last executing test programs: 5m39.608224426s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 5m39.44993645s ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/dynamic_debug/control\x00', 0x2, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80049370, 0x0) 5m39.338357012s ago: executing program 3 (id=11): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390400e9ab00fcffffff00000000", @ANYRES32=r1, @ANYBLOB="01980000000000002800128008000100677265001c00028008000700ac1414bb050013000100000005000a000000"], 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 5m38.592225119s ago: executing program 3 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x0, 0xfffff03a}, {0x6, 0x4, 0x0, 0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 5m37.900480095s ago: executing program 32 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x0, 0xfffff03a}, {0x6, 0x4, 0x0, 0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 3m31.09272785s ago: executing program 2 (id=737): fanotify_init(0x4, 0x101000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x7e6, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x11, r1, 0x0) 3m30.093093123s ago: executing program 2 (id=740): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054d0}, 0x8020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x4040804) 3m29.731871281s ago: executing program 2 (id=742): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002cc0)='\t', 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2000000, 0x39d}) 3m29.176143554s ago: executing program 2 (id=747): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201081e, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x5, 0x459, &(0x7f0000000600)="$eJzs3M1vFOUfAPDvTLvlxw+wFfGFF7WKxsaXlgIqBw9qNPGAiYke9Ni0hSALNbQmQhoFY/BkjIl349F/wZNejPFk4lXvhoSYXgBPa2Znhu4u24Uuuyy6n08y8DzzPNPn+Xbm2X1mnt0GMLQms3+SiO0R8XtEjOfZ5gqT+X9X11bnr62tzidRq739V1Kvd2Vtdb6sWh63rchMpRHpZ0nsbdPu8tlzJ+eq1cUzRX5m5dQHM8tnzz134tTc8cXji6cPHjly+NDsiy8cfL4ncWZ9urLn46V9u99476s3j37RFH9LHD0y2anwyVqtx80N1o6GdDI6wI6wKSMRkZ2uSn38j8dIrJ+88Xj904F2DuirWq1W27Zx8fka8B+WRHPekIdhUb7Rp2ur81eKrXUS8HL/ph8Dd/mV/AYoi/tqseUlo5EWdSot97e9NBkR757/+5tsi/48hwAAaPJDNv95Np93NM//0nigod49xdrQRETcGxE7I+K+iNgVEfdH1Os+GBEPbbL91kWSG+c/6aWuArtF2fzvpWJtq3n+V87+YmKkyO2ox19Jjp2oLh4ofidTUdmS5Wc7tPHja799uVFZ4/wv27L2y7lg0Y9Lo1uaj1mYW5m7nZgbXb4QsWe0XfzJ9ZWAJCJ2R8SeLts48fR3+zYqu3n8HfRgnan2bcRT+fk/Hy3xl5LO65Mz/4vq4oGZ8qq40S+/Xnxro/ZvK/4eyM7//9te/9fjn0ga12uXN9/GxT8+3/Ceptvrfyx5p54eK/Z9NLeycmY2Yiw5mne6cf/B9WPLfFk/i39qf/vxvzPWfxN7IyK7iB+OiEci4tGi749FxOMRsb9D/D+/+sT73cffX1n8C5s6/+uJsWjd0z4xcvKn75sanbgh/mudz//hemqq2HMrr3+30q/urmYAAAD490kjYnsk6fT1dJpOT+efl98VkVaXlleeObb04emF/DsCE1FJyydd4w3PQ2eL2/o8fyEi8o8WlOWHiufGX49sreen55eqC4MOHobcttbxfy0ipvOyP0cG3Tug73xfC4aX8Q/Dy/iH4WX8w/BqM/63DqIfwJ3X7v3/kwH0A7jzWsa/ZT8YIu7/YXgZ/zC8jH8YSstb4+Zfku+YKH9Sl4e3SZR/06FnP3AgiajcFd3oWyLSu6IbEn1KDO41CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJf+CQAA//+8KN00") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000f80)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) r2 = fspick(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x48000, 0x0) 3m28.47531502s ago: executing program 2 (id=753): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) 3m27.864068734s ago: executing program 2 (id=755): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9273f6a588e", 0x6, 0x4044880, 0x0, 0x0) 3m27.191671649s ago: executing program 33 (id=755): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9273f6a588e", 0x6, 0x4044880, 0x0, 0x0) 2m32.662562244s ago: executing program 5 (id=1012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000280)}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x100, 0x0, &(0x7f0000000380)=@transaction={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r2}], 0x100, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740), 0x100, 0x0, &(0x7f0000000780)=@reply={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x50, 0x0, &(0x7f00000008c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000940)={@flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f00000009c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r3}]}) 2m25.252901943s ago: executing program 5 (id=1020): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10005, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 2m24.272375216s ago: executing program 5 (id=1023): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mount(0x0, 0x0, 0x0, 0x10005, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = add_key$user(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000003280)='#', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="7f552b84e40eb0d1e0c60392d34009a8d15935f66db347340898c2e0f212f85cad7ac3f784dfae9e2c53707f5981b94efba342bf6ea89c2fe35ff39a38881be90a1e482e8d0fdf58964318951543a417277a0e3a0adb9989076d5c1b9941a2b8f139cca669b9fc683015ab1adb8a060778a9f41e527ecff8fcc5afee883d0c918620145dcdc9103a900628b4581ba106c5d4d7e42f07e2b7a352feab745e52fea48d92fab11fa01ac963d54a1d21525ef9dd63ff551d815e8cdb5b15ee48d922", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001080)={r1, r2, r1}, &(0x7f0000000100)=""/64, 0x40, &(0x7f0000001180)={&(0x7f00000000c0)={'sha1-generic\x00'}}) mount(0x0, &(0x7f0000000400)='./cgroup\x00', 0x0, 0x29e1091, 0x0) io_setup(0x482, 0x0) 2m23.932014544s ago: executing program 5 (id=1025): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x12d) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='htcp', 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000540)="89", 0x1, 0x6044800, 0x0, 0x0) 2m20.623984799s ago: executing program 5 (id=1037): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2m20.100823441s ago: executing program 5 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x1c) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0xcee5f433653f8918, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x55) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x1, {0x0, 0xf0}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m4.681729963s ago: executing program 34 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x1c) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0xcee5f433653f8918, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x55) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x1, {0x0, 0xf0}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 8.095794785s ago: executing program 4 (id=1730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x1010) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x40, &(0x7f0000000200), 0x4, 0x97d7, &(0x7f00000021c0)="$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") setxattr$trusted_overlay_upper(&(0x7f000000b9c0)='./file1\x00', &(0x7f000000ba00), &(0x7f000000ba40)=ANY=[], 0x841, 0x1) llistxattr(&(0x7f000000ba80)='./file1\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000440)='./file2\x00', 0x200000, &(0x7f0000000480)={[{@gid}, {@barrier}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-9'}}, {@nobarrier}]}, 0xfe, 0x5ea, &(0x7f0000000540)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) 6.704527106s ago: executing program 4 (id=1741): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='fd/3\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/asound/timers\x00', 0x1800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x100ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x3e3}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6.1281403s ago: executing program 4 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x1000) 5.373983117s ago: executing program 4 (id=1747): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000440)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = io_uring_setup(0x46eb, &(0x7f0000000480)={0x0, 0x18cc, 0x10000, 0x1, 0xa}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 4.699080203s ago: executing program 1 (id=1750): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x2b, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x1, 0x0, 0x0, 0x800, 0x200000000000000, 0x3}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 3.200602487s ago: executing program 1 (id=1752): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000001df80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f000001dfc0), &(0x7f000001e000)='./file0\x00', 0x0, &(0x7f000001e040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 2.963358592s ago: executing program 1 (id=1753): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x200008, &(0x7f0000000980)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000009c0)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', 0xa880, 0x85) lseek(r3, 0x104, 0x1) getdents64(r3, 0x0, 