.360391][ T42] bond4 (unregistering): Released all slaves [ 375.499443][ T42] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 375.640086][ T42] bond3 (unregistering): Released all slaves [ 375.774442][ T42] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 375.993188][ T42] bond2 (unregistering): Released all slaves [ 376.033306][ T42] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 376.201257][ T42] bond1 (unregistering): Released all slaves [ 377.010681][ T42] team0 (unregistering): Port device team_slave_1 removed [ 377.075101][ T42] team0 (unregistering): Port device team_slave_0 removed [ 377.131602][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.192874][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.588203][ T42] bond0 (unregistering): Released all slaves [ 377.683214][T12957] @ÿ: renamed from veth0_vlan (while UP) [ 377.838685][T12806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.935227][T12806] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.963303][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.970587][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.032101][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.039402][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.256973][T12997] loop3: detected capacity change from 0 to 16 [ 378.316365][T12997] erofs: (device loop3): mounted with root inode @ nid 36. [ 378.422096][T12997] overlayfs: missing 'workdir' [ 378.908623][T13012] loop3: detected capacity change from 0 to 2048 [ 378.924075][T12806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.948705][T13014] md0: using deprecated bitmap file support [ 378.965264][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.972099][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.979447][T13014] md0: error: failed to get bitmap file [ 379.112119][T12806] veth0_vlan: entered promiscuous mode [ 379.153818][T12806] veth1_vlan: entered promiscuous mode [ 379.266712][T12806] veth0_macvtap: entered promiscuous mode [ 379.315058][T12806] veth1_macvtap: entered promiscuous mode [ 379.394619][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.410059][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.428924][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.442332][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.459124][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.478989][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.501396][T12806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.544435][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.566044][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.587559][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.614121][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.665586][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.714447][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.735144][T12806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.750087][T13025] syz_tun: Device is already in use. [ 379.777387][T12806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.796789][T12806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.816388][T12806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.831012][T12806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.968504][T13027] loop3: detected capacity change from 0 to 16 [ 379.986449][T13027] erofs: (device loop3): mounted with root inode @ nid 36. [ 380.020194][T13027] overlayfs: missing 'workdir' [ 380.084764][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.132354][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.226184][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.252991][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.326106][T13031] FAULT_INJECTION: forcing a failure. [ 380.326106][T13031] name failslab, interval 1, probability 0, space 0, times 0 [ 380.400168][T13031] CPU: 1 PID: 13031 Comm: syz.3.2451 Not tainted syzkaller #0 [ 380.407738][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.418144][T13031] Call Trace: [ 380.421481][T13031] [ 380.424466][T13031] dump_stack_lvl+0x18c/0x250 [ 380.429211][T13031] ? show_regs_print_info+0x20/0x20 [ 380.434484][T13031] ? load_image+0x420/0x420 [ 380.439072][T13031] ? __might_sleep+0xe0/0xe0 [ 380.443729][T13031] ? __lock_acquire+0x7d80/0x7d80 [ 380.448817][T13031] should_fail_ex+0x394/0x4c0 [ 380.453565][T13031] should_failslab+0x9/0x20 [ 380.458146][T13031] slab_pre_alloc_hook+0x59/0x300 [ 380.463284][T13031] kmem_cache_alloc+0x5a/0x2c0 [ 380.468135][T13031] ? fcntl_setlk+0xaa/0x1070 [ 380.472816][T13031] fcntl_setlk+0xaa/0x1070 [ 380.477320][T13031] ? __might_fault+0xaa/0x120 [ 380.482063][T13031] ? vfs_lock_file+0x110/0x110 [ 380.486907][T13031] ? __might_fault+0xaa/0x120 [ 380.492342][T13031] ? __might_fault+0xc6/0x120 [ 380.497113][T13031] ? __might_fault+0xaa/0x120 [ 380.501869][T13031] do_fcntl+0x88e/0x14a0 [ 380.506214][T13031] ? kill_fasync+0x4b0/0x4b0 [ 380.510898][T13031] ? __fget_files+0x28/0x460 [ 380.515549][T13031] ? __fget_files+0x3fc/0x460 [ 380.520303][T13031] ? tomoyo_file_fcntl+0x7b/0x220 [ 380.525396][T13031] ? bpf_lsm_file_fcntl+0x9/0x10 [ 380.530408][T13031] ? security_file_fcntl+0x80/0xa0 [ 380.535582][T13031] __se_sys_fcntl+0xc9/0x1a0 [ 380.540210][T13031] do_syscall_64+0x55/0xb0 [ 380.544663][T13031] ? clear_bhb_loop+0x40/0x90 [ 380.549377][T13031] ? clear_bhb_loop+0x40/0x90 [ 380.554098][T13031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.560028][T13031] RIP: 0033:0x7f5ccd19e159 [ 380.564485][T13031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.584132][T13031] RSP: 002b:00007f5ccdfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 380.592592][T13031] RAX: ffffffffffffffda RBX: 00007f5ccd425fa0 RCX: 00007f5ccd19e159 [ 380.600600][T13031] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000003 [ 380.608608][T13031] RBP: 00007f5ccd23503b R08: 0000000000000000 R09: 0000000000000000 [ 380.616608][T13031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.624621][T13031] R13: 00007f5ccd426038 R14: 00007f5ccd425fa0 R15: 00007ffcff22fef8 [ 380.632730][T13031] [ 380.917803][T13040] xt_hashlimit: size too large, truncated to 1048576 [ 380.983462][T13030] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 381.713355][T13054] loop3: detected capacity change from 0 to 16 [ 381.753189][T13054] erofs: (device loop3): mounted with root inode @ nid 36. [ 382.828168][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.838295][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.847886][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.859978][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.868080][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 382.876706][T13069] overlayfs: failed to clone upperpath [ 382.889653][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.931913][ T3535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.088488][ T3535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.232877][ T3535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.362376][ T3535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.732915][T13077] overlayfs: failed to resolve './file0': -2 [ 383.806224][T13066] chnl_net:caif_netlink_parms(): no params data found [ 384.512034][T13066] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.527483][T13066] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.535400][T13066] bridge_slave_0: entered allmulticast mode [ 384.550441][T13066] bridge_slave_0: entered promiscuous mode [ 384.685318][T13066] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.701935][T13066] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.725423][T13066] bridge_slave_1: entered allmulticast mode [ 384.745773][T13066] bridge_slave_1: entered promiscuous mode [ 384.857154][T13104] overlayfs: failed to resolve './file0': -2 [ 384.949265][ T5786] Bluetooth: hci2: command tx timeout [ 384.971511][T13066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.984435][T13066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.238114][T13117] FAULT_INJECTION: forcing a failure. [ 385.238114][T13117] name failslab, interval 1, probability 0, space 0, times 0 [ 385.252331][T13066] team0: Port device team_slave_0 added [ 385.272316][T13066] team0: Port device team_slave_1 added [ 385.291542][T13117] CPU: 1 PID: 13117 Comm: syz.0.2480 Not tainted syzkaller #0 [ 385.299118][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.309233][T13117] Call Trace: [ 385.312566][T13117] [ 385.315553][T13117] dump_stack_lvl+0x18c/0x250 [ 385.320307][T13117] ? show_regs_print_info+0x20/0x20 [ 385.325576][T13117] ? load_image+0x420/0x420 [ 385.330153][T13117] ? __might_sleep+0xe0/0xe0 [ 385.334820][T13117] ? __lock_acquire+0x7d80/0x7d80 [ 385.339924][T13117] should_fail_ex+0x394/0x4c0 [ 385.344676][T13117] should_failslab+0x9/0x20 [ 385.349255][T13117] slab_pre_alloc_hook+0x59/0x300 [ 385.354347][T13117] ? blk_mq_alloc_tag_set+0x4e4/0x1020 [ 385.359888][T13117] ? blk_mq_alloc_tag_set+0x4e4/0x1020 [ 385.365410][T13117] __kmem_cache_alloc_node+0x53/0x250 [ 385.370863][T13117] ? blk_mq_alloc_tag_set+0x4e4/0x1020 [ 385.376388][T13117] __kmalloc_node+0xa6/0x240 [ 385.381047][T13117] ? mutex_unlock+0x10/0x10 [ 385.385631][T13117] blk_mq_alloc_tag_set+0x4e4/0x1020 [ 385.390994][T13117] loop_add+0x2eb/0x990 [ 385.395272][T13117] loop_control_ioctl+0x128/0x590 [ 385.400358][T13117] ? loop_set_hw_queue_depth+0x110/0x110 [ 385.406038][T13117] ? bpf_lsm_file_ioctl+0x9/0x10 [ 385.411016][T13117] ? security_file_ioctl+0x80/0xa0 [ 385.416166][T13117] ? loop_set_hw_queue_depth+0x110/0x110 [ 385.421830][T13117] __se_sys_ioctl+0xfd/0x170 [ 385.426465][T13117] do_syscall_64+0x55/0xb0 [ 385.430925][T13117] ? clear_bhb_loop+0x40/0x90 [ 385.435636][T13117] ? clear_bhb_loop+0x40/0x90 [ 385.440351][T13117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.446286][T13117] RIP: 0033:0x7fedc259e159 [ 385.450745][T13117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.470387][T13117] RSP: 002b:00007fedc3470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.478858][T13117] RAX: ffffffffffffffda RBX: 00007fedc2825fa0 RCX: 00007fedc259e159 [ 385.486860][T13117] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 385.494862][T13117] RBP: 00007fedc263503b R08: 0000000000000000 R09: 0000000000000000 [ 385.502895][T13117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.510894][T13117] R13: 00007fedc2826038 R14: 00007fedc2825fa0 R15: 00007ffec9a79e58 [ 385.518908][T13117] [ 385.697130][T13066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.735498][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.803038][T13066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.944345][T13126] FAULT_INJECTION: forcing a failure. [ 385.944345][T13126] name failslab, interval 1, probability 0, space 0, times 0 [ 385.969135][T13126] CPU: 1 PID: 13126 Comm: syz.0.2483 Not tainted syzkaller #0 [ 385.976689][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.986801][T13126] Call Trace: [ 385.990128][T13126] [ 385.993157][T13126] dump_stack_lvl+0x18c/0x250 [ 385.997900][T13126] ? show_regs_print_info+0x20/0x20 [ 386.003190][T13126] ? load_image+0x420/0x420 [ 