0x4f) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="0500020008000000060005004e20000008000300ffffffff05000500060000000800020000000000050005000500000040000180050002000100000008000300ac1e0101060001000a000000080003007f000001080006000c00000014000400fe80000000000000000000000000002c"], 0xcc}, 0x1, 0x0, 0x0, 0x2080080}, 0x4008005) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000800)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x10, 0x38, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.887112053s ago: executing program 0 (id=1754): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x101, "c66e8b021cad011da5ec68d2ef5ad449d58a811aba406534d58b9bcd46378be7"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x660100) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) brk(0xfffdfffffffffffd) 2.788512046s ago: executing program 6 (id=1755): r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x0, 0x0) setns(0xc9, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c2200001500010000000000fbdbdf250a00000004000000140001"], 0x225c}, 0x1, 0x0, 0x0, 0x20004855}, 0x0) splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf) 2.61345385s ago: executing program 0 (id=1756): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) write(r1, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) close(r1) 2.545037041s ago: executing program 1 (id=1757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0xfffffbd1, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 2.448366594s ago: executing program 6 (id=1758): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d0, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.369001856s ago: executing program 0 (id=1759): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 2.122580781s ago: executing program 4 (id=1760): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 1.890764586s ago: executing program 6 (id=1761): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.71659335s ago: executing program 4 (id=1762): r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00001ba000/0x400000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1}) pipe2$9p(&(0x7f0000000080), 0x80800) setpriority(0x2, 0x0, 0xe2ae) 1.381882468s ago: executing program 6 (id=1763): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x100000f, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.380273338s ago: executing program 1 (id=1771): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x8001) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 725.035623ms ago: executing program 0 (id=1764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0}, 0x50) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x69, 0xc, 0xc}], 0x10, 0xcb}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 652.328555ms ago: executing program 1 (id=1765): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}], 0x1, 0x5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "0f"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 432.450609ms ago: executing program 0 (id=1766): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x200008, &(0x7f0000000980)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000009c0)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', 0xa880, 0x85) lseek(r3, 0x104, 0x1) getdents64(r3, 0x0, 0x4f) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="0500020008000000060005004e20000008000300ffffffff05000500060000000800020000000000050005000500000040000180050002000100000008000300ac1e0101060001000a000000080003007f000001080006000c00000014000400fe80000000000000000000000000002c"], 0xcc}, 0x1, 0x0, 0x0, 0x2080080}, 0x4008005) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000800)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x10, 0x38, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 274.225533ms ago: executing program 6 (id=1767): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 95.154017ms ago: executing program 0 (id=1768): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc5}, 0x400c010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="20e9af94ad8a5a4f34cb9026eb5c70b32ea9a66764b5b7dc03d3c78a96eb1a9a35ed67fb276ba64c91233ac322a67fa6943743a395f917ed105e7c3da50796fe38d9629e7dd871388ef25e12ac407748f5ca854a6fee0f9c3f45764a8812491132a29a79bdf5322f8a36c2", 0x6b}], 0x1}, 0x0) 0s ago: executing program 6 (id=1769): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x800100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x21) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) kernel console output (not intermixed with test programs): fffc9000523fae0 R14: ffffc9000523fae0 R15: 000020000005e000 [ 214.900608][ T7990] ? rcuref_put_slowpath+0x141/0x150 [ 214.906025][ T7990] _copy_from_user+0x8b/0xe0 [ 214.910683][ T7990] ___sys_recvmsg+0x174/0x590 [ 214.915521][ T7990] ? lockdep_hardirqs_on+0x98/0x150 [ 214.920791][ T7990] ? __sys_recvmsg+0x2a0/0x2a0 [ 214.925685][ T7990] ? __lock_acquire+0x7eb0/0x7eb0 [ 214.930823][ T7990] ? __might_fault+0xc6/0x120 [ 214.935957][ T7990] ? __might_fault+0xaa/0x120 [ 214.940737][ T7990] do_recvmmsg+0x377/0x810 [ 214.945647][ T7990] ? __sys_recvmmsg+0x290/0x290 [ 214.950602][ T7990] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 214.956646][ T7990] __x64_sys_recvmmsg+0x199/0x250 [ 214.961745][ T7990] ? do_recvmmsg+0x810/0x810 [ 214.966440][ T7990] ? lockdep_hardirqs_on+0x98/0x150 [ 214.971753][ T7990] do_syscall_64+0x55/0xb0 [ 214.976355][ T7990] ? clear_bhb_loop+0x40/0x90 [ 214.981100][ T7990] ? clear_bhb_loop+0x40/0x90 [ 214.985907][ T7990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.991884][ T7990] RIP: 0033:0x7ff206f9f559 [ 214.996447][ T7990] RSP: 002b:00007ff207e6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 215.005078][ T7990] RAX: ffffffffffffffda RBX: 00007ff207226090 RCX: 00007ff206f9f559 [ 215.013099][ T7990] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 215.021177][ T7990] RBP: 00007ff207036b20 R08: 0000000000000000 R09: 0000000000000000 [ 215.029248][ T7990] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 215.037693][ T7990] R13: 00007ff207226128 R14: 00007ff207226090 R15: 00007ffe66ed8f88 [ 215.045917][ T7990] [ 215.066736][ T7990] OOM killer enabled. [ 215.071377][ T7990] Restarting tasks ... done. [ 215.082352][ T7990] random: crng reseeded on system resumption [ 215.091356][ T7990] PM: suspend exit [ 215.503355][ T5790] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.903340][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 215.983445][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.989640][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.504687][ T8015] vlan2: entered promiscuous mode [ 216.509807][ T8015] bridge0: entered promiscuous mode [ 216.681595][ T8016] vlan2: entered allmulticast mode [ 216.734223][ T8016] bridge0: port 3(vlan2) entered blocking state [ 216.783511][ T8016] bridge0: port 3(vlan2) entered disabled state [ 216.838937][ T8016] vlan2: entered promiscuous mode [ 216.859799][ T8016] bridge0: mtu less than device minimum [ 216.901432][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 217.846712][ T8037] loop2: detected capacity change from 0 to 1024 [ 218.063579][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.070078][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 218.070120][ T28] audit: type=1800 audit(217.952:781): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.632" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 218.137912][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 218.198484][ T8045] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.207770][ T8045] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.217078][ T8045] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.226088][ T8045] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.341065][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 219.183223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 221.284166][ T8081] Core dump to core aborted: cannot preserve file permissions [ 222.032672][ T8088] netlink: 140 bytes leftover after parsing attributes in process `syz.4.652'. [ 222.044364][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 222.260976][ T8092] loop1: detected capacity change from 0 to 256 [ 222.478413][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 222.493597][ T8092] FAT-fs (loop1): Directory bread(block 64) failed [ 222.501054][ T8092] FAT-fs (loop1): Directory bread(block 65) failed [ 222.543993][ T8092] FAT-fs (loop1): Directory bread(block 66) failed [ 222.575538][ T8092] FAT-fs (loop1): Directory bread(block 67) failed [ 222.600920][ T8092] FAT-fs (loop1): Directory bread(block 68) failed [ 