386.007748][T13126] ? __might_sleep+0xe0/0xe0 [ 386.012403][T13126] ? __lock_acquire+0x7d80/0x7d80 [ 386.017517][T13126] ? mtree_load+0x109/0x840 [ 386.022125][T13126] should_fail_ex+0x394/0x4c0 [ 386.026868][T13126] should_failslab+0x9/0x20 [ 386.031459][T13126] slab_pre_alloc_hook+0x59/0x300 [ 386.036529][T13126] ? can_vma_merge_before+0x6e/0x280 [ 386.041891][T13126] kmem_cache_alloc+0x5a/0x2c0 [ 386.046703][T13126] ? vm_area_dup+0x27/0x270 [ 386.051249][T13126] vm_area_dup+0x27/0x270 [ 386.055616][T13126] __split_vma+0x1a8/0xc20 [ 386.060082][T13126] ? mmap_write_unlock+0x160/0x160 [ 386.065267][T13126] ? split_vma+0x8f/0x110 [ 386.069645][T13126] madvise_update_vma+0x44e/0xda0 [ 386.074717][T13126] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 386.080475][T13126] ? down_write_killable+0x181/0x230 [ 386.085818][T13126] do_madvise+0x145c/0x3790 [ 386.090375][T13126] ? madvise_set_anon_name+0x440/0x440 [ 386.095879][T13126] ? schedule+0xc7/0x170 [ 386.100157][T13126] ? futex_wait_queue+0x27/0x1b0 [ 386.105137][T13126] ? futex_wait_queue+0x138/0x1b0 [ 386.110193][T13126] ? futex_unqueue+0xcb/0xf0 [ 386.114818][T13126] ? futex_wait+0x4a7/0x5c0 [ 386.119367][T13126] ? futex_wait_setup+0x270/0x270 [ 386.124440][T13126] ? file_end_write+0x159/0x250 [ 386.129329][T13126] ? vfs_write+0x5de/0x9a0 [ 386.133781][T13126] ? do_futex+0x2ff/0x3e0 [ 386.138153][T13126] ? __ia32_sys_get_robust_list+0x110/0x110 [ 386.144094][T13126] ? lock_chain_count+0x20/0x20 [ 386.148995][T13126] __x64_sys_madvise+0xa6/0xc0 [ 386.153814][T13126] do_syscall_64+0x55/0xb0 [ 386.158267][T13126] ? clear_bhb_loop+0x40/0x90 [ 386.162982][T13126] ? clear_bhb_loop+0x40/0x90 [ 386.167696][T13126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.173626][T13126] RIP: 0033:0x7fedc259e159 [ 386.178079][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.197725][T13126] RSP: 002b:00007fedc3470028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 386.206204][T13126] RAX: ffffffffffffffda RBX: 00007fedc2825fa0 RCX: 00007fedc259e159 [ 386.214213][T13126] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 386.222218][T13126] RBP: 00007fedc263503b R08: 0000000000000000 R09: 0000000000000000 [ 386.230223][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.238224][T13126] R13: 00007fedc2826038 R14: 00007fedc2825fa0 R15: 00007ffec9a79e58 [ 386.246242][T13126] [ 386.319775][T13066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.326830][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.475952][T13066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.551227][T13129] syz_tun: Device is already in use. [ 386.702828][T13066] hsr_slave_0: entered promiscuous mode [ 386.747771][T13141] loop3: detected capacity change from 0 to 164 [ 386.754882][T13066] hsr_slave_1: entered promiscuous mode [ 386.762876][T13066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.779085][T13066] Cannot create hsr debugfs directory [ 387.029430][ T5786] Bluetooth: hci2: command tx timeout [ 387.502389][ T3535] hsr_slave_0: left promiscuous mode [ 387.559382][ T3535] hsr_slave_1: left promiscuous mode [ 387.609320][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.616839][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.654073][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.679755][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.698560][ T3535] bridge_slave_1: left allmulticast mode [ 387.705048][T13159] FAULT_INJECTION: forcing a failure. [ 387.705048][T13159] name failslab, interval 1, probability 0, space 0, times 0 [ 387.718304][ T3535] bridge_slave_1: left promiscuous mode [ 387.748617][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.766441][ T3535] bridge_slave_0: left allmulticast mode [ 387.772335][ T3535] bridge_slave_0: left promiscuous mode [ 387.778166][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.786662][T13159] CPU: 0 PID: 13159 Comm: syz.3.2493 Not tainted syzkaller #0 [ 387.794199][T13159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.804324][T13159] Call Trace: [ 387.807650][T13159] [ 387.810625][T13159] dump_stack_lvl+0x18c/0x250 [ 387.815372][T13159] ? show_regs_print_info+0x20/0x20 [ 387.820639][T13159] ? load_image+0x420/0x420 [ 387.825211][T13159] ? __might_sleep+0xe0/0xe0 [ 387.829877][T13159] ? __lock_acquire+0x7d80/0x7d80 [ 387.835021][T13159] ? mtree_load+0x109/0x840 [ 387.839593][T13159] should_fail_ex+0x394/0x4c0 [ 387.844348][T13159] should_failslab+0x9/0x20 [ 387.848919][T13159] slab_pre_alloc_hook+0x59/0x300 [ 387.854000][T13159] ? can_vma_merge_before+0x6e/0x280 [ 387.859337][T13159] kmem_cache_alloc+0x5a/0x2c0 [ 387.864141][T13159] ? vm_area_dup+0x27/0x270 [ 387.868679][T13159] vm_area_dup+0x27/0x270 [ 387.873049][T13159] __split_vma+0x1a8/0xc20 [ 387.877522][T13159] ? mmap_write_unlock+0x160/0x160 [ 387.882686][T13159] ? split_vma+0x8f/0x110 [ 387.887056][T13159] madvise_update_vma+0x44e/0xda0 [ 387.892126][T13159] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 387.897891][T13159] ? down_write_killable+0x181/0x230 [ 387.903232][T13159] do_madvise+0x145c/0x3790 [ 387.907803][T13159] ? madvise_set_anon_name+0x440/0x440 [ 387.913299][T13159] ? schedule+0xc7/0x170 [ 387.917581][T13159] ? futex_wait_queue+0x27/0x1b0 [ 387.922554][T13159] ? futex_wait_queue+0x138/0x1b0 [ 387.927616][T13159] ? futex_unqueue+0xcb/0xf0 [ 387.932237][T13159] ? futex_wait+0x4a7/0x5c0 [ 387.936781][T13159] ? futex_wait_setup+0x270/0x270 [ 387.941866][T13159] ? file_end_write+0x159/0x250 [ 387.946764][T13159] ? vfs_write+0x5de/0x9a0 [ 387.951408][T13159] ? do_futex+0x2ff/0x3e0 [ 387.955779][T13159] ? __ia32_sys_get_robust_list+0x110/0x110 [ 387.961725][T13159] ? lock_chain_count+0x20/0x20 [ 387.966626][T13159] __x64_sys_madvise+0xa6/0xc0 [ 387.971437][T13159] do_syscall_64+0x55/0xb0 [ 387.975900][T13159] ? clear_bhb_loop+0x40/0x90 [ 387.980612][T13159] ? clear_bhb_loop+0x40/0x90 [ 387.985327][T13159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.991257][T13159] RIP: 0033:0x7f5ccd19e159 [ 387.995713][T13159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.015362][T13159] RSP: 002b:00007f5ccdfd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 388.023819][T13159] RAX: ffffffffffffffda RBX: 00007f5ccd425fa0 RCX: 00007f5ccd19e159 [ 388.031831][T13159] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 388.039837][T13159] RBP: 00007f5ccd23503b R08: 0000000000000000 R09: 0000000000000000 [ 388.047850][T13159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.055852][T13159] R13: 00007f5ccd426038 R14: 00007f5ccd425fa0 R15: 00007ffcff22fef8 [ 388.063878][T13159] [ 388.171290][ T3535] veth1_macvtap: left promiscuous mode [ 388.177024][ T3535] veth0_macvtap: left promiscuous mode [ 388.192404][ T3535] veth1_vlan: left promiscuous mode [ 388.208376][ T3535] veth0_vlan: left promiscuous mode [ 388.727375][ T3535] bond13 (unregistering): Released all slaves [ 388.773512][ T3535] bond12 (unregistering): Released all slaves [ 388.824607][ T3535] bond11 (unregistering): Released all slaves [ 388.876469][ T3535] bond10 (unregistering): Released all slaves [ 388.926686][ T3535] bond9 (unregistering): Released all slaves [ 389.004543][ T3535] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 389.066235][ T3535] bond8 (unregistering): Released all slaves [ 389.109109][ T5786] Bluetooth: hci2: command tx timeout [ 389.126109][ T3535] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 389.177870][ T3535] bond7 (unregistering): Released all slaves [ 389.232997][ T3535] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 389.299775][ T3535] bond6 (unregistering): Released all slaves [ 389.351453][ T3535] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 389.420675][ T3535] bond5 (unregistering): Released all slaves [ 389.526775][ T3535] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 389.584089][ T3535] bond4 (unregistering): Released all slaves [ 389.671542][ T3535] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 389.688550][T13183] FAULT_INJECTION: forcing a failure. [ 389.688550][T13183] name failslab, interval 1, probability 0, space 0, times 0 [ 389.709812][T13183] CPU: 0 PID: 13183 Comm: syz.3.2499 Not tainted syzkaller #0 [ 389.717374][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.727501][T13183] Call Trace: [ 389.730812][T13183] [ 389.733768][T13183] dump_stack_lvl+0x18c/0x250 [ 389.738512][T13183] ? show_regs_print_info+0x20/0x20 [ 389.744043][T13183] ? load_image+0x420/0x420 [ 389.748626][T13183] ? __might_sleep+0xe0/0xe0 [ 389.753262][T13183] ? __lock_acquire+0x7d80/0x7d80 [ 389.758525][T13183] should_fail_ex+0x394/0x4c0 [ 389.763264][T13183] should_failslab+0x9/0x20 [ 389.767820][T13183] slab_pre_alloc_hook+0x59/0x300 [ 389.772891][T13183] ? group_cpus_evenly+0xcb/0x5a0 [ 389.777961][T13183] ? group_cpus_evenly+0xcb/0x5a0 [ 389.783033][T13183] __kmem_cache_alloc_node+0x53/0x250 [ 389.788456][T13183] ? group_cpus_evenly+0xcb/0x5a0 [ 389.793539][T13183] __kmalloc+0xa7/0x240 [ 389.797741][T13183] group_cpus_evenly+0xcb/0x5a0 [ 389.802627][T13183] ? sbitmap_find_bit+0x490/0x490 [ 389.807704][T13183] blk_mq_map_queues+0x4d/0x420 [ 389.812593][T13183] ? __kmalloc_node+0xe4/0x240 [ 389.817416][T13183] ? mutex_unlock+0x10/0x10 [ 389.821971][T13183] blk_mq_alloc_tag_set+0x860/0x1020 [ 389.827307][T13183] loop_add+0x2eb/0x990 [ 389.831521][T13183] loop_control_ioctl+0x128/0x590 [ 389.836593][T13183] ? loop_set_hw_queue_depth+0x110/0x110 [ 389.842276][T13183] ? bpf_lsm_file_ioctl+0x9/0x10 [ 389.847252][T13183] ? security_file_ioctl+0x80/0xa0 [ 389.852409][T13183] ? loop_set_hw_queue_depth+0x110/0x110 [ 389.858078][T13183] __se_sys_ioctl+0xfd/0x170 [ 389.862806][T13183] do_syscall_64+0x55/0xb0 [ 389.867437][T13183] ? clear_bhb_loop+0x40/0x90 [ 389.872166][T13183] ? clear_bhb_loop+0x40/0x90 [ 389.876908][T13183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.882852][T13183] RIP: 0033:0x7f5ccd19e159 [ 389.887311][T13183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.906974][T13183] RSP: 002b:00007f5ccdfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.915449][T13183] RAX: ffffffffffffffda RBX: 00007f5ccd425fa0 RCX: 00007f5ccd19e159 [ 389.923473][T13183] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 389.931479][T13183] RBP: 00007f5ccd23503b R08: 0000000000000000 R09: 0000000000000000 [ 389.939511][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.947604][T13183] R13: 00007f5ccd426038 R14: 00007f5ccd425fa0 R15: 00007ffcff22fef8 [ 389.955625][T13183] [ 390.012227][ T3535] bond3 (unregistering): Released all slaves [ 390.043757][ T3535] bond2 (unregistering): Released all slaves [ 390.081867][ T3535] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 390.177623][ T3535] bond1 (unregistering): Released all slaves [ 390.625010][T13193] FAULT_INJECTION: forcing a failure. [ 390.625010][T13193] name failslab, interval 1, probability 0, space 0, times 0 [ 390.642925][T13193] CPU: 1 PID: 13193 Comm: syz.0.2503 Not tainted syzkaller #0 [ 390.650500][T13193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.660672][T13193] Call Trace: [ 390.664018][T13193] [ 390.666995][T13193] dump_stack_lvl+0x18c/0x250 [ 390.671748][T13193] ? show_regs_print_info+0x20/0x20 [ 390.676980][T13193] ? load_image+0x420/0x420 [ 390.681524][T13193] ? __might_sleep+0xe0/0xe0 [ 390.686208][T13193] ? __lock_acquire+0x7d80/0x7d80 [ 390.691263][T13193] ? percpu_ref_put+0x12/0x100 [ 390.696058][T13193] should_fail_ex+0x394/0x4c0 [ 390.700797][T13193] should_failslab+0x9/0x20 [ 390.705368][T13193] slab_pre_alloc_hook+0x59/0x300 [ 390.710559][T13193] kmem_cache_alloc+0x5a/0x2c0 [ 390.715387][T13193] ? vm_area_dup+0x61/0x270 [ 390.719967][T13193] vm_area_dup+0x61/0x270 [ 390.724362][T13193] __split_vma+0x1a8/0xc20 [ 390.728846][T13193] ? mmap_write_unlock+0x160/0x160 [ 390.734012][T13193] ? split_vma+0x8f/0x110 [ 390.738388][T13193] madvise_update_vma+0x44e/0xda0 [ 390.743494][T13193] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 390.749295][T13193] ? down_write_killable+0x181/0x230 [ 390.754662][T13193] do_madvise+0x145c/0x3790 [ 390.759224][T13193] ? __lock_acquire+0x7d80/0x7d80 [ 390.764321][T13193] ? madvise_set_anon_name+0x440/0x440 [ 390.769850][T13193] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 390.775820][T13193] ? _raw_spin_unlock+0x40/0x40 [ 390.780782][T13193] ? preempt_schedule_thunk+0x1a/0x30 [ 390.786471][T13193] ? try_to_wake_up+0x6f5/0x10e0 [ 390.791467][T13193] ? wake_up_q+0xca/0x100 [ 390.795839][T13193] ? futex_wake+0x42a/0x4f0 [ 390.800493][T13193] ? futex_wake_mark+0x150/0x150 [ 390.805506][T13193] ? __lock_acquire+0x7d80/0x7d80 [ 390.810755][T13193] ? file_end_write+0x159/0x250 [ 390.815676][T13193] ? vfs_write+0x5de/0x9a0 [ 390.820182][T13193] ? do_futex+0x35d/0x3e0 [ 390.824593][T13193] ? __ia32_sys_get_robust_list+0x110/0x110 [ 390.830566][T13193] ? lock_chain_count+0x20/0x20 [ 390.835494][T13193] __x64_sys_madvise+0xa6/0xc0 [ 390.840324][T13193] do_syscall_64+0x55/0xb0 [ 390.844798][T13193] ? clear_bhb_loop+0x40/0x90 [ 390.849544][T13193] ? clear_bhb_loop+0x40/0x90 [ 390.854284][T13193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.860251][T13193] RIP: 0033:0x7fedc259e159 [ 390.864724][T13193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.884424][T13193] RSP: 002b:00007fedc3470028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 390.892933][T13193] RAX: ffffffffffffffda RBX: 00007fedc2825fa0 RCX: 00007fedc259e159 [ 390.901030][T13193] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 390.909060][T13193] RBP: 00007fedc263503b R08: 0000000000000000 R09: 0000000000000000 [ 390.917083][T13193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.925092][T13193] R13: 00007fedc2826038 R14: 00007fedc2825fa0 R15: 00007ffec9a79e58 [ 390.933115][T13193] [ 391.189180][ T5786] Bluetooth: hci2: command tx timeout [ 391.547796][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 391.599740][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 391.654499][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.705960][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.054229][T13212] FAULT_INJECTION: forcing a failure. [ 392.054229][T13212] name failslab, interval 1, probability 0, space 0, times 0 [ 392.067283][T13212] CPU: 1 PID: 13212 Comm: syz.3.2511 Not tainted syzkaller #0 [ 392.074817][T13212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.084934][T13212] Call Trace: [ 392.088262][T13212] [ 392.091243][T13212] dump_stack_lvl+0x18c/0x250 [ 392.096011][T13212] ? show_regs_print_info+0x20/0x20 [ 392.101312][T13212] ? load_image+0x420/0x420 [ 392.105961][T13212] ? __might_sleep+0xe0/0xe0 [ 392.110619][T13212] ? __lock_acquire+0x7d80/0x7d80 [ 392.115706][T13212] ? mtree_load+0x109/0x840 [ 392.120311][T13212] should_fail_ex+0x394/0x4c0 [ 392.125070][T13212] should_failslab+0x9/0x20 [ 392.129644][T13212] slab_pre_alloc_hook+0x59/0x300 [ 392.134741][T13212] ? can_vma_merge_before+0x6e/0x280 [ 392.140280][T13212] kmem_cache_alloc+0x5a/0x2c0 [ 392.145113][T13212] ? vm_area_dup+0x27/0x270 [ 392.149674][T13212] vm_area_dup+0x27/0x270 [ 392.154057][T13212] __split_vma+0x1a8/0xc20 [ 392.158538][T13212] ? mmap_write_unlock+0x160/0x160 [ 392.163687][T13212] ? split_vma+0x8f/0x110 [ 392.168043][T13212] madvise_update_vma+0x44e/0xda0 [ 392.173126][T13212] ? __ia32_sys_process_madvise+0xc0/0xc0 [ 392.178910][T13212] ? down_write_killable+0x181/0x230 [ 392.184263][T13212] do_madvise+0x145c/0x3790 [ 392.188807][T13212] ? madvise_set_anon_name+0x440/0x440 [ 392.194310][T13212] ? schedule+0xc7/0x170 [ 392.198612][T13212] ? futex_wait_queue+0x27/0x1b0 [ 392.203608][T13212] ? futex_wait_queue+0x138/0x1b0 [ 392.208680][T13212] ? futex_unqueue+0xcb/0xf0 [ 392.213311][T13212] ? futex_wait+0x4a7/0x5c0 [ 392.217860][T13212] ? futex_setup_timer+0xc0/0xc0 [ 392.222831][T13212] ? futex_wait_setup+0x270/0x270 [ 392.227914][T13212] ? file_end_write+0x159/0x250 [ 392.232808][T13212] ? vfs_write+0x5de/0x9a0 [ 392.237308][T13212] ? do_futex+0x2ff/0x3e0 [ 392.241700][T13212] ? __ia32_sys_get_robust_list+0x110/0x110 [ 392.247678][T13212] ? lock_chain_count+0x20/0x20 [ 392.252564][T13212] __x64_sys_madvise+0xa6/0xc0 [ 392.257463][T13212] do_syscall_64+0x55/0xb0 [ 392.261911][T13212] ? clear_bhb_loop+0x40/0x90 [ 392.266651][T13212] ? clear_bhb_loop+0x40/0x90 [ 392.271423][T13212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.277366][T13212] RIP: 0033:0x7f5ccd19e159 [ 392.281850][T13212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.301514][T13212] RSP: 002b:00007f5ccdfd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 392.310002][T13212] RAX: ffffffffffffffda RBX: 00007f5ccd425fa0 RCX: 00007f5ccd19e159 [ 392.318025][T13212] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 392.326019][T13212] RBP: 00007f5ccd23503b R08: 0000000000000000 R09: 0000000000000000 [ 392.334024][T13212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.342054][T13212] R13: 00007f5ccd426038 R14: 00007f5ccd425fa0 R15: 00007ffcff22fef8 [ 392.350109][T13212] [ 392.583811][ T3535] bond0 (unregistering): Released all slaves [ 392.801467][T13168] ipvlan2: entered promiscuous mode [ 393.844730][T13249] syz_tun: Device is already in use. [ 394.485641][T13066] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.545895][T13066] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.598513][T13066] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.656977][T13066] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.729538][T13279] FAULT_INJECTION: forcing a failure. [ 394.729538][T13279] name failslab, interval 1, probability 0, space 0, times 0 [ 394.769104][T13279] CPU: 0 PID: 13279 Comm: syz.3.2535 Not tainted syzkaller #0 [ 394.776662][T13279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.786821][T13279] Call Trace: [ 394.790178][T13279] [ 394.793163][T13279] dump_stack_lvl+0x18c/0x250 [ 394.797907][T13279] ? show_regs_print_info+0x20/0x20 [ 394.803171][T13279] ? load_image+0x420/0x420 [ 394.807731][T13279] ? __might_sleep+0xe0/0xe0 [ 394.812395][T13279] ? __lock_acquire+0x7d80/0x7d80 [ 394.817483][T13279] should_fail_ex+0x394/0x4c0 [ 394.822233][T13279] should_failslab+0x9/0x20 [ 394.826805][T13279] slab_pre_alloc_hook+0x59/0x300 [ 394.831931][T13279] ? group_cpus_evenly+0x2a4/0x5a0 [ 394.837111][T13279] ? group_cpus_evenly+0x2a4/0x5a0 [ 394.842371][T13279] __kmem_cache_alloc_node+0x53/0x250 [ 394.847832][T13279] ? group_cpus_evenly+0x2a4/0x5a0 [ 394.852985][T13279] __kmalloc+0xa7/0x240 [ 394.857191][T13279] group_cpus_evenly+0x2a4/0x5a0 [ 394.862175][T13279] ? sbitmap_find_bit+0x490/0x490 [ 394.867245][T13279] blk_mq_map_queues+0x4d/0x420 [ 394.872147][T13279] ? __kmalloc_node+0xe4/0x240 [ 394.876955][T13279] ? mutex_unlock+0x10/0x10 [ 394.881504][T13279] blk_mq_alloc_tag_set+0x860/0x1020 [ 394.886839][T13279] loop_add+0x2eb/0x990 [ 394.891038][T13279] loop_control_ioctl+0x128/0x590 [ 394.896110][T13279] ? loop_set_hw_queue_depth+0x110/0x110 [ 394.901794][T13279] ? bpf_lsm_file_ioctl+0x9/0x10 [ 394.906775][T13279] ? security_file_ioctl+0x80/0xa0 [ 394.911928][T13279] ? loop_set_hw_queue_depth+0x110/0x110 [ 394.917602][T13279] __se_sys_ioctl+0xfd/0x170 [ 394.922240][T13279] do_syscall_64+0x55/0xb0 [ 394.926706][T13279] ? clear_bhb_loop+0x40/0x90 [ 394.931429][T13279] ? clear_bhb_loop+0x40/0x90 [ 394.936171][T13279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.942123][T13279] RIP: 0033:0x7f5ccd19e159 [ 394.946581][T13279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.966227][T13279] RSP: 002b:00007f5ccdfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.974681][T13279] RAX: ffffffffffffffda RBX: 00007f5ccd425fa0 RCX: 00007f5ccd19e159 [ 394.982736][T13279] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 394.990757][T13279] RBP: 00007f5ccd23503b R08: 0000000000000000 R09: 0000000000000000 [ 394.998771][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.006784][T13279] R13: 00007f5ccd426038 R14: 00007f5ccd425fa0 R15: 00007ffcff22fef8 [ 395.014804][T13279] [ 395.234171][T13066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.343886][T13066] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.412383][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.419660][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.480518][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.487722][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.784906][T13298] loop3: detected capacity change from 0 to 2048 [ 395.882068][T13304] overlayfs: failed to clone upperpath [ 396.364738][T13066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.400520][T13319] 9pnet_fd: Insufficient options for proto=fd [ 396.583804][T13066] veth0_vlan: entered promiscuous mode [ 396.619983][T13066] veth1_vlan: entered promiscuous mode [ 396.734062][T13066] veth0_macvtap: entered promiscuous mode [ 396.764462][T13066] veth1_macvtap: entered promiscuous mode [ 396.895259][T13066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.929166][T13066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.946777][T13066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.969042][T13066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.989321][T13066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.005160][T13066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.033251][T13066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.066948][T13339] netem: unknown loss type 25 [ 397.072640][T13339] netem: change failed [ 397.129450][T13066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.161248][T13066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.183698][T13066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.216214][T13066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.238142][T13066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.278998][T13066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.310845][T13066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.344125][T13066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.377064][T13066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.386433][T13066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.396058][T13066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.661609][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.685127][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.765574][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.779425][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.630012][T13432] FAULT_INJECTION: forcing a failure. [ 399.630012][T13432] name failslab, interval 1, probability 0, space 0, times 0 [ 399.693186][T13432] CPU: 0 PID: 13432 Comm: syz.0.2581 Not tainted syzkaller #0 [ 399.700763][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.710877][T13432] Call Trace: [ 399.714209][T13432] [ 399.717198][T13432] dump_stack_lvl+0x18c/0x250 [ 399.721959][T13432] ? show_regs_print_info+0x20/0x20 [ 399.727243][T13432] ? load_image+0x420/0x420 [ 399.731855][T13432] ? __might_sleep+0xe0/0xe0 [ 399.736518][T13432] ? __lock_acquire+0x7d80/0x7d80 [ 399.741612][T13432] ? get_random_u32+0x16f/0x930 [ 399.746586][T13432] should_fail_ex+0x394/0x4c0 [ 399.751340][T13432] should_failslab+0x9/0x20 [ 399.755916][T13432] slab_pre_alloc_hook+0x59/0x300 [ 399.761028][T13432] ? kvmalloc_node+0x70/0x180 [ 399.765784][T13432] ? kvmalloc_node+0x70/0x180 [ 399.770556][T13432] __kmem_cache_alloc_node+0x53/0x250 [ 399.776013][T13432] ? pcpu_alloc+0x11e7/0x1880 [ 399.780768][T13432] ? kvmalloc_node+0x70/0x180 [ 399.785518][T13432] __kmalloc_node+0xa6/0x240 [ 399.790282][T13432] kvmalloc_node+0x70/0x180 [ 399.794857][T13432] sbitmap_init_node+0x2b5/0x620 [ 399.799861][T13432] sbitmap_queue_init_node+0x3e/0x660 [ 399.805304][T13432] ? blk_mq_init_tags+0xf0/0x280 [ 399.810317][T13432] blk_mq_init_tags+0x116/0x280 [ 399.815237][T13432] blk_mq_alloc_map_and_rqs+0xc5/0x910 [ 399.820762][T13432] ? kasan_quarantine_put+0xd8/0x220 [ 399.826127][T13432] ? lockdep_hardirqs_on+0x98/0x150 [ 399.831421][T13432] blk_mq_alloc_set_map_and_rqs+0x1a0/0x800 [ 399.837389][T13432] blk_mq_alloc_tag_set+0x868/0x1020 [ 399.842750][T13432] loop_add+0x2eb/0x990 [ 399.846987][T13432] loop_control_ioctl+0x128/0x590 [ 399.852082][T13432] ? loop_set_hw_queue_depth+0x110/0x110 [ 399.858491][T13432] ? bpf_lsm_file_ioctl+0x9/0x10 [ 399.863513][T13432] ? security_file_ioctl+0x80/0xa0 [ 399.868707][T13432] ? loop_set_hw_queue_depth+0x110/0x110 [ 399.874409][T13432] __se_sys_ioctl+0xfd/0x170 [ 399.879070][T13432] do_syscall_64+0x55/0xb0 [ 399.883549][T13432] ? clear_bhb_loop+0x40/0x90 [ 399.888323][T13432] ? clear_bhb_loop+0x40/0x90 [ 399.893071][T13432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.899031][T13432] RIP: 0033:0x7fedc259e159 [ 399.903508][T13432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.923192][T13432] RSP: 002b:00007fedc3470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.931679][T13432] RAX: ffffffffffffffda RBX: 00007fedc2825fa0 RCX: 00007fedc259e159 [ 399.939720][T13432] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 399.947759][T13432] RBP: 00007fedc263503b R08: 0000000000000000 R09: 0000000000000000 [ 399.955789][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.963825][T13432] R13: 00007fedc2826038 R14: 00007fedc2825fa0 R15: 00007ffec9a79e58 [ 399.971879][T13432] [ 400.005051][T13432] blk-mq: reduced tag depth (128 -> 64) [ 400.569348][ T28] audit: type=1326 audit(1789150196.452:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.2590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccd19e159 code=0x7ffc0000 [ 400.636179][ T28] audit: type=1326 audit(1789150196.452:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.2590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccd19e159 code=0x7ffc0000 [ 400.686273][ T28] audit: type=1326 audit(1789150196.462:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.2590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5ccd19e159 code=0x7ffc0000 [ 400.759358][ T28] audit: type=1326 audit(1789150196.462:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.2590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccd19e159 code=0x7ffc0000 [ 400.807525][ T28] audit: type=1326 audit(1789150196.462:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.2590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccd19e159 code=0x7ffc0000 [ 401.075861][T13475] loop3: detected capacity change from 0 to 2048 [ 401.091654][T13479] @ÿ: renamed from veth0_vlan (while UP) [ 401.100637][T13479] FAULT_INJECTION: forcing a failure. [ 401.100637][T13479] name failslab, interval 1, probability 0, space 0, times 0 [ 401.117180][T13479] CPU: 0 PID: 13479 Comm: syz.0.2596 Not tainted syzkaller #0 [ 401.124767][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.134884][T13479] Call Trace: [ 401.138262][T13479] [ 401.141278][T13479] dump_stack_lvl+0x18c/0x250 [ 401.146027][T13479] ? show_regs_print_info+0x20/0x20 [ 401.151293][T13479] ? load_image+0x420/0x420 [ 401.155864][T13479] ? __might_sleep+0xe0/0xe0 [ 401.160521][T13479] ? __lock_acquire+0x7d80/0x7d80 [ 401.165659][T13479] should_fail_ex+0x394/0x4c0 [ 401.170408][T13479] should_failslab+0x9/0x20 [ 401.174984][T13479] slab_pre_alloc_hook+0x59/0x300 [ 401.180093][T13479] ? kobject_get_path+0xc3/0x2c0 [ 401.185201][T13479] ? kobject_get_path+0xc3/0x2c0 [ 401.190206][T13479] __kmem_cache_alloc_node+0x53/0x250 [ 401.195662][T13479] ? kobject_get_path+0xc3/0x2c0 [ 401.200674][T13479] __kmalloc+0xa7/0x240 [ 401.204925][T13479] kobject_get_path+0xc3/0x2c0 [ 401.209766][T13479] kobject_rename+0x194/0x4f0 [ 401.214540][T13479] ? kobject_init_and_add+0x1a0/0x1a0 [ 401.219987][T13479] ? sysfs_rename_link_ns+0x17f/0x1b0 [ 401.225455][T13479] device_rename+0x15d/0x1e0 [ 401.230101][T13479] dev_change_name+0x308/0x8e0 [ 401.234949][T13479] ? end_current_label_crit_section+0x170/0x170 [ 401.241240][T13479] ? dev_ioctl+0x5dc/0x1140 [ 401.245872][T13479] ? __lock_acquire+0x7d80/0x7d80 [ 401.250996][T13479] ? dev_alloc_name+0x1d0/0x1d0 [ 401.255889][T13479] ? full_name_hash+0x92/0xe0 [ 401.260610][T13479] ? dev_ifsioc+0x316/0xc40 [ 401.265155][T13479] dev_ioctl+0x5ec/0x1140 [ 401.269538][T13479] sock_do_ioctl+0x239/0x310 [ 401.274273][T13479] ? sock_show_fdinfo+0xb0/0xb0 [ 401.279175][T13479] sock_ioctl+0x5be/0x7e0 [ 401.283553][T13479] ? sock_poll+0x3e0/0x3e0 [ 401.288023][T13479] ? bpf_lsm_file_ioctl+0x9/0x10 [ 401.292994][T13479] ? security_file_ioctl+0x80/0xa0 [ 401.298151][T13479] ? sock_poll+0x3e0/0x3e0 [ 401.302696][T13479] __se_sys_ioctl+0xfd/0x170 [ 401.307331][T13479] do_syscall_64+0x55/0xb0 [ 401.311792][T13479] ? clear_bhb_loop+0x40/0x90 [ 401.316634][T13479] ? clear_bhb_loop+0x40/0x90 [ 401.321358][T13479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.327292][T13479] RIP: 0033:0x7fedc259e159 [ 401.331748][T13479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.351396][T13479] RSP: 002b:00007fedc3470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.359856][T13479] RAX: ffffffffffffffda RBX: 00007fedc2825fa0 RCX: 00007fedc259e159 [ 401.367866][T13479] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005 [ 401.375877][T13479] RBP: 00007fedc263503b R08: 0000000000000000 R09: 0000000000000000 [ 401.383889][T13479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.391917][T13479] R13: 00007fedc2826038 R14: 00007fedc2825fa0 R15: 00007ffec9a79e58 [ 401.399939][T13479] [ 402.029021][ T28] audit: type=1326 audit(1789150197.912:2313): auid=4294967295 uid=37119 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.0.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedc259e159 code=0x0 [ 402.264986][T13518] cgroup: Bad value for 'name' [ 402.465827][T13523] loop2: detected capacity change from 0 to 2048 [ 403.107230][T13516] Process accounting resumed [ 403.147743][T13550] overlayfs: overlapping lowerdir path [ 403.178071][T13550] overlayfs: overlapping lowerdir path [ 403.785350][T13574] FAULT_INJECTION: forcing a failure. [ 403.785350][T13574] name failslab, interval 1, probability 0, space 0, times 0 [ 403.822294][T13574] CPU: 0 PID: 13574 Comm: syz.3.2626 Not tainted syzkaller #0 [ 403.829858][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.839979][T13574] Call Trace: [ 403.843319][T13574] [ 403.846305][T13574] dump_stack_lvl+0x18c/0x250 [ 403.851052][T13574] ? show_regs_print_info+0x20/0x20 [ 403.856310][T13574] ? load_image+0x420/0x420 [ 403.860895][T13574] should_fail_ex+0x394/0x4c0 [ 403.865674][T13574] should_failslab+0x9/0x20 [ 403.870288][T13574] slab_pre_alloc_hook+0x59/0x300 [ 403.875394][T13574] kmem_cache_alloc+0x5a/0x2c0 [ 403.880229][T13574] ? __nf_conntrack_alloc+0x93/0x370 [ 403.885740][T13574] __nf_conntrack_alloc+0x93/0x370 [ 403.890993][T13574] init_conntrack+0x166/0xe20 [ 403.895853][T13574] ? early_drop+0x7f0/0x7f0 [ 403.900435][T13574] ? nf_conntrack_find_get+0x670/0x670 [ 403.905973][T13574] ? __siphash_unaligned+0x25c/0x3d0 [ 403.911442][T13574] nf_conntrack_in+0xc29/0x15b0 [ 403.916391][T13574] ? nf_ct_pernet+0x270/0x270 [ 403.921147][T13574] ? ip6t_do_table+0x1cb/0x1570 [ 403.926194][T13574] ? ip6t_alloc_initial_table+0x640/0x640 [ 403.932009][T13574] ? ipv6_defrag+0x2d6/0x3a0 [ 403.936728][T13574] ? ipv6_conntrack_in+0x20/0x20 [ 403.941756][T13574] nf_hook_slow+0xbd/0x200 [ 403.946340][T13574] __ip6_local_out+0x784/0x8a0 [ 403.951256][T13574] ? __ip6_local_out+0x60c/0x8a0 [ 403.956299][T13574] ? ip6_dst_hoplimit+0x350/0x350 [ 403.961397][T13574] ? ip6_setup_cork+0xa4a/0xff0 [ 403.966375][T13574] ? __ip6_local_out+0x8a0/0x8a0 [ 403.971399][T13574] ? read_lock_is_recursive+0x20/0x20 [ 403.976845][T13574] ? ip6_make_skb+0x3f0/0x520 [ 403.981604][T13574] ip6_local_out+0x2a/0x130 [ 403.986187][T13574] ? ip6_send_skb+0x10a/0x380 [ 403.990942][T13574] ip6_send_skb+0x1cd/0x380 [ 403.995586][T13574] udp_v6_send_skb+0xbd8/0x1810 [ 404.000747][T13574] udpv6_sendmsg+0x1c08/0x2350 [ 404.005588][T13574] ? release_sock+0x2f/0x1c0 [ 404.010364][T13574] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 404.015318][T13574] ? print_unlock_imbalance_bug+0x160/0x160 [ 404.021283][T13574] ? udp_v6_early_demux+0xf90/0xf90 [ 404.026578][T13574] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 404.032656][T13574] ? __local_bh_enable_ip+0x13a/0x1c0 [ 404.038102][T13574] ? _local_bh_enable+0xa0/0xa0 [ 404.043032][T13574] ? inet_send_prepare+0x1ae/0x250 [ 404.048259][T13574] ? inet_send_prepare+0x1ae/0x250 [ 404.053459][T13574] ? inet6_sendmsg+0x5f/0xd0 [ 404.058159][T13574] __sys_sendto+0x4a9/0x6b0 [ 404.062772][T13574] ? __ia32_sys_getpeername+0x90/0x90 [ 404.068223][T13574] ? udp_destroy_sock+0x2b0/0x2b0 [ 404.073327][T13574] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 404.079392][T13574] ? lock_chain_count+0x20/0x20 [ 404.084333][T13574] __x64_sys_sendto+0xde/0xf0 [ 404.089125][T13574] do_syscall_64+0x55/0xb0 [ 404.093611][T13574] ? clear_bhb_loop+0x40/0x90 [ 404.098366][T13574] ? clear_bhb_loop+0x40/0x90 [ 404.103213][T13574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.109179][T13574] RIP: 0033:0x7f5ccd19e159 [ 404.113701][T13574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.133381][T13574] RSP: 002b:00007f5ccdfd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 404.141920][T13574] RAX: ffffffffffffffda RBX: 00007f5ccd425fa0 RCX: 00007f5ccd19e159 [ 404.150134][T13574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 404.158183][T13574] RBP: 00007f5ccd23503b R08: 0000200000000140 R09: 000000000000001c [ 404.166313][T13574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.174442][T13574] R13: 00007f5ccd426038 R14: 