222.636402][ T8092] FAT-fs (loop1): Directory bread(block 69) failed [ 222.733713][ T8092] FAT-fs (loop1): Directory bread(block 70) failed [ 222.749754][ T8092] FAT-fs (loop1): Directory bread(block 71) failed [ 222.784802][ T8092] FAT-fs (loop1): Directory bread(block 72) failed [ 222.842236][ T8092] FAT-fs (loop1): Directory bread(block 73) failed [ 225.066470][ T5786] Bluetooth: hci0: unexpected event for opcode 0x2064 [ 226.142905][ T28] audit: type=1326 audit(226.022:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 226.212805][ T28] audit: type=1326 audit(226.022:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 226.301784][ T28] audit: type=1326 audit(226.022:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 226.378068][ T28] audit: type=1326 audit(226.022:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 226.500170][ T28] audit: type=1326 audit(226.022:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 226.608711][ T28] audit: type=1326 audit(226.062:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 226.709666][ T28] audit: type=1326 audit(226.062:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 226.817118][ T28] audit: type=1326 audit(226.072:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 226.916449][ T28] audit: type=1326 audit(226.072:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 226.996724][ T28] audit: type=1326 audit(226.072:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 227.880762][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 235.191611][ T8299] loop2: detected capacity change from 0 to 128 [ 235.431607][ T8305] mmap: syz.2.719 (8305): VmData 43970560 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 235.704906][ T43] kworker/u4:3: attempt to access beyond end of device [ 235.704906][ T43] loop2: rw=1, sector=145, nr_sectors = 6 limit=128 [ 236.034971][ T8321] loop2: detected capacity change from 0 to 256 [ 236.159748][ T8321] FAT-fs (loop2): Directory bread(block 64) failed [ 236.198185][ T8321] FAT-fs (loop2): Directory bread(block 65) failed [ 236.219783][ T8321] FAT-fs (loop2): Directory bread(block 66) failed [ 236.243726][ T8321] FAT-fs (loop2): Directory bread(block 67) failed [ 236.296954][ T8321] FAT-fs (loop2): Directory bread(block 68) failed [ 236.317162][ T8321] FAT-fs (loop2): Directory bread(block 69) failed [ 236.347751][ T8321] FAT-fs (loop2): Directory bread(block 70) failed [ 236.374280][ T8321] FAT-fs (loop2): Directory bread(block 71) failed [ 236.416079][ T8321] FAT-fs (loop2): Directory bread(block 72) failed [ 236.422709][ T8321] FAT-fs (loop2): Directory bread(block 73) failed [ 237.329841][ T8340] batman_adv: batadv0: Adding interface: dummy0 [ 237.338127][ T8340] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.374240][ T8340] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 237.683806][ T8341] loop1: detected capacity change from 0 to 32768 [ 238.340888][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 238.449869][ T5786] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 238.501874][ T5786] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 239.579896][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 239.984458][ T8384] netlink: 'syz.0.743': attribute type 2 has an invalid length. [ 239.993234][ T8384] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.743'. [ 240.004288][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 240.432668][ T8392] loop2: detected capacity change from 0 to 512 [ 240.475002][ T8392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 240.528901][ T8392] EXT4-fs (loop2): 1 truncate cleaned up [ 240.547583][ T8392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.795908][ T8401] mmap: syz.4.750 (8401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 240.851556][ T8392] EXT4-fs (loop2): shut down requested (2) [ 241.078912][ T8405] netlink: 'syz.4.752': attribute type 4 has an invalid length. [ 241.153443][ T8408] netlink: 'syz.4.752': attribute type 4 has an invalid length. [ 241.309004][ T5775] syz_tun (unregistering): left allmulticast mode [ 241.506407][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.281385][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.299212][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.310539][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.354448][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.364608][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 243.372306][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.536009][ T8441] rxe_eth0 speed is unknown, defaulting to 1000 [ 243.796282][ T8453] overlayfs: failed to clone upperpath [ 244.362475][ T8465] netlink: 'syz.4.771': attribute type 1 has an invalid length. [ 244.528505][ T8465] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.627477][ T8466] bond4: (slave veth3): Enslaving as an active interface with a down link [ 244.684874][ T8468] bond4: (slave dummy0): making interface the new active one [ 244.733140][ T8468] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 244.765132][ T8470] netlink: 'syz.4.771': attribute type 10 has an invalid length. [ 244.798272][ T8470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.771'. [ 244.835060][ T8470] dummy0: entered promiscuous mode [ 244.853435][ T8470] bond4: (slave dummy0): Releasing active interface [ 245.077223][ T8441] chnl_net:caif_netlink_parms(): no params data found [ 245.355419][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.365919][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.374233][ T8441] bridge_slave_0: entered allmulticast mode [ 245.383861][ T8441] bridge_slave_0: entered promiscuous mode [ 245.397559][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.405828][ T8441] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.414554][ T8441] bridge_slave_1: entered allmulticast mode [ 245.423633][ T5786] Bluetooth: hci3: command tx timeout [ 245.432176][ T8441] bridge_slave_1: entered promiscuous mode [ 245.509334][ T8441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.527555][ T8441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.596513][ T8441] team0: Port device team_slave_0 added [ 245.614242][ T8441] team0: Port device team_slave_1 added [ 245.690044][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.709373][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.752666][ T8441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.808308][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.817791][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.853848][ T8441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.027777][ T8441] hsr_slave_0: entered promiscuous mode [ 246.061068][ T8441] hsr_slave_1: entered promiscuous mode [ 246.087282][ T8441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.099553][ T8441] Cannot create hsr debugfs directory [ 246.800574][ T8441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.831781][ T8441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.859047][ T8441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.880231][ T8441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.092538][ T8441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.128366][ T8500] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 247.218301][ T8500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.321810][ T8506] bond1: (slave veth3): Enslaving as an active interface with a down link [ 247.380061][ T8441] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.432691][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.440039][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.500578][ T8500] dummy0: left promiscuous mode [ 247.505631][ T5786] Bluetooth: hci3: command tx timeout [ 247.511156][ T8500] dummy0: left allmulticast mode [ 247.511438][ T8500] batman_adv: batadv0: Removing interface: dummy0 [ 247.532776][ T8500] bond1: (slave dummy0): making interface the new active one [ 247.563909][ T8500] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 247.585483][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.592702][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.631602][ T8506] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 247.648691][ T8506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.780'. [ 247.683932][ T8506] dummy0: entered promiscuous mode [ 247.691897][ T8506] bond1: (slave dummy0): Releasing active interface [ 247.738502][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 247.760414][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 247.796566][ T8513] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.808058][ T8513] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.817595][ T8513] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.826998][ T8513] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.872737][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 247.891880][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 248.827938][ T8441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.583560][ T5786] Bluetooth: hci3: command tx timeout [ 250.243910][ T5846] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 250.477023][ T5846] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.511272][ T5846] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 250.526082][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 250.553868][ T5846] usb 2-1: Product: syz [ 250.565724][ T5846] usb 2-1: Manufacturer: syz [ 250.585379][ T5846] usb 2-1: SerialNumber: syz [ 250.697308][ T8441] veth0_vlan: entered promiscuous mode [ 250.731107][ T8441] veth1_vlan: entered promiscuous mode [ 250.839788][ T8441] veth0_macvtap: entered promiscuous mode [ 250.871186][ T8441] veth1_macvtap: entered promiscuous mode [ 250.883103][ T5846] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.921827][ T8441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.947990][ T8441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.984798][ T8441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.019153][ T8441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.053687][ T8441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.071737][ T8441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.118659][ T8441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.137902][ T6628] usb 2-1: USB disconnect, device number 4 [ 251.180835][ T8441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.206530][ T6628] usblp0: removed [ 251.254548][ T8441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.280563][ T8441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.299968][ T8441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.321952][ T8441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.351274][ T8441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.370773][ T8441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.409267][ T8441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.427068][ T8441] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.663510][ T5786] Bluetooth: hci3: command tx timeout [ 251.747872][ T6938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.792661][ T6938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.941216][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.974265][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.251268][ T8595] netlink: 24 bytes leftover after parsing attributes in process `syz.5.757'. [ 252.358059][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.757'. [ 252.874660][ T8602] ref_ctr increment failed for inode: 0x517 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807903df00 [ 253.270608][ T8611] loop1: detected capacity change from 0 to 512 [ 253.296110][ T8611] EXT4-fs: Ignoring removed orlov option [ 253.313005][ T8611] EXT4-fs: Ignoring removed nobh option [ 253.395321][ T8611] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 253.489291][ T8611] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.811: invalid indirect mapped block 2683928664 (level 1) [ 253.492406][ T8616] overlayfs: failed to clone upperpath [ 253.557381][ T8611] EXT4-fs (loop1): 1 truncate cleaned up [ 253.599614][ T8611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.798708][ T8611] bridge0: port 3(syz_tun) entered blocking state [ 253.844038][ T8611] bridge0: port 3(syz_tun) entered disabled state [ 253.894319][ T8611] syz_tun: entered allmulticast mode [ 253.953560][ T8611] syz_tun: entered promiscuous mode [ 254.224570][ T8626] netlink: 168 bytes leftover after parsing attributes in process `syz.0.815'. [ 254.426048][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.877181][ T8641] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 255.019085][ T8632] ref_ctr increment failed for inode: 0x2b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807de84280 [ 255.139624][ T8648] netlink: 'syz.0.823': attribute type 10 has an invalid length. [ 255.201372][ T8648] netlink: 55 bytes leftover after parsing attributes in process `syz.0.823'. [ 255.502374][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 255.502391][ T28] audit: type=1326 audit(255.382:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 255.609235][ T28] audit: type=1326 audit(255.382:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 255.738835][ T28] audit: type=1326 audit(255.442:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 255.843467][ T28] audit: type=1326 audit(255.442:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 255.958803][ T28] audit: type=1326 audit(255.442:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 256.092404][ T28] audit: type=1326 audit(255.442:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 256.179780][ T28] audit: type=1326 audit(255.442:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 256.251162][ T28] audit: type=1326 audit(255.452:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 256.326722][ T28] audit: type=1326 audit(255.452:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 256.421129][ T28] audit: type=1326 audit(255.452:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8650 comm="syz.5.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe260f9f559 code=0x7ffc0000 [ 256.684035][ T8661] bridge0: port 4(syz_tun) entered blocking state [ 256.697699][ T8661] bridge0: port 4(syz_tun) entered disabled state [ 256.792417][ T8661] syz_tun: entered allmulticast mode [ 256.920178][ T8661] syz_tun: entered promiscuous mode [ 257.133797][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.829'. [ 257.655099][ T5846] IPVS: starting estimator thread 0... [ 257.753466][ T8681] IPVS: using max 19 ests per chain, 45600 per kthread [ 257.763374][ T6628] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 257.831911][ T8682] loop5: detected capacity change from 0 to 2048 [ 257.890168][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.835'. [ 257.928549][ T8682] loop5: p2 < > p3 < p5 > p4 [ 257.953351][ T6628] usb 2-1: Using ep0 maxpacket: 16 [ 257.964486][ T6628] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.979304][ T6628] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.003545][ T8682] loop5: partition table partially beyond EOD, truncated [ 258.011004][ T6628] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.011073][ T6628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.011097][ T6628] usb 2-1: Product: syz [ 258.011114][ T6628] usb 2-1: Manufacturer: syz [ 258.011132][ T6628] usb 2-1: SerialNumber: syz [ 258.051334][ T8682] loop5: p2 start 4278190080 is beyond EOD, truncated [ 258.107013][ T8682] loop5: p4 size 8192 extends beyond EOD, truncated [ 258.138951][ T8682] loop5: p5 size 8192 extends beyond EOD, truncated [ 258.204288][ T8687] warning: `syz.5.834' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 258.262384][ T6628] usb 2-1: 0:2 : does not exist [ 258.313743][ T6628] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 258.428160][ T6628] usb 2-1: USB disconnect, device number 5 [ 258.643851][ T8291] udevd[8291]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.915610][ T8705] bridge0: port 3(syz_tun) entered blocking state [ 259.953448][ T8705] bridge0: port 3(syz_tun) entered disabled state [ 259.981007][ T8705] syz_tun: entered allmulticast mode [ 260.021544][ T8705] syz_tun: entered promiscuous mode [ 260.051369][ T8705] bridge0: port 3(syz_tun) entered blocking state [ 260.058840][ T8705] bridge0: port 3(syz_tun) entered forwarding state [ 260.195495][ T8709] bridge0: entered promiscuous mode [ 260.359871][ T8714] loop5: detected capacity change from 0 to 1024 [ 261.690778][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.698458][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.724779][ T8739] bridge1: entered promiscuous mode [ 263.945452][ T5846] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 264.148561][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 264.215727][ T5846] usb 2-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30 [ 264.243458][ T5846] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 264.283336][ T5846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.291311][ T5846] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 264.322560][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.350841][ T5846] usb 2-1: config 0 descriptor?? [ 264.840612][ T5846] zydacron 0003:13EC:0006.0003: global environment stack underflow [ 264.859449][ T5846] zydacron 0003:13EC:0006.0003: item 0 0 1 11 parsing failed [ 264.871667][ T5846] zydacron 0003:13EC:0006.0003: parse failed [ 264.895776][ T5846] zydacron: probe of 0003:13EC:0006.0003 failed with error -22 [ 265.075433][ T6627] usb 2-1: USB disconnect, device number 6 [ 265.178409][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.861'. [ 267.382372][ T8805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.949678][ T8813] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 267.949678][ T8813] program syz.1.870 not setting count and/or reply_len properly [ 270.191302][ T8832] FAULT_INJECTION: forcing a failure. [ 270.191302][ T8832] name failslab, interval 1, probability 0, space 0, times 0 [ 270.215726][ T8832] CPU: 1 PID: 8832 Comm: syz.1.875 Tainted: G S syzkaller #0 [ 270.224584][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.234706][ T8832] Call Trace: [ 270.238040][ T8832] [ 270.241018][ T8832] dump_stack_lvl+0x18c/0x250 [ 270.245752][ T8832] ? show_regs_print_info+0x20/0x20 [ 270.251011][ T8832] ? load_image+0x420/0x420 [ 270.255590][ T8832] ? __lock_acquire+0x7eb0/0x7eb0 [ 270.260663][ T8832] ? kasan_set_track+0x5f/0x70 [ 270.265479][ T8832] ? kasan_save_free_info+0x28/0x40 [ 270.270736][ T8832] ? ____kasan_slab_free+0x126/0x1f0 [ 270.276085][ T8832] ? slab_free_freelist_hook+0x130/0x1a0 [ 270.281834][ T8832] should_fail_ex+0x394/0x4c0 [ 270.286576][ T8832] should_failslab+0x9/0x20 [ 270.291135][ T8832] slab_pre_alloc_hook+0x59/0x300 [ 270.296296][ T8832] ? blk_mq_init_tags+0x75/0x280 [ 270.301297][ T8832] __kmem_cache_alloc_node+0x53/0x250 [ 270.306740][ T8832] ? blk_mq_init_tags+0x75/0x280 [ 270.311741][ T8832] kmalloc_node_trace+0x26/0xe0 [ 270.316661][ T8832] blk_mq_init_tags+0x75/0x280 [ 270.321489][ T8832] blk_mq_alloc_map_and_rqs+0xc5/0x910 [ 270.327092][ T8832] ? kasan_quarantine_put+0xd8/0x220 [ 270.332438][ T8832] ? lockdep_hardirqs_on+0x98/0x150 [ 270.337703][ T8832] blk_mq_alloc_set_map_and_rqs+0x1a0/0x800 [ 270.343704][ T8832] blk_mq_alloc_tag_set+0x868/0x1020 [ 270.349062][ T8832] loop_add+0x2eb/0x990 [ 270.353278][ T8832] loop_control_ioctl+0x128/0x590 [ 270.358360][ T8832] ? loop_set_hw_queue_depth+0x110/0x110 [ 270.364257][ T8832] ? bpf_lsm_file_ioctl+0x9/0x10 [ 270.369244][ T8832] ? security_file_ioctl+0x80/0xa0 [ 270.374416][ T8832] ? loop_set_hw_queue_depth+0x110/0x110 [ 270.380279][ T8832] __se_sys_ioctl+0xfd/0x170 [ 270.384934][ T8832] do_syscall_64+0x55/0xb0 [ 270.389403][ T8832] ? clear_bhb_loop+0x40/0x90 [ 270.394127][ T8832] ? clear_bhb_loop+0x40/0x90 [ 270.398862][ T8832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.404905][ T8832] RIP: 0033:0x7f60ca99f559 [ 270.409370][ T8832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.429035][ T8832] RSP: 002b:00007f60cb8c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.437510][ T8832] RAX: ffffffffffffffda RBX: 00007f60cac25fa0 RCX: 00007f60ca99f559 [ 270.445616][ T8832] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 270.453639][ T8832] RBP: 00007f60caa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 270.461650][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.469667][ T8832] R13: 00007f60cac26038 R14: 00007f60cac25fa0 R15: 00007fff577fef98 [ 270.477712][ T8832] [ 270.504987][ T8832] blk-mq: reduced tag depth (128 -> 64) [ 271.103143][ T8847] loop1: detected capacity change from 0 to 2048 [ 271.448895][ T8847] rxe_eth0 speed is unknown, defaulting to 1000 [ 271.904038][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.241937][ T8863] netlink: 'syz.5.888': attribute type 1 has an invalid length. [ 272.360030][ T8863] macvlan2: entered promiscuous mode [ 272.365840][ T8863] macvlan2: entered allmulticast mode [ 275.274652][ T8912] loop5: detected capacity change from 0 to 256 [ 275.333837][ T8912] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.049390][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 277.049426][ T28] audit: type=1326 audit(276.932:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 277.166411][ T28] audit: type=1326 audit(276.972:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 277.253141][ T28] audit: type=1326 audit(276.972:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 277.373410][ T28] audit: type=1326 audit(276.972:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 277.467832][ T28] audit: type=1326 audit(276.972:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 277.542629][ T28] audit: type=1326 audit(276.982:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 277.588474][ T28] audit: type=1326 audit(277.052:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff206f5fd8e code=0x7ffc0000 [ 277.621728][ T28] audit: type=1326 audit(277.052:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff206f5fd8e code=0x7ffc0000 [ 277.710440][ T28] audit: type=1326 audit(277.082:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff206f5fd8e code=0x7ffc0000 [ 277.803412][ T28] audit: type=1326 audit(277.082:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8937 comm="syz.4.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff206f5fd8e code=0x7ffc0000 [ 279.003939][ T8966] syz_tun: left allmulticast mode [ 279.026712][ T8966] syz_tun: left promiscuous mode [ 279.048699][ T8966] bridge0: port 3(syz_tun) entered disabled state [ 279.102075][ T8966] bridge_slave_0: left allmulticast mode [ 279.132434][ T8966] bridge_slave_0: left promiscuous mode [ 279.151662][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.176109][ T8966] bridge_slave_1: left allmulticast mode [ 279.182008][ T8966] bridge_slave_1: left promiscuous mode [ 279.206462][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.276592][ T8966] bond0: (slave bond_slave_0): Releasing backup interface [ 279.375777][ T8966] bond0: (slave bond_slave_1): Releasing backup interface [ 279.495687][ T8966] team0: Port device team_slave_0 removed [ 279.570838][ T8966] team0: Port device team_slave_1 removed [ 279.609662][ T8966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.617318][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.682421][ T8966] bond1: (slave bridge3): Releasing backup interface [ 279.763991][ T8966] bond2: (slave bond3): Releasing backup interface [ 279.784574][ T8966] bond2: (slave bond3): the permanent HWaddr of slave - 0e:da:e7:57:a3:ee - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 279.838574][ T8966] bond2: (slave gretap1): making interface the new active one [ 279.908821][ T8977] FAULT_INJECTION: forcing a failure. [ 279.908821][ T8977] name failslab, interval 1, probability 0, space 0, times 0 [ 279.963752][ T8977] CPU: 1 PID: 8977 Comm: syz.1.927 Tainted: G S syzkaller #0 [ 279.972611][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.982716][ T8977] Call Trace: [ 279.986065][ T8977] [ 279.989052][ T8977] dump_stack_lvl+0x18c/0x250 [ 279.993815][ T8977] ? show_regs_print_info+0x20/0x20 [ 279.999067][ T8977] ? load_image+0x420/0x420 [ 280.003631][ T8977] ? __might_sleep+0xe0/0xe0 [ 280.008281][ T8977] ? __lock_acquire+0x7eb0/0x7eb0 [ 280.013362][ T8977] should_fail_ex+0x394/0x4c0 [ 280.018109][ T8977] should_failslab+0x9/0x20 [ 280.022673][ T8977] slab_pre_alloc_hook+0x59/0x300 [ 280.027788][ T8977] ? x509_cert_parse+0x2d5/0x7b0 [ 280.032788][ T8977] ? x509_cert_parse+0x2d5/0x7b0 [ 280.037789][ T8977] __kmem_cache_alloc_node+0x53/0x250 [ 280.043229][ T8977] ? x509_cert_parse+0x2d5/0x7b0 [ 280.048238][ T8977] __kmalloc_node_track_caller+0xa4/0x230 [ 280.054029][ T8977] kmemdup+0x2b/0x70 [ 280.058014][ T8977] x509_cert_parse+0x2d5/0x7b0 [ 280.062843][ T8977] x509_key_preparse+0x64/0x6c0 [ 280.067747][ T8977] ? down_read+0x1ac/0x2e0 [ 280.072217][ T8977] asymmetric_key_preparse+0xa9/0x140 [ 280.077649][ T8977] __key_create_or_update+0x3a6/0xa60 [ 280.083098][ T8977] ? key_create_or_update+0x60/0x60 [ 280.088376][ T8977] ? bpf_lsm_key_permission+0x9/0x10 [ 280.093752][ T8977] ? lookup_user_key+0xb66/0x1140 [ 280.098869][ T8977] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 280.104934][ T8977] key_create_or_update+0x42/0x60 [ 280.110054][ T8977] __se_sys_add_key+0x34f/0x410 [ 280.114995][ T8977] ? __x64_sys_add_key+0xc0/0xc0 [ 280.120032][ T8977] ? lockdep_hardirqs_on+0x98/0x150 [ 280.125306][ T8977] ? __x64_sys_add_key+0x20/0xc0 [ 280.130333][ T8977] do_syscall_64+0x55/0xb0 [ 280.134824][ T8977] ? clear_bhb_loop+0x40/0x90 [ 280.139555][ T8977] ? clear_bhb_loop+0x40/0x90 [ 280.144288][ T8977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.150259][ T8977] RIP: 0033:0x7f60ca99f559 [ 280.154725][ T8977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.174391][ T8977] RSP: 002b:00007f60cb8c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 280.182858][ T8977] RAX: ffffffffffffffda RBX: 00007f60cac25fa0 RCX: 00007f60ca99f559 [ 280.190886][ T8977] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 280.198906][ T8977] RBP: 00007f60caa36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 280.206926][ T8977] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 280.214946][ T8977] R13: 00007f60cac26038 R14: 00007f60cac25fa0 R15: 00007fff577fef98 [ 280.223060][ T8977] [ 280.293394][ T8966] bond2: (slave gretap1): Releasing backup interface [ 280.384329][ T8966] bond4: (slave veth3): Releasing active interface [ 280.424784][ T8966] syz.4.924 (8966) used greatest stack depth: 16040 bytes left [ 280.456885][ T8967] team0: Mode changed to "activebackup" [ 281.170730][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.937'. [ 281.903911][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 282.103374][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 282.116125][ T5843] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 282.136727][ T5843] usb 6-1: config 0 has no interface number 0 [ 282.142944][ T5843] usb 6-1: config 0 interface 12 has no altsetting 0 [ 282.167307][ T5843] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 282.193621][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.201709][ T5843] usb 6-1: Product: syz [ 282.224877][ T5843] usb 6-1: Manufacturer: syz [ 282.229564][ T5843] usb 6-1: SerialNumber: syz [ 282.250606][ T5843] usb 6-1: config 0 descriptor?? [ 282.288967][ T6940] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.420660][ T6940] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.531469][ T6940] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.742079][ T6940] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.792226][ T9040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.949'. [ 283.018994][ T6940] netdevsim netdevsim2 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.076126][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 283.200606][ T6940] netdevsim netdevsim2 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.292569][ T6940] netdevsim netdevsim2 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.405692][ T6940] netdevsim netdevsim2 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.526267][ T6940] tipc: Disabling bearer [ 283.559288][ T6940] tipc: Left network mode [ 284.418132][ T5843] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 284.472427][ T5843] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 284.513742][ T5843] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 284.571031][ T5843] f81534: probe of 6-1:0.12 failed with error -71 [ 284.633922][ T5843] usb 6-1: USB disconnect, device number 2 [ 285.008212][ T9069] syzkaller0: entered promiscuous mode [ 285.071765][ T9069] syzkaller0: entered allmulticast mode [ 285.209658][ T9073] tipc: Enabled bearer , priority 0 [ 285.308039][ T9068] tipc: Resetting bearer [ 285.396445][ T9068] tipc: Disabling bearer [ 285.423779][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.620865][ T9099] netlink: 'syz.5.965': attribute type 3 has an invalid length. [ 286.688511][ T9099] netlink: 'syz.5.965': attribute type 3 has an invalid length. [ 287.103631][ T6940] hsr_slave_0: left promiscuous mode [ 287.133729][ T6940] hsr_slave_1: left promiscuous mode [ 287.175961][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.205531][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.244555][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.293331][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.329265][ T6940] vlan3: left promiscuous mode [ 287.353642][ T6940] bridge0: port 3(vlan3) entered disabled state [ 287.401967][ T6940] bridge_slave_1: left allmulticast mode [ 287.434051][ T6940] bridge_slave_1: left promiscuous mode [ 287.456288][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.532444][ T6940] bridge_slave_0: left promiscuous mode [ 287.553717][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.648829][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 287.648846][ T28] audit: type=1326 audit(287.532:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 287.730521][ T6940] veth1_macvtap: left promiscuous mode [ 287.745836][ T28] audit: type=1326 audit(287.572:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 287.750839][ T6940] veth0_macvtap: left promiscuous mode [ 287.821693][ T6940] veth1_vlan: left promiscuous mode [ 287.828622][ T28] audit: type=1326 audit(287.572:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 287.893646][ T6940] veth0_vlan: left promiscuous mode [ 287.966038][ T28] audit: type=1326 audit(287.572:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 288.074660][ T28] audit: type=1326 audit(287.572:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 288.183453][ T28] audit: type=1326 audit(287.572:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 288.295515][ T28] audit: type=1326 audit(287.572:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 288.384066][ T28] audit: type=1326 audit(287.572:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 288.482828][ T28] audit: type=1326 audit(287.572:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 288.595740][ T28] audit: type=1326 audit(287.572:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.4.969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 288.939101][ T6940] bond1 (unregistering): (slave veth3): Releasing active interface [ 289.404905][ T6940] bond1 (unregistering): Released all slaves [ 290.586928][ T6940] team0 (unregistering): Port device team_slave_1 removed [ 290.650846][ T6940] team0 (unregistering): Port device team_slave_0 removed [ 291.201262][ T6940] bond0 (unregistering): (slave dummy0): Removing an active aggregator [ 291.211078][ T6940] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 291.291464][ T6940] bond0 (unregistering): Released all slaves [ 292.130133][ T6940] IPVS: stop unused estimator thread 0... [ 293.887126][ T9223] netlink: 'syz.4.991': attribute type 2 has an invalid length. [ 293.933330][ T9223] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.991'. [ 294.569615][ T9239] netlink: 'syz.4.996': attribute type 11 has an invalid length. [ 295.645788][ T9265] netlink: 'syz.1.1003': attribute type 2 has an invalid length. [ 295.676991][ T9265] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1003'. [ 295.904262][ T9272] lo speed is unknown, defaulting to 1000 [ 295.950529][ T9272] lo speed is unknown, defaulting to 1000 [ 295.979685][ T9272] lo speed is unknown, defaulting to 1000 [ 296.008131][ T9272] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 296.056352][ T9272] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 296.258680][ T9272] lo speed is unknown, defaulting to 1000 [ 296.286416][ T9279] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 296.327722][ T9279] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 296.353409][ T9272] lo speed is unknown, defaulting to 1000 [ 296.386194][ T9272] lo speed is unknown, defaulting to 1000 [ 296.479824][ T9272] lo speed is unknown, defaulting to 1000 [ 299.003320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 300.033247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 301.563308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 302.593269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 304.479199][ T9321] siw: device registration error -23 [ 306.257879][ T5786] Bluetooth: hci0: hcon ffff8880769b8000 sent 0 < count 1025 [ 306.550400][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.558259][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.575081][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.645228][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.401491][ T9337] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.411543][ T9337] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.421381][ T9337] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.445165][ T9337] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.737331][ T6628] lo speed is unknown, defaulting to 1000 [ 308.791160][ T9361] netlink: 'syz.1.1033': attribute type 6 has an invalid length. [ 310.618052][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 310.618090][ T28] audit: type=1804 audit(310.509:994): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1045" name="bus" dev="ramfs" ino=19033 res=1 errno=0 [ 310.683649][ T28] audit: type=1804 audit(310.519:995): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1045" name="bus" dev="ramfs" ino=19033 res=1 errno=0 [ 312.349198][ T9428] netlink: 'syz.1.1051': attribute type 8 has an invalid length. [ 313.876526][ T28] audit: type=1804 audit(313.759:996): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1058" name=06 dev="ramfs" ino=18169 res=1 errno=0 [ 314.929042][ T9493] loop1: detected capacity change from 0 to 128 [ 315.856964][ T9517] syz.1.1073 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 315.872747][ T9517] CPU: 0 PID: 9517 Comm: syz.1.1073 Tainted: G S syzkaller #0 [ 315.881784][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.891942][ T9517] Call Trace: [ 315.895255][ T9517] [ 315.898220][ T9517] dump_stack_lvl+0x18c/0x250 [ 315.902938][ T9517] ? show_regs_print_info+0x20/0x20 [ 315.908170][ T9517] ? load_image+0x420/0x420 [ 315.912705][ T9517] ? ___ratelimit+0x478/0x610 [ 315.917415][ T9517] ? radix_tree_cpu_dead+0x160/0x160 [ 315.922745][ T9517] dump_header+0xd8/0x820 [ 315.927120][ T9517] oom_kill_process+0x390/0x580 [ 315.932450][ T9517] out_of_memory+0xe0e/0x1200 [ 315.937172][ T9517] ? lockdep_hardirqs_on+0x98/0x150 [ 315.942406][ T9517] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 315.948082][ T9517] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.954274][ T9517] ? mutex_lock_nested+0x20/0x20 [ 315.959249][ T9517] ? unregister_oom_notifier+0x20/0x20 [ 315.964786][ T9517] mem_cgroup_out_of_memory+0x2c2/0x390 [ 315.970381][ T9517] ? try_charge_memcg+0xc91/0x17c0 [ 315.975570][ T9517] ? drain_local_stock+0x630/0x630 [ 315.980755][ T9517] ? do_raw_spin_unlock+0x121/0x230 [ 315.986012][ T9517] try_charge_memcg+0xca1/0x17c0 [ 315.990995][ T9517] ? lockdep_hardirqs_on+0x98/0x150 [ 315.996246][ T9517] ? folio_flags+0x120/0x120 [ 316.000878][ T9517] ? percpu_ref_tryget+0x15/0x180 [ 316.005945][ T9517] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 316.011719][ T9517] ? lockdep_hardirqs_on+0x98/0x150 [ 316.016955][ T9517] ? percpu_ref_tryget+0x15/0x180 [ 316.022027][ T9517] ? percpu_ref_tryget+0x15/0x180 [ 316.027097][ T9517] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 316.032851][ T9517] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 316.038611][ T9517] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 316.044485][ T9517] obj_cgroup_charge+0x36e/0x630 [ 316.049464][ T9517] ? get_obj_cgroup_from_current+0xd4/0x280 [ 316.055416][ T9517] ? obj_cgroup_charge+0xed/0x630 [ 316.060503][ T9517] ? mod_objcg_mlstate+0x320/0x320 [ 316.065666][ T9517] ? get_obj_cgroup_from_current+0xd4/0x280 [ 316.071594][ T9517] ? get_obj_cgroup_from_current+0xd4/0x280 [ 316.077566][ T9517] slab_pre_alloc_hook+0x2e2/0x300 [ 316.082742][ T9517] ? kvmalloc_node+0x70/0x180 [ 316.087481][ T9517] ? kvmalloc_node+0x70/0x180 [ 316.092221][ T9517] __kmem_cache_alloc_node+0x53/0x250 [ 316.097657][ T9517] ? kvmalloc_node+0x70/0x180 [ 316.102404][ T9517] __kmalloc_node+0xa6/0x240 [ 316.107179][ T9517] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 316.113475][ T9517] kvmalloc_node+0x70/0x180 [ 316.118024][ T9517] simple_xattr_set+0x7b/0x370 [ 316.122832][ T9517] kernfs_vfs_xattr_set+0x7e/0xc0 [ 316.127906][ T9517] ? kernfs_vfs_xattr_get+0xe0/0xe0 [ 316.133177][ T9517] __vfs_setxattr+0x437/0x470 [ 316.137906][ T9517] __vfs_setxattr_noperm+0x12a/0x5e0 [ 316.143258][ T9517] vfs_setxattr+0x16b/0x2f0 [ 316.147901][ T9517] ? xattr_permission+0x460/0x460 [ 316.152980][ T9517] ? __mnt_want_write+0x223/0x2a0 [ 316.158058][ T9517] ? path_setxattr+0x2ec/0x590 [ 316.162871][ T9517] path_setxattr+0x33a/0x590 [ 316.167512][ T9517] ? simple_xattrs_free+0x150/0x150 [ 316.172771][ T9517] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 316.178785][ T9517] ? lock_chain_count+0x20/0x20 [ 316.183682][ T9517] __x64_sys_lsetxattr+0xb8/0xd0 [ 316.188676][ T9517] do_syscall_64+0x55/0xb0 [ 316.193142][ T9517] ? clear_bhb_loop+0x40/0x90 [ 316.197880][ T9517] ? clear_bhb_loop+0x40/0x90 [ 316.202617][ T9517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.208577][ T9517] RIP: 0033:0x7f60ca99f559 [ 316.213041][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.232689][ T9517] RSP: 002b:00007f60cb8c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 316.241138][ T9517] RAX: ffffffffffffffda RBX: 00007f60cac25fa0 RCX: 00007f60ca99f559 [ 316.249148][ T9517] RDX: 0000200000000a80 RSI: 0000200000000300 RDI: 0000200000000a00 [ 316.257146][ T9517] RBP: 00007f60caa36b20 R08: 0000000000000001 R09: 0000000000000000 [ 316.265146][ T9517] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 316.273141][ T9517] R13: 00007f60cac26038 R14: 00007f60cac25fa0 R15: 00007fff577fef98 [ 316.281162][ T9517] [ 316.368929][ T9517] memory: usage 0kB, limit 0kB, failcnt 19 [ 316.376368][ T9517] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 316.411502][ T9517] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 316.445974][ T9517] Memory cgroup stats for /syz1/test: [ 316.448245][ T9517] cache 0 [ 316.482171][ T9517] rss 0 [ 316.492584][ T9517] rss_huge 0 [ 316.497511][ T9517] shmem 0 [ 316.513875][ T9517] mapped_file 0 [ 316.517434][ T9517] dirty 0 [ 316.542622][ T9517] writeback 0 [ 316.573517][ T9517] workingset_refault_anon 0 [ 316.578106][ T9517] workingset_refault_file 0 [ 316.582653][ T9517] swap 0 [ 316.629047][ T9517] pgpgin 0 [ 316.643934][ T9517] pgpgout 0 [ 316.647135][ T9517] pgfault 0 [ 316.675429][ T9517] pgmajfault 0 [ 316.678898][ T9517] inactive_anon 0 [ 316.682571][ T9517] active_anon 0 [ 316.722770][ T9517] inactive_file 0 [ 316.738725][ T9517] active_file 0 [ 316.742275][ T9517] unevictable 0 [ 316.758510][ T9517] hierarchical_memory_limit 0 [ 316.793400][ T9517] hierarchical_memsw_limit 9223372036854771712 [ 316.809946][ T9517] total_cache 0 [ 316.820110][ T9517] total_rss 0 [ 316.830275][ T9517] total_rss_huge 0 [ 316.863363][ T9517] total_shmem 0 [ 316.867267][ T9517] total_mapped_file 0 [ 316.871301][ T9517] total_dirty 0 [ 316.884069][ T9517] total_writeback 0 [ 316.888170][ T9517] total_workingset_refault_anon 0 [ 316.893615][ T9517] total_workingset_refault_file 0 [ 316.899396][ T9517] total_swap 0 [ 316.902838][ T9517] total_pgpgin 0 [ 316.913490][ T9517] total_pgpgout 0 [ 316.917205][ T9517] total_pgfault 0 [ 316.920984][ T9517] total_pgmajfault 0 [ 316.952740][ T9517] total_inactive_anon 0 [ 316.961808][ T9517] total_active_anon 0 [ 316.978119][ T9517] total_inactive_file 0 [ 316.982364][ T9517] total_active_file 0 [ 316.993627][ T9517] total_unevictable 0 [ 316.997828][ T9517] anon_cost 0 [ 317.001154][ T9517] file_cost 0 [ 317.005469][ T9517] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.1073,pid=9516,uid=0 [ 317.053904][ T9517] Memory cgroup out of memory: Killed process 9517 (syz.1.1073) total-vm:104320kB, anon-rss:1392kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 319.055734][ T9568] syzkaller0: entered promiscuous mode [ 319.071646][ T9568] syzkaller0: entered allmulticast mode [ 319.177884][ T9546] fuse: Unknown parameter 'group_id00000000000000000000' [ 321.302747][ T9598] io-wq is not configured for unbound workers [ 322.785146][ T9613] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 323.009400][ T9613] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.111861][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.120186][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.254350][ T9616] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 323.474042][ T9624] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1103'. [ 327.690223][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'. [ 327.734371][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.748317][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.758113][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.766844][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.783704][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 327.791293][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.167594][ T9683] rxe_eth0 speed is unknown, defaulting to 1000 [ 329.443087][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 329.509548][ T9710] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.519581][ T9710] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.529728][ T9710] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.539719][ T9710] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.589189][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 329.627519][ T9683] lo speed is unknown, defaulting to 1000 [ 329.653891][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1126'. [ 329.702295][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 329.903383][ T5786] Bluetooth: hci4: command tx timeout [ 330.220830][ T9733] loop1: detected capacity