00007f5ccd425fa0 R15: 00007ffcff22fef8 [ 404.182502][T13574] [ 404.207111][T13580] overlayfs: overlapping lowerdir path [ 404.238683][T13580] overlayfs: overlapping lowerdir path [ 405.227948][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.242448][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.251739][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.262060][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.271407][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 405.280412][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.467460][T13610] overlayfs: overlapping lowerdir path [ 405.488878][T13610] overlayfs: overlapping lowerdir path [ 405.652682][ T1332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.900493][ T1332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.056792][ T1332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.136329][T13604] chnl_net:caif_netlink_parms(): no params data found [ 406.240193][ T1332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.588143][T13642] overlayfs: overlapping lowerdir path [ 406.595777][T13604] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.619825][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.635253][T13643] overlayfs: overlapping lowerdir path [ 406.644630][T13604] bridge_slave_0: entered allmulticast mode [ 406.660897][T13604] bridge_slave_0: entered promiscuous mode [ 406.682338][T13604] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.696538][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.706015][T13604] bridge_slave_1: entered allmulticast mode [ 406.721436][T13604] bridge_slave_1: entered promiscuous mode [ 406.795465][T13604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.814902][T13604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.874287][T13604] team0: Port device team_slave_0 added [ 406.897554][T13604] team0: Port device team_slave_1 added [ 406.957746][T13604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.967013][T13604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.002552][T13604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.016760][T13604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.024795][T13604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.051825][T13604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.326402][T13604] hsr_slave_0: entered promiscuous mode [ 407.352139][ T5786] Bluetooth: hci1: command tx timeout [ 407.382642][T13604] hsr_slave_1: entered promiscuous mode [ 407.874925][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 408.842446][T13688] overlayfs: overlapping lowerdir path [ 408.877279][T13688] overlayfs: overlapping lowerdir path [ 408.922698][T13682] erspan0: entered promiscuous mode [ 409.429334][ T5786] Bluetooth: hci1: command tx timeout [ 410.037429][T13715] loop0: detected capacity change from 0 to 2048 [ 410.194717][T13604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 410.318645][T13604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.342976][T13604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 410.376795][T13604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 410.496269][ T1332] hsr_slave_0: left promiscuous mode [ 410.522231][ T1332] hsr_slave_1: left promiscuous mode [ 410.543285][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.563946][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.594530][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.609072][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.631018][ T1332] bridge_slave_1: left allmulticast mode [ 410.647026][ T1332] bridge_slave_1: left promiscuous mode [ 410.663785][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.694057][ T1332] bridge_slave_0: left allmulticast mode [ 410.701951][ T1332] bridge_slave_0: left promiscuous mode [ 410.717503][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.788383][ T1332] veth1_macvtap: left promiscuous mode [ 410.797353][ T1332] veth0_macvtap: left promiscuous mode [ 410.819561][ T1332] veth1_vlan: left promiscuous mode [ 410.825064][ T1332] @ÿ: left promiscuous mode [ 411.292082][ T1332] bond5 (unregistering): Released all slaves [ 411.389449][ T1332] bond4 (unregistering): Released all slaves [ 411.496500][ T1332] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 411.509887][ T5786] Bluetooth: hci1: command tx timeout [ 411.554493][ T1332] bond3 (unregistering): Released all slaves [ 411.681712][ T1332] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 411.752289][ T1332] bond2 (unregistering): Released all slaves [ 411.775882][ T1332] bond1 (unregistering): Released all slaves [ 411.906834][T13760] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3393688969 (54299023504 ns) > initial count (49421972784 ns). Using initial count to start timer. [ 411.937431][T13760] kvm: kvm [13759]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 411.958260][T13760] kvm: kvm [13759]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 412.600701][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 412.668396][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 412.746534][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.797050][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.394091][ T1332] bond0 (unregistering): Released all slaves [ 413.589159][ T5786] Bluetooth: hci1: command tx timeout [ 414.020344][T13604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.102587][T13604] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.152752][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.160148][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.196784][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.204050][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.441124][T13604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.058023][T13824] FAULT_INJECTION: forcing a failure. [ 415.058023][T13824] name failslab, interval 1, probability 0, space 0, times 0 [ 415.092091][T13824] CPU: 0 PID: 13824 Comm: syz.3.2697 Not tainted syzkaller #0 [ 415.099660][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.109773][T13824] Call Trace: [ 415.113111][T13824] [ 415.116088][T13824] dump_stack_lvl+0x18c/0x250 [ 415.120841][T13824] ? show_regs_print_info+0x20/0x20 [ 415.126113][T13824] ? load_image+0x420/0x420 [ 415.130693][T13824] ? __might_sleep+0xe0/0xe0 [ 415.135363][T13824] ? __lock_acquire+0x7d80/0x7d80 [ 415.140466][T13824] should_fail_ex+0x394/0x4c0 [ 415.145244][T13824] should_failslab+0x9/0x20 [ 415.149816][T13824] slab_pre_alloc_hook+0x59/0x300 [ 415.155006][T13824] ? fib_insert_alias+0xa41/0x1280 [ 415.160211][T13824] __kmem_cache_alloc_node+0x53/0x250 [ 415.165753][T13824] ? fib_insert_alias+0xa41/0x1280 [ 415.170941][T13824] kmalloc_trace+0x2a/0xe0 [ 415.175441][T13824] fib_insert_alias+0xa41/0x1280 [ 415.180472][T13824] fib_trie_unmerge+0x30c/0xcf0 [ 415.185424][T13824] fib_unmerge+0xc0/0x350 [ 415.189837][T13824] fib4_rule_configure+0x118/0xaf0 [ 415.195095][T13824] ? __nla_parse+0x40/0x50 [ 415.199581][T13824] fib_nl_newrule+0x135e/0x1e40 [ 415.204605][T13824] ? __mutex_lock+0x919/0xc80 [ 415.209445][T13824] ? __lock_acquire+0x7d80/0x7d80 [ 415.214549][T13824] ? fib_rules_seq_read+0xf0/0xf0 [ 415.219628][T13824] ? do_raw_spin_unlock+0x121/0x230 [ 415.224900][T13824] ? fib_rules_seq_read+0xf0/0xf0 [ 415.229961][T13824] rtnetlink_rcv_msg+0x843/0xf90 [ 415.234945][T13824] ? rtnetlink_rcv_msg+0x220/0xf90 [ 415.240106][T13824] ? rtnetlink_bind+0x80/0x80 [ 415.244853][T13824] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 415.250890][T13824] ? lock_chain_count+0x20/0x20 [ 415.255783][T13824] ? __local_bh_enable_ip+0x13a/0x1c0 [ 415.261195][T13824] ? lockdep_hardirqs_on+0x98/0x150 [ 415.266464][T13824] ? __local_bh_enable_ip+0x13a/0x1c0 [ 415.271875][T13824] ? _local_bh_enable+0xa0/0xa0 [ 415.276769][T13824] ? __dev_queue_xmit+0x272/0x37e0 [ 415.282005][T13824] ? __dev_queue_xmit+0x1329/0x37e0 [ 415.287259][T13824] ? __dev_queue_xmit+0x272/0x37e0 [ 415.292434][T13824] ? ref_tracker_free+0x686/0x830 [ 415.297503][T13824] netlink_rcv_skb+0x235/0x4c0 [ 415.302309][T13824] ? rtnetlink_bind+0x80/0x80 [ 415.307030][T13824] ? netlink_ack+0x1160/0x1160 [ 415.311929][T13824] ? __lock_acquire+0x7d80/0x7d80 [ 415.317000][T13824] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.322245][T13824] netlink_unicast+0x7b1/0x930 [ 415.327059][T13824] netlink_sendmsg+0x8d0/0xbf0 [ 415.331872][T13824] ? netlink_getsockopt+0x590/0x590 [ 415.337122][T13824] ? apparmor_socket_sendmsg+0x8e/0x330 [ 415.342714][T13824] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 415.348504][T13824] ? security_socket_sendmsg+0x80/0xa0 [ 415.354002][T13824] ? netlink_getsockopt+0x590/0x590 [ 415.359244][T13824] ____sys_sendmsg+0x61b/0x980 [ 415.364065][T13824] ? __asan_memset+0x22/0x40 [ 415.368706][T13824] ? __sys_sendmsg_sock+0x30/0x30 [ 415.373775][T13824] ? __import_iovec+0x5f2/0x850 [ 415.378723][T13824] ? import_iovec+0x73/0xa0 [ 415.383306][T13824] ___sys_sendmsg+0x2a6/0x360 [ 415.388033][T13824] ? __sys_sendmsg+0x2b0/0x2b0 [ 415.392874][T13824] __se_sys_sendmsg+0x1d0/0x2c0 [ 415.397767][T13824] ? __x64_sys_sendmsg+0x80/0x80 [ 415.402766][T13824] ? lockdep_hardirqs_on+0x98/0x150 [ 415.408036][T13824] do_syscall_64+0x55/0xb0 [ 415.412501][T13824] ? clear_bhb_loop+0x40/0x90 [ 415.417227][T13824] ? clear_bhb_loop+0x40/0x90 [ 415.422108][T13824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.428070][T13824] RIP: 0033:0x7f5ccd19e159 [ 415.432706][T13824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.452362][T13824] RSP: 002b:00007f5ccdfd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.460863][T13824] RAX: ffffffffffffffda RBX: 00007f5ccd425fa0 RCX: 00007f5ccd19e159 [ 415.468970][T13824] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 415.476996][T13824] RBP: 00007f5ccd23503b R08: 0000000000000000 R09: 0000000000000000 [ 415.485019][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.493044][T13824] R13: 00007f5ccd426038 R14: 00007f5ccd425fa0 R15: 00007ffcff22fef8 [ 415.501167][T13824] [ 415.674772][T13604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.815344][T13831] fuse: Unknown parameter 'group_i00000000000000000000' [ 416.338096][T13846] FAULT_INJECTION: forcing a failure. [ 416.338096][T13846] name fail_futex, interval 1, probability 0, space 0, times 0 [ 416.356963][T13846] CPU: 1 PID: 13846 Comm: syz.2.2703 Not tainted syzkaller #0 [ 416.364548][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.374910][T13846] Call Trace: [ 416.378252][T13846] [ 416.381241][T13846] dump_stack_lvl+0x18c/0x250 [ 416.386039][T13846] ? show_regs_print_info+0x20/0x20 [ 416.391312][T13846] ? load_image+0x420/0x420 [ 416.395876][T13846] ? __lock_acquire+0x1336/0x7d80 [ 416.396568][T13604] veth0_vlan: entered promiscuous mode [ 416.400957][T13846] should_fail_ex+0x394/0x4c0 [ 416.400999][T13846] get_futex_key+0x16f/0x1030 [ 416.401041][T13846] ? futex_setup_timer+0xc0/0xc0 [ 416.420978][T13846] futex_wake+0x127/0x4f0 [ 416.425393][T13846] ? futex_wake_mark+0x150/0x150 [ 416.430412][T13846] do_futex+0x35d/0x3e0 [ 416.434631][T13846] ? __might_fault+0xaa/0x120 [ 416.439374][T13846] ? __ia32_sys_get_robust_list+0x110/0x110 [ 416.445370][T13846] ? __might_fault+0xc6/0x120 [ 416.450116][T13846] mm_release+0x184/0x3a0 [ 416.454517][T13846] ? exit_mm_release+0x30/0x30 [ 416.459401][T13846] ? lockdep_hardirqs_on+0x98/0x150 [ 416.464698][T13846] exit_mm+0xa4/0x340 [ 416.468749][T13846] ? sysctl_delayacct+0x220/0x220 [ 416.473840][T13846] ? do_exit+0x2530/0x2530 [ 416.478334][T13846] ? tty_audit_exit+0x14d/0x1f0 [ 416.483255][T13846] do_exit+0x909/0x2530 [ 416.487505][T13846] ? put_task_struct+0xc0/0xc0 [ 416.492349][T13846] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 416.495223][T13604] veth1_vlan: entered promiscuous mode [ 416.498375][T13846] ? get_signal+0x100e/0x1390 [ 416.498406][T13846] ? lock_chain_count+0x20/0x20 [ 416.513518][T13846] ? _raw_spin_lock_irq+0xbb/0xf0 [ 416.518636][T13846] do_group_exit+0x22d/0x2f0 [ 416.523295][T13846] ? lockdep_hardirqs_on+0x98/0x150 [ 416.528576][T13846] get_signal+0x12a6/0x1390 [ 416.533173][T13846] arch_do_signal_or_restart+0xc2/0x7b0 [ 416.538798][T13846] ? __ia32_sys_get_robust_list+0x110/0x110 [ 416.544767][T13846] ? get_sigframe_size+0x20/0x20 [ 416.549792][T13846] ? __x64_sys_fsconfig+0xc0/0xc0 [ 416.554893][T13846] ? exit_to_user_mode_loop+0x3b/0x110 [ 416.560439][T13846] exit_to_user_mode_loop+0x70/0x110 [ 416.565797][T13846] exit_to_user_mode_prepare+0xee/0x180 [ 416.571419][T13846] syscall_exit_to_user_mode+0x1a/0x50 [ 416.577041][T13846] do_syscall_64+0x61/0xb0 [ 416.581524][T13846] ? clear_bhb_loop+0x40/0x90 [ 416.586266][T13846] ? clear_bhb_loop+0x40/0x90 [ 416.591027][T13846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.596988][T13846] RIP: 0033:0x7fac56b9e159 [ 416.601466][T13846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.621136][T13846] RSP: 002b:00007fac579da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 416.629616][T13846] RAX: 0000000000000001 RBX: 00007fac56e25fa8 RCX: 00007fac56b9e159 [ 416.637649][T13846] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fac56e25fac [ 416.645686][T13846] RBP: 00007fac56e25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 416.653728][T13846] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 416.661760][T13846] R13: 00007fac56e26038 R14: 00007fff1294f630 R15: 00007fff1294f718 [ 416.669830][T13846] [ 416.717778][T13604] veth0_macvtap: entered promiscuous mode [ 416.746286][T13604] veth1_macvtap: entered promiscuous mode [ 416.774984][T13604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.826669][T13604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.852642][T13604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.888982][T13604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.898901][T13604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.930179][T13604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.971875][T13604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.016721][T13604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.046560][T13604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.057866][T13604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.069160][T13604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.085919][T13604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.098560][T13604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.110962][T13604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.138447][T13604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.154157][T13604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.172438][T13604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.199087][T13604] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.377975][T13860] fuse: Unknown parameter 'group_id00000000000000000000' [ 417.466163][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.466184][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.560276][T13864] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 417.623773][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.661220][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.033429][ T28] audit: type=1326 audit(1789150213.922:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.2715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfcbb9e159 code=0x0 [ 418.921690][T13891] fuse: Unknown parameter 'group_id00000000000000000000' [ 420.219925][ T28] audit: type=1326 audit(1789150216.112:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.4.2727" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfcbb9e159 code=0x0 [ 420.553579][T13920] fuse: Unknown parameter 'group_id00000000000000000000' [ 421.153775][T13938] loop4: detected capacity change from 0 to 2048 [ 421.596912][ T28] audit: type=1326 audit(1789150217.482:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13956 comm="syz.4.2745" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfcbb9e159 code=0x0 [ 421.765069][T13964] loop0: detected capacity change from 0 to 2048 [ 422.100604][T13971] tipc: Can't bind to reserved service type 0 [ 422.185928][T13973] fuse: Bad value for 'fd' [ 422.498496][T13979] overlayfs: failed to resolve './file1': -2 [ 422.921815][T13999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2764'. [ 423.019118][T14002] FAULT_INJECTION: forcing a failure. [ 423.019118][T14002] name failslab, interval 1, probability 0, space 0, times 0 [ 423.039152][T14002] CPU: 0 PID: 14002 Comm: syz.2.2765 Not tainted syzkaller #0 [ 423.046711][T14002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.056837][T14002] Call Trace: [ 423.060175][T14002] [ 423.063161][T14002] dump_stack_lvl+0x18c/0x250 [ 423.067913][T14002] ? show_regs_print_info+0x20/0x20 [ 423.073174][T14002] ? load_image+0x420/0x420 [ 423.077748][T14002] ? __might_sleep+0xe0/0xe0 [ 423.082412][T14002] ? __lock_acquire+0x7d80/0x7d80 [ 423.087543][T14002] should_fail_ex+0x394/0x4c0 [ 423.092294][T14002] should_failslab+0x9/0x20 [ 423.096870][T14002] slab_pre_alloc_hook+0x59/0x300 [ 423.101978][T14002] kmem_cache_alloc+0x5a/0x2c0 [ 423.106824][T14002] ? getname_flags+0xbb/0x500 [ 423.111570][T14002] getname_flags+0xbb/0x500 [ 423.116191][T14002] user_path_at_empty+0x2c/0x60 [ 423.121106][T14002] do_faccessat+0x5c2/0xd20 [ 423.125688][T14002] ? stream_open+0x60/0x60 [ 423.130229][T14002] ? lockdep_hardirqs_on+0x98/0x150 [ 423.135496][T14002] do_syscall_64+0x55/0xb0 [ 423.140008][T14002] ? clear_bhb_loop+0x40/0x90 [ 423.144856][T14002] ? clear_bhb_loop+0x40/0x90 [ 423.149597][T14002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.155553][T14002] RIP: 0033:0x7fac56b9e159 [ 423.160030][T14002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.179703][T14002] RSP: 002b:00007fac579da028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 423.188194][T14002] RAX: ffffffffffffffda RBX: 00007fac56e25fa0 RCX: 00007fac56b9e159 [ 423.196230][T14002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 423.204266][T14002] RBP: 00007fac56c3503b R08: 0000000000000000 R09: 0000000000000000 [ 423.212307][T14002] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000 [ 423.220334][T14002] R13: 00007fac56e26038 R14: 00007fac56e25fa0 R15: 00007fff1294f718 [ 423.228385][T14002] [ 423.497893][T14010] overlayfs: failed to resolve './file1': -2 [ 423.938811][T14019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2770'. [ 424.173037][T14034] overlayfs: failed to resolve './file1': -2 [ 425.381187][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2788'. [ 425.411776][T14063] macvlan2: entered promiscuous mode [ 425.417391][T14063] macvlan2: entered allmulticast mode [ 426.327955][T14084] FAULT_INJECTION: forcing a failure. [ 426.327955][T14084] name fail_futex, interval 1, probability 0, space 0, times 0 [ 426.353069][T14084] CPU: 0 PID: 14084 Comm: syz.0.2796 Not tainted syzkaller #0 [ 426.360699][T14084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.370820][T14084] Call Trace: [ 426.374270][T14084] [ 426.377260][T14084] dump_stack_lvl+0x18c/0x250 [ 426.382024][T14084] ? show_regs_print_info+0x20/0x20 [ 426.387334][T14084] ? load_image+0x420/0x420 [ 426.391998][T14084] ? plist_add+0x3db/0x490 [ 426.396506][T14084] should_fail_ex+0x394/0x4c0 [ 426.401258][T14084] get_futex_key+0x136/0x1030 [ 426.405998][T14084] ? futex_unqueue+0xcb/0xf0 [ 426.410644][T14084] ? futex_wait+0x4a7/0x5c0 [ 426.415210][T14084] ? futex_setup_timer+0xc0/0xc0 [ 426.420217][T14084] futex_wake+0x127/0x4f0 [ 426.424608][T14084] ? lockdep_hardirqs_on+0x98/0x150 [ 426.429881][T14084] ? futex_wake_mark+0x150/0x150 [ 426.435076][T14084] do_futex+0x35d/0x3e0 [ 426.439303][T14084] ? __ia32_sys_get_robust_list+0x110/0x110 [ 426.445263][T14084] __se_sys_futex+0x3a9/0x440 [ 426.450003][T14084] ? __x64_sys_futex+0xf0/0xf0 [ 426.454824][T14084] ? __x64_sys_futex+0x21/0xf0 [ 426.459640][T14084] do_syscall_64+0x55/0xb0 [ 426.464116][T14084] ? clear_bhb_loop+0x40/0x90 [ 426.468858][T14084] ? clear_bhb_loop+0x40/0x90 [ 426.473603][T14084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.479559][T14084] RIP: 0033:0x7fedc259e159 [ 426.484030][T14084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.503700][T14084] RSP: 002b:00007fedc34700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 426.512283][T14084] RAX: ffffffffffffffda RBX: 00007fedc2825fa8 RCX: 00007fedc259e159 [ 426.520315][T14084] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fedc2825fac [ 426.528347][T14084] RBP: 00007fedc2825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 426.536391][T14084] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 426.544439][T14084] R13: 00007fedc2826038 R14: 00007ffec9a79d70 R15: 00007ffec9a79e58 [ 426.552538][T14084] [ 426.814674][T14091] ip_tables: iptables: counters copy to user failed while replacing table [ 427.582847][T14111] syzkaller1: entered promiscuous mode [ 427.608340][T14113] overlayfs: failed to resolve './bus': -2 [ 427.615348][T14111] syzkaller1: entered allmulticast mode [ 427.982466][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2808'. [ 428.743961][T14139] overlayfs: failed to resolve './bus': -2 [ 429.965586][T14166] overlayfs: failed to resolve './bus': -2 [ 430.187004][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 430.440958][T14159] hsr_slave_1 (unregistering): left promiscuous mode [ 431.000028][T14181] overlayfs: missing 'lowerdir' [ 432.424667][T14217] fuse: Bad value for 'fd' [ 433.377574][T14235] fuse: Bad value for 'fd' [ 434.228804][T14262] fuse: Bad value for 'fd' [ 434.672125][T14276] FAULT_INJECTION: forcing a failure. [ 434.672125][T14276] name failslab, interval 1, probability 0, space 0, times 0 [ 434.708482][T14276] CPU: 1 PID: 14276 Comm: syz.4.2869 Not tainted syzkaller #0 [ 434.716064][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.726184][T14276] Call Trace: [ 434.729525][T14276] [ 434.732520][T14276] dump_stack_lvl+0x18c/0x250 [ 434.737278][T14276] ? show_regs_print_info+0x20/0x20 [ 434.742554][T14276] ? load_image+0x420/0x420 [ 434.747152][T14276] ? __lock_acquire+0x7d80/0x7d80 [ 434.752437][T14276] should_fail_ex+0x394/0x4c0 [ 434.757204][T14276] should_failslab+0x9/0x20 [ 434.761892][T14276] slab_pre_alloc_hook+0x59/0x300 [ 434.767034][T14276] ? free_vm_area+0x50/0x50 [ 434.771598][T14276] ? bpf_prog_alloc_no_stats+0xd7/0x430 [ 434.777193][T14276] __kmem_cache_alloc_node+0x53/0x250 [ 434.782625][T14276] ? bpf_prog_alloc_no_stats+0xd7/0x430 [ 434.788242][T14276] kmalloc_trace+0x2a/0xe0 [ 434.792744][T14276] bpf_prog_alloc_no_stats+0xd7/0x430 [ 434.798170][T14276] bpf_prog_alloc+0x3d/0x1a0 [ 434.802805][T14276] bpf_prog_load+0x6b2/0x1610 [ 434.807533][T14276] ? map_freeze+0x420/0x420 [ 434.812087][T14276] ? __might_fault+0xaa/0x120 [ 434.816914][T14276] ? __lock_acquire+0x7d80/0x7d80 [ 434.822081][T14276] ? __might_fault+0xaa/0x120 [ 434.826801][T14276] ? __might_fault+0xc6/0x120 [ 434.831520][T14276] ? __might_fault+0xaa/0x120 [ 434.836244][T14276] ? bpf_lsm_bpf+0x9/0x10 [ 434.840626][T14276] ? security_bpf+0x7e/0xa0 [ 434.845181][T14276] __sys_bpf+0x5ba/0x890 [ 434.849574][T14276] ? bpf_link_show_fdinfo+0x390/0x390 [ 434.855086][T14276] ? lock_chain_count+0x20/0x20 [ 434.859994][T14276] __x64_sys_bpf+0x7c/0x90 [ 434.864457][T14276] do_syscall_64+0x55/0xb0 [ 434.868917][T14276] ? clear_bhb_loop+0x40/0x90 [ 434.873646][T14276] ? clear_bhb_loop+0x40/0x90 [ 434.878385][T14276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.884319][T14276] RIP: 0033:0x7fbfcbb9e159 [ 434.888779][T14276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.908441][T14276] RSP: 002b:00007fbfc9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.916994][T14276] RAX: ffffffffffffffda RBX: 00007fbfcbe25fa0 RCX: 00007fbfcbb9e159 [ 434.925015][T14276] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 434.933035][T14276] RBP: 00007fbfcbc3503b R08: 0000000000000000 R09: 0000000000000000 [ 434.941055][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.949077][T14276] R13: 00007fbfcbe26038 R14: 00007fbfcbe25fa0 R15: 00007fffb358ab38 [ 434.957141][T14276] [ 435.254787][T14285] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2872'. [ 435.802580][T14299] fuse: Invalid rootmode [ 436.889828][T14339] fuse: Invalid rootmode [ 437.307770][T14353] FAULT_INJECTION: forcing a failure. [ 437.307770][T14353] name fail_futex, interval 1, probability 0, space 0, times 0 [ 437.333413][T14353] CPU: 0 PID: 14353 Comm: syz.4.2894 Not tainted syzkaller #0 [ 437.340977][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.351080][T14353] Call Trace: [ 437.354580][T14353] [ 437.357562][T14353] dump_stack_lvl+0x18c/0x250 [ 437.362315][T14353] ? show_regs_print_info+0x20/0x20 [ 437.367588][T14353] ? load_image+0x420/0x420 [ 437.372234][T14353] ? plist_add+0x3db/0x490 [ 437.376721][T14353] should_fail_ex+0x394/0x4c0 [ 437.381479][T14353] get_futex_key+0x136/0x1030 [ 437.386223][T14353] ? futex_unqueue+0xcb/0xf0 [ 437.390858][T14353] ? futex_wait+0x4a7/0x5c0 [ 437.395411][T14353] ? futex_setup_timer+0xc0/0xc0 [ 437.400400][T14353] futex_wake+0x127/0x4f0 [ 437.404781][T14353] ? futex_wake_mark+0x150/0x150 [ 437.409766][T14353] ? file_end_write+0x159/0x250 [ 437.414658][T14353] ? vfs_write+0x5de/0x9a0 [ 437.419118][T14353] do_futex+0x35d/0x3e0 [ 437.423323][T14353] ? __ia32_sys_get_robust_list+0x110/0x110 [ 437.429445][T14353] __se_sys_futex+0x3a9/0x440 [ 437.434171][T14353] ? __x64_sys_futex+0xf0/0xf0 [ 437.438981][T14353] ? __x64_sys_futex+0x21/0xf0 [ 437.443792][T14353] do_syscall_64+0x55/0xb0 [ 437.448264][T14353] ? clear_bhb_loop+0x40/0x90 [ 437.453127][T14353] ? clear_bhb_loop+0x40/0x90 [ 437.457849][T14353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.463790][T14353] RIP: 0033:0x7fbfcbb9e159 [ 437.468258][T14353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.487922][T14353] RSP: 002b:00007fbfc9df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 437.496469][T14353] RAX: ffffffffffffffda RBX: 00007fbfcbe25fa8 RCX: 00007fbfcbb9e159 [ 437.504575][T14353] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbfcbe25fac [ 437.512673][T14353] RBP: 00007fbfcbe25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 437.520687][T14353] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 437.528727][T14353] R13: 00007fbfcbe26038 R14: 00007fffb358aa50 R15: 00007fffb358ab38 [ 437.536767][T14353] [ 437.629949][ T5762] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 437.869622][ T5762] usb 4-1: unable to get BOS descriptor or descriptor too short [ 437.907721][ T5762] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.927797][ T5762] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 437.939067][ T5762] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 437.951554][ T5762] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 437.966783][ T5762] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 437.994580][ T5762] usb 4-1: config 1 interface 1 has no altsetting 0 [ 438.017269][ T5762] usb 4-1: string descriptor 0 read error: -22 [ 438.037200][ T5762] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 438.052926][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.510998][T14378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'. [ 438.512092][T14376] FAULT_INJECTION: forcing a failure. [ 438.512092][T14376] name fail_futex, interval 1, probability 0, space 0, times 0 [ 438.553348][T14376] CPU: 0 PID: 14376 Comm: syz.0.2902 Not tainted syzkaller #0 [ 438.561262][T14376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.571422][T14376] Call Trace: [ 438.574856][T14376] [ 438.577846][T14376] dump_stack_lvl+0x18c/0x250 [ 438.582604][T14376] ? show_regs_print_info+0x20/0x20 [ 438.587873][T14376] ? load_image+0x420/0x420 [ 438.592446][T14376] ? get_user_pages_fast_only+0xa0/0xa0 [ 438.598073][T14376] should_fail_ex+0x394/0x4c0 [ 438.602827][T14376] get_futex_key+0x857/0x1030 [ 438.607575][T14376] ? futex_setup_timer+0xc0/0xc0 [ 438.612585][T14376] futex_wake+0x127/0x4f0 [ 438.617043][T14376] ? futex_wake_mark+0x150/0x150 [ 438.622068][T14376] do_futex+0x35d/0x3e0 [ 438.626374][T14376] ? __might_fault+0xaa/0x120 [ 438.631235][T14376] ? __ia32_sys_get_robust_list+0x110/0x110 [ 438.637220][T14376] ? __might_fault+0xc6/0x120 [ 438.642027][T14376] mm_release+0x184/0x3a0 [ 438.646433][T14376] ? exit_mm_release+0x30/0x30 [ 438.651350][T14376] ? lockdep_hardirqs_on+0x98/0x150 [ 438.656722][T14376] exit_mm+0xa4/0x340 [ 438.660780][T14376] ? sysctl_delayacct+0x220/0x220 [ 438.665881][T14376] ? do_exit+0x2530/0x2530 [ 438.670385][T14376] do_exit+0x909/0x2530 [ 438.674625][T14376] ? put_task_struct+0xc0/0xc0 [ 438.679517][T14376] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 438.685593][T14376] ? get_signal+0x100e/0x1390 [ 438.690345][T14376] ? lock_chain_count+0x20/0x20 [ 438.695278][T14376] ? _raw_spin_lock_irq+0xbb/0xf0 [ 438.700474][T14376] do_group_exit+0x22d/0x2f0 [ 438.705135][T14376] ? lockdep_hardirqs_on+0x98/0x150 [ 438.710421][T14376] get_signal+0x12a6/0x1390 [ 438.715010][T14376] arch_do_signal_or_restart+0xc2/0x7b0 [ 438.720631][T14376] ? __ia32_sys_get_robust_list+0x110/0x110 [ 438.726725][T14376] ? get_sigframe_size+0x20/0x20 [ 438.731762][T14376] ? exit_to_user_mode_loop+0x3b/0x110 [ 438.737310][T14376] exit_to_user_mode_loop+0x70/0x110 [ 438.742672][T14376] exit_to_user_mode_prepare+0xee/0x180 [ 438.748300][T14376] syscall_exit_to_user_mode+0x1a/0x50 [ 438.753845][T14376] do_syscall_64+0x61/0xb0 [ 438.758773][T14376] ? clear_bhb_loop+0x40/0x90 [ 438.763530][T14376] ? clear_bhb_loop+0x40/0x90 [ 438.768283][T14376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.774247][T14376] RIP: 0033:0x7fedc259e159 [ 438.778719][T14376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.798385][T14376] RSP: 002b:00007fedc34700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 438.806881][T14376] RAX: fffffffffffffe00 RBX: 00007fedc2825fa8 RCX: 00007fedc259e159 [ 438.815098][T14376] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fedc2825fa8 [ 438.823199][T14376] RBP: 00007fedc2825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 438.831309][T14376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.839319][T14376] R13: 00007fedc2826038 R14: 00007ffec9a79d70 R15: 00007ffec9a79e58 [ 438.847372][T14376] [ 439.047451][T14387] loop0: detected capacity change from 0 to 512 [ 439.061696][T14387] EXT4-fs: Ignoring removed nobh option [ 439.096768][T14387] EXT4-fs (loop0): Test dummy encryption mode enabled [ 439.120088][T14387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 439.170479][T14387] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 439.255592][T14387] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 439.286269][T14387] EXT4-fs (loop0): 1 truncate cleaned up [ 439.298284][T14387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.472441][ T5762] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 439.598389][ T5762] usb 4-1: USB disconnect, device number 2 [ 439.877224][T14405] loop4: detected capacity change from 0 to 1024 [ 439.898000][T14405] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 439.920693][T14387] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 439.977531][T14405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.280965][T14417] loop3: detected capacity change from 0 to 256 [ 440.395293][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.401985][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.521892][T12806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.109486][T13604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.377752][T14437] loop3: detected capacity change from 0 to 128 [ 441.397883][T14436] FAULT_INJECTION: forcing a failure. [ 441.397883][T14436] name failslab, interval 1, probability 0, space 0, times 0 [ 441.418503][T14437] EXT4-fs: Ignoring removed i_version option [ 441.425439][T14436] CPU: 0 PID: 14436 Comm: syz.0.2922 Not tainted syzkaller #0 [ 441.433061][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.443704][T14436] Call Trace: [ 441.447049][T14436] [ 441.450058][T14436] dump_stack_lvl+0x18c/0x250 [ 441.454815][T14436] ? show_regs_print_info+0x20/0x20 [ 441.460183][T14436] ? load_image+0x420/0x420 [ 441.464765][T14436] ? __lock_acquire+0x7d80/0x7d80 [ 441.469884][T14436] should_fail_ex+0x394/0x4c0 [ 441.474660][T14436] should_failslab+0x9/0x20 [ 441.479242][T14436] slab_pre_alloc_hook+0x59/0x300 [ 441.484350][T14436] ? free_vm_area+0x50/0x50 [ 441.488957][T14436] ? bpf_prog_alloc_no_stats+0xd7/0x430 [ 441.494575][T14436] __kmem_cache_alloc_node+0x53/0x250 [ 441.500030][T14436] ? bpf_prog_alloc_no_stats+0xd7/0x430 [ 441.505653][T14436] kmalloc_trace+0x2a/0xe0 [ 441.510156][T14436] bpf_prog_alloc_no_stats+0xd7/0x430 [ 441.515610][T14436] bpf_prog_alloc+0x3d/0x1a0 [ 441.520277][T14436] bpf_prog_load+0x6b2/0x1610 [ 441.525122][T14436] ? map_freeze+0x420/0x420 [ 441.529710][T14436] ? __might_fault+0xaa/0x120 [ 441.534508][T14436] ? __lock_acquire+0x7d80/0x7d80 [ 441.539884][T14436] ? __might_fault+0xaa/0x120 [ 441.544680][T14436] ? __might_fault+0xc6/0x120 [ 441.549462][T14436] ? __might_fault+0xaa/0x120 [ 441.554241][T14436] ? bpf_lsm_bpf+0x9/0x10 [ 441.558724][T14436] ? security_bpf+0x7e/0xa0 [ 441.563293][T14436] __sys_bpf+0x5ba/0x890 [ 441.567602][T14436] ? bpf_link_show_fdinfo+0x390/0x390 [ 441.573058][T14436] ? lock_chain_count+0x20/0x20 [ 441.577988][T14436] __x64_sys_bpf+0x7c/0x90 [ 441.582474][T14436] do_syscall_64+0x55/0xb0 [ 441.588067][T14436] ? clear_bhb_loop+0x40/0x90 [ 441.592822][T14436] ? clear_bhb_loop+0x40/0x90 [ 441.597667][T14436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.603640][T14436] RIP: 0033:0x7fedc259e159 [ 441.608126][T14436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.627801][T14436] RSP: 002b:00007fedc3470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.636332][T14436] RAX: ffffffffffffffda RBX: 00007fedc2825fa0 RCX: 00007fedc259e159 [ 441.644376][T14436] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 441.652436][T14436] RBP: 00007fedc263503b R08: 0000000000000000 R09: 0000000000000000 [ 441.660565][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.668609][T14436] R13: 00007fedc2826038 R14: 00007fedc2825fa0 R15: 00007ffec9a79e58 [ 441.676670][T14436] [ 441.683067][T14437] EXT4-fs: inline encryption not supported [ 441.763119][T14437] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 441.847443][T14445] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2925'. [ 441.869595][T14437] ext4 filesystem being mounted at /162/sys supports timestamps until 2038-01-19 (0x7fffffff) [ 443.041963][T12475] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 444.610287][T14472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2934'. [ 444.640471][T14472] ------------[ cut here ]------------ [ 444.646031][T14472] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 444.684272][T14472] WARNING: CPU: 1 PID: 14472 at net/sched/cls_u32.c:855 u32_change+0x1df2/0x2860 [ 444.693782][T14472] Modules linked in: [ 444.697759][T14472] CPU: 1 PID: 14472 Comm: syz.2.2934 Not tainted syzkaller #0 [ 444.705584][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.715876][T14472] RIP: 0010:u32_change+0x1df2/0x2860 [ 444.721317][T14472] Code: f8 eb 59 e8 e0 58 cf f8 c6 05 28 eb be 05 01 b9 10 00 00 00 48 c7 c7 00 62 c8 8b 4c 89 f6 48 c7 c2 80 62 c8 8b e8 7e 25 99 f8 <0f> 0b e9 10 ef ff ff e8 b2 58 cf f8 eb 24 e8 ab 58 cf f8 c6 05 a0 [ 444.741446][T14472] RSP: 0018:ffffc9001105ed60 EFLAGS: 00010246 [ 444.747591][T14472] RAX: 5f5a1deb491b8300 RBX: ffff88805aa17000 RCX: 0000000000080000 [ 444.755939][T14472] RDX: ffffc9000e628000 RSI: 0000000000005b24 RDI: 0000000000005b25 [ 444.764063][T14472] RBP: ffffc9001105eef8 R08: ffffc9001105e967 R09: 1ffff9200220bd2c [ 444.773321][T14472] R10: dffffc0000000000 R11: fffff5200220bd2d R12: 1ffff9200220bdbc [ 444.782011][T14472] R13: ffff88805aa148e8 R14: 0000000000000020 R15: 0000000000000001 [ 444.790400][T14472] FS: 00007fac579da6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 444.799806][T14472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.806508][T14472] CR2: 0000200000008400 CR3: 000000001d7b9000 CR4: 00000000003526e0 [ 444.814680][T14472] Call Trace: [ 444.818025][T14472] [ 444.821087][T14472] ? u32_get+0x370/0x370 [ 444.825456][T14472] tc_new_tfilter+0x1109/0x1840 [ 444.830478][T14472] ? tcf_proto_signal_destroying+0x240/0x240 [ 444.836561][T14472] ? rcu_read_unlock+0x8c/0xa0 [ 444.841576][T14472] ? tcf_proto_signal_destroying+0x240/0x240 [ 444.847815][T14472] ? tcf_proto_signal_destroying+0x240/0x240 [ 444.853952][T14472] rtnetlink_rcv_msg+0x892/0xf90 [ 444.859113][T14472] ? rtnetlink_rcv_msg+0x220/0xf90 [ 444.864304][T14472] ? rtnetlink_bind+0x80/0x80 [ 444.873049][T14472] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 444.880250][T14472] ? lock_chain_count+0x20/0x20 [ 444.885217][T14472] ? __local_bh_enable_ip+0x13a/0x1c0 [ 444.890784][T14472] ? lockdep_hardirqs_on+0x98/0x150 [ 444.896094][T14472] ? __local_bh_enable_ip+0x13a/0x1c0 [ 444.901724][T14472] ? _local_bh_enable+0xa0/0xa0 [ 444.906672][T14472] ? __dev_queue_xmit+0x272/0x37e0 [ 444.912003][T14472] ? __dev_queue_xmit+0x1329/0x37e0 [ 444.917293][T14472] ? __dev_queue_xmit+0x272/0x37e0 [ 444.922597][T14472] ? ref_tracker_free+0x686/0x830 [ 444.928015][T14472] netlink_rcv_skb+0x235/0x4c0 [ 444.933287][T14472] ? rtnetlink_bind+0x80/0x80 [ 444.938224][T14472] ? netlink_ack+0x1160/0x1160 [ 444.943187][T14472] ? __lock_acquire+0x7d80/0x7d80 [ 444.948308][T14472] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.953915][T14472] netlink_unicast+0x7b1/0x930 [ 444.958758][T14472] netlink_sendmsg+0x8d0/0xbf0 [ 444.963685][T14472] ? netlink_getsockopt+0x590/0x590 [ 444.968994][T14472] ? apparmor_socket_sendmsg+0x8e/0x330 [ 444.975711][T14472] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 444.981305][T14472] ? security_socket_sendmsg+0x80/0xa0 [ 444.986933][T14472] ? netlink_getsockopt+0x590/0x590 [ 444.992278][T14472] ____sys_sendmsg+0x61b/0x980 [ 444.997140][T14472] ? __asan_memset+0x22/0x40 [ 445.001984][T14472] ? __sys_sendmsg_sock+0x30/0x30 [ 445.007081][T14472] ? __import_iovec+0x5f2/0x850 [ 445.012060][T14472] ? import_iovec+0x73/0xa0 [ 445.016649][T14472] ___sys_sendmsg+0x2a6/0x360 [ 445.021481][T14472] ? preempt_schedule+0xc0/0xd0 [ 445.026418][T14472] ? __sys_sendmsg+0x2b0/0x2b0 [ 445.031402][T14472] __sys_sendmmsg+0x2ca/0x510 [ 445.036253][T14472] ? __ia32_sys_sendmsg+0x90/0x90 [ 445.041707][T14472] ? __ia32_sys_get_robust_list+0x110/0x110 [ 445.047692][T14472] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 445.053790][T14472] ? lock_chain_count+0x20/0x20 [ 445.058740][T14472] __x64_sys_sendmmsg+0xa0/0xb0 [ 445.063753][T14472] do_syscall_64+0x55/0xb0 [ 445.068256][T14472] ? clear_bhb_loop+0x40/0x90 [ 445.074078][T14472] ? clear_bhb_loop+0x40/0x90 [ 445.078860][T14472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.085251][T14472] RIP: 0033:0x7fac56b9e159 [ 445.089832][T14472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.109881][T14472] RSP: 002b:00007fac579da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 445.118587][T14472] RAX: ffffffffffffffda RBX: 00007fac56e25fa0 RCX: 00007fac56b9e159 [ 445.126673][T14472] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 445.134773][T14472] RBP: 00007fac56c3503b R08: 0000000000000000 R09: 0000000000000000 [ 445.142935][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.151030][T14472] R13: 00007fac56e26038 R14: 00007fac56e25fa0 R15: 00007fff1294f718 [ 445.159130][T14472] [ 445.162215][T14472] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 445.169546][T14472] CPU: 1 PID: 14472 Comm: syz.2.2934 Not tainted syzkaller #0 [ 445.177048][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.187189][T14472] Call Trace: [ 445.190543][T14472] [ 445.193508][T14472] dump_stack_lvl+0x18c/0x250 [ 445.198405][T14472] ? show_regs_print_info+0x20/0x20 [ 445.203684][T14472] ? load_image+0x420/0x420 [ 445.208237][T14472] panic+0x2ca/0x720 [ 445.212183][T14472] ? bpf_jit_dump+0xd0/0xd0 [ 445.216744][T14472] __warn+0x2e0/0x470 [ 445.220773][T14472] ? u32_change+0x1df2/0x2860 [ 445.225500][T14472] ? u32_change+0x1df2/0x2860 [ 445.230226][T14472] report_bug+0x2be/0x4f0 [ 445.234601][T14472] ? u32_change+0x1df2/0x2860 [ 445.239375][T14472] ? u32_change+0x1df2/0x2860 [ 445.244101][T14472] ? u32_change+0x1df4/0x2860 [ 445.248824][T14472] handle_bug+0xcf/0x120 [ 445.253132][T14472] exc_invalid_op+0x1a/0x50 [ 445.257689][T14472] asm_exc_invalid_op+0x1a/0x20 [ 445.262585][T14472] RIP: 0010:u32_change+0x1df2/0x2860 [ 445.267935][T14472] Code: f8 eb 59 e8 e0 58 cf f8 c6 05 28 eb be 05 01 b9 10 00 00 00 48 c7 c7 00 62 c8 8b 4c 89 f6 48 c7 c2 80 62 c8 8b e8 7e 25 99 f8 <0f> 0b e9 10 ef ff ff e8 b2 58 cf f8 eb 24 e8 ab 58 cf f8 c6 05 a0 [ 445.287581][T14472] RSP: 0018:ffffc9001105ed60 EFLAGS: 00010246 [ 445.293695][T14472] RAX: 5f5a1deb491b8300 RBX: ffff88805aa17000 RCX: 0000000000080000 [ 445.301708][T14472] RDX: ffffc9000e628000 RSI: 0000000000005b24 RDI: 0000000000005b25 [ 445.309716][T14472] RBP: ffffc9001105eef8 R08: ffffc9001105e967 R09: 1ffff9200220bd2c [ 445.317817][T14472] R10: dffffc0000000000 R11: fffff5200220bd2d R12: 1ffff9200220bdbc [ 445.325832][T14472] R13: ffff88805aa148e8 R14: 0000000000000020 R15: 0000000000000001 [ 445.333867][T14472] ? u32_get+0x370/0x370 [ 445.338238][T14472] tc_new_tfilter+0x1109/0x1840 [ 445.343153][T14472] ? tcf_proto_signal_destroying+0x240/0x240 [ 445.349229][T14472] ? rcu_read_unlock+0x8c/0xa0 [ 445.354041][T14472] ? tcf_proto_signal_destroying+0x240/0x240 [ 445.360066][T14472] ? tcf_proto_signal_destroying+0x240/0x240 [ 445.366240][T14472] rtnetlink_rcv_msg+0x892/0xf90 [ 445.371257][T14472] ? rtnetlink_rcv_msg+0x220/0xf90 [ 445.376445][T14472] ? rtnetlink_bind+0x80/0x80 [ 445.381191][T14472] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 445.387222][T14472] ? lock_chain_count+0x20/0x20 [ 445.392118][T14472] ? __local_bh_enable_ip+0x13a/0x1c0 [ 445.397664][T14472] ? lockdep_hardirqs_on+0x98/0x150 [ 445.402922][T14472] ? __local_bh_enable_ip+0x13a/0x1c0 [ 445.408341][T14472] ? _local_bh_enable+0xa0/0xa0 [ 445.413235][T14472] ? __dev_queue_xmit+0x272/0x37e0 [ 445.418394][T14472] ? __dev_queue_xmit+0x1329/0x37e0 [ 445.423656][T14472] ? __dev_queue_xmit+0x272/0x37e0 [ 445.428831][T14472] ? ref_tracker_free+0x686/0x830 [ 445.433907][T14472] netlink_rcv_skb+0x235/0x4c0 [ 445.438719][T14472] ? rtnetlink_bind+0x80/0x80 [ 445.443442][T14472] ? netlink_ack+0x1160/0x1160 [ 445.448256][T14472] ? __lock_acquire+0x7d80/0x7d80 [ 445.453323][T14472] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.458565][T14472] netlink_unicast+0x7b1/0x930 [ 445.463377][T14472] netlink_sendmsg+0x8d0/0xbf0 [ 445.468186][T14472] ? netlink_getsockopt+0x590/0x590 [ 445.473516][T14472] ? apparmor_socket_sendmsg+0x8e/0x330 [ 445.479106][T14472] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 445.484520][T14472] ? security_socket_sendmsg+0x80/0xa0 [ 445.490044][T14472] ? netlink_getsockopt+0x590/0x590 [ 445.495286][T14472] ____sys_sendmsg+0x61b/0x980 [ 445.500098][T14472] ? __asan_memset+0x22/0x40 [ 445.504830][T14472] ? __sys_sendmsg_sock+0x30/0x30 [ 445.509899][T14472] ? __import_iovec+0x5f2/0x850 [ 445.514819][T14472] ? import_iovec+0x73/0xa0 [ 445.519378][T14472] ___sys_sendmsg+0x2a6/0x360 [ 445.524108][T14472] ? preempt_schedule+0xc0/0xd0 [ 445.529015][T14472] ? __sys_sendmsg+0x2b0/0x2b0 [ 445.533863][T14472] __sys_sendmmsg+0x2ca/0x510 [ 445.538586][T14472] ? __ia32_sys_sendmsg+0x90/0x90 [ 445.543693][T14472] ? __ia32_sys_get_robust_list+0x110/0x110 [ 445.549642][T14472] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 445.555664][T14472] ? lock_chain_count+0x20/0x20 [ 445.560650][T14472] __x64_sys_sendmmsg+0xa0/0xb0 [ 445.565551][T14472] do_syscall_64+0x55/0xb0 [ 445.570018][T14472] ? clear_bhb_loop+0x40/0x90 [ 445.574731][T14472] ? clear_bhb_loop+0x40/0x90 [ 445.579448][T14472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.585421][T14472] RIP: 0033:0x7fac56b9e159 [ 445.589975][T14472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.609715][T14472] RSP: 002b:00007fac579da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 445.618177][T14472] RAX: ffffffffffffffda RBX: 00007fac56e25fa0 RCX: 00007fac56b9e159 [ 445.626192][T14472] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 445.634294][T14472] RBP: 00007fac56c3503b R08: 0000000000000000 R09: 0000000000000000 [ 445.642348][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.650446][T14472] R13: 00007fac56e26038 R14: 00007fac56e25fa0 R15: 00007fff1294f718 [ 445.658504][T14472] [ 445.662184][T14472] Kernel Offset: disabled [ 445.666571][T14472] Rebooting in 86400 seconds..