change from 0 to 256 [ 330.502791][ T9683] chnl_net:caif_netlink_parms(): no params data found [ 330.829135][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.838313][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.847651][ T9683] bridge_slave_0: entered allmulticast mode [ 330.866959][ T9683] bridge_slave_0: entered promiscuous mode [ 330.885690][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.895470][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.904074][ T9683] bridge_slave_1: entered allmulticast mode [ 330.916872][ T9683] bridge_slave_1: entered promiscuous mode [ 330.981511][ T9683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.029273][ T9683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.161741][ T9683] team0: Port device team_slave_0 added [ 331.188820][ T9683] team0: Port device team_slave_1 added [ 331.262434][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.272829][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.303779][ T9683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.350860][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.369294][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.407214][ T9683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.609068][ T9683] hsr_slave_0: entered promiscuous mode [ 331.620865][ T9683] hsr_slave_1: entered promiscuous mode [ 331.636440][ T9683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.651811][ T9683] Cannot create hsr debugfs directory [ 331.993370][ T5786] Bluetooth: hci4: command tx timeout [ 332.436484][ T9683] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 332.472277][ T9683] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 332.547177][ T9683] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 332.588203][ T9683] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 333.125007][ T9683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.221589][ T9683] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.309191][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.317341][ T6929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.424749][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.432993][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.628864][ T9769] ceph: No mds server is up or the cluster is laggy [ 334.063602][ T5786] Bluetooth: hci4: command tx timeout [ 334.593765][ T9786] tipc: Failed to remove unknown binding: 66,0,0/9480874:903245978/903245980 [ 334.616270][ T9786] tipc: Failed to remove unknown binding: 66,0,0/9480874:903245978/903245979 [ 334.649917][ T9788] tipc: Failed to remove unknown binding: 66,0,0/9480874:903245978/903245980 [ 334.689897][ T9788] tipc: Failed to remove unknown binding: 66,0,0/9480874:903245978/903245979 [ 334.696134][ T9683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.026505][ T9683] veth0_vlan: entered promiscuous mode [ 336.094049][ T9683] veth1_vlan: entered promiscuous mode [ 336.144192][ T5786] Bluetooth: hci4: command tx timeout [ 336.271214][ T9683] veth0_macvtap: entered promiscuous mode [ 336.309363][ T9683] veth1_macvtap: entered promiscuous mode [ 336.409469][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.434260][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.448524][ T9827] loop1: detected capacity change from 0 to 1024 [ 336.488067][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.527743][ T9683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.584179][ T9827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.603291][ T9683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.640385][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.741604][ T9683] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.755336][ T9683] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.765300][ T9683] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.775271][ T9683] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.078466][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.112203][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.217888][ T6927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.261930][ T6927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.444199][ T9848] veth0_vlan: left promiscuous mode [ 337.494224][ T9848] vlan1: entered allmulticast mode [ 337.499428][ T9848] veth0_vlan: entered allmulticast mode [ 337.507961][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.700696][ T9855] syz_tun: left allmulticast mode [ 337.716964][ T9855] syz_tun: left promiscuous mode [ 337.731638][ T9857] loop1: detected capacity change from 0 to 1764 [ 337.749477][ T9855] bridge0: port 4(syz_tun) entered disabled state [ 337.835071][ T9855] batman_adv: batadv0: Removing interface: dummy0 [ 337.886141][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.947507][ T9855] bridge_slave_1: left allmulticast mode [ 337.991553][ T9855] bridge_slave_1: left promiscuous mode [ 338.015184][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.102236][ T9855] bond0: (slave bond_slave_0): Releasing backup interface [ 338.132696][ T9855] bond0: (slave bond_slave_1): Releasing backup interface [ 338.203697][ T9855] team0: Failed to send options change via netlink (err -105) [ 338.243470][ T9855] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 338.272225][ T9855] team0: Port device team_slave_0 removed [ 338.292543][ T9855] team0: Failed to send options change via netlink (err -105) [ 338.302270][ T9855] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 338.320909][ T9855] team0: Port device team_slave_1 removed [ 338.390738][ T9855] team0: Failed to send options change via netlink (err -105) [ 338.405151][ T6633] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 338.414528][ T9855] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 338.430252][ T9855] team0: Port device netdevsim0 removed [ 338.450273][ T9855] bond1: (slave veth3): Releasing active interface [ 338.501772][ T9855] vlan2: left promiscuous mode [ 338.523324][ T9855] bridge_slave_0: left promiscuous mode [ 338.529836][ T9855] bridge0: port 3(vlan2) entered disabled state [ 338.602576][ T9860] team0: Failed to send options change via netlink (err -105) [ 338.642207][ T9860] team0: Mode changed to "activebackup" [ 338.656416][ T6633] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 338.697533][ T6633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.733819][ T6633] usb 2-1: Product: syz [ 338.748888][ T6633] usb 2-1: Manufacturer: syz [ 338.758978][ T6633] usb 2-1: SerialNumber: syz [ 339.104542][ T6633] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 339.272606][ T6633] usb 2-1: USB disconnect, device number 7 [ 339.451220][ T5786] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 339.462656][ T5786] CPU: 0 PID: 5786 Comm: kworker/u5:5 Tainted: G S syzkaller #0 [ 339.471754][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.481896][ T5786] Workqueue: hci4 hci_rx_work [ 339.486665][ T5786] Call Trace: [ 339.490020][ T5786] [ 339.493005][ T5786] dump_stack_lvl+0x18c/0x250 [ 339.497769][ T5786] ? show_regs_print_info+0x20/0x20 [ 339.503032][ T5786] ? load_image+0x420/0x420 [ 339.507622][ T5786] sysfs_create_dir_ns+0x26e/0x2a0 [ 339.512793][ T5786] ? __lock_acquire+0x7eb0/0x7eb0 [ 339.517886][ T5786] ? sysfs_warn_dup+0xa0/0xa0 [ 339.522629][ T5786] ? do_raw_spin_unlock+0x121/0x230 [ 339.527910][ T5786] kobject_add_internal+0x617/0xc90 [ 339.533184][ T5786] kobject_add+0x164/0x240 [ 339.537677][ T5786] ? kobject_init+0x1d0/0x1d0 [ 339.542433][ T5786] ? get_device_parent+0x366/0x390 [ 339.547611][ T5786] device_add+0x3fa/0xc40 [ 339.552021][ T5786] hci_conn_add_sysfs+0xd5/0x1e0 [ 339.557028][ T5786] le_conn_complete_evt+0xe9a/0x1480 [ 339.562408][ T5786] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 339.568727][ T5786] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 339.574442][ T5786] ? mutex_unlock+0x10/0x10 [ 339.578980][ T5786] ? skb_pull_data+0xf0/0x1f0 [ 339.583697][ T5786] hci_le_enh_conn_complete_evt+0x189/0x460 [ 339.589635][ T5786] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 339.596099][ T5786] ? hci_remote_host_features_evt+0x150/0x150 [ 339.602197][ T5786] hci_event_packet+0x7b4/0x1280 [ 339.607199][ T5786] ? __lock_acquire+0x7eb0/0x7eb0 [ 339.612257][ T5786] ? lock_chain_count+0x20/0x20 [ 339.617140][ T5786] ? bis_list+0x290/0x290 [ 339.621507][ T5786] ? kcov_remote_start+0x513/0x810 [ 339.626652][ T5786] ? lockdep_hardirqs_on+0x98/0x150 [ 339.631890][ T5786] ? hci_send_to_monitor+0xd7/0x4f0 [ 339.637120][ T5786] hci_rx_work+0x43a/0xd60 [ 339.641610][ T5786] ? process_scheduled_works+0x975/0x1600 [ 339.647380][ T5786] process_scheduled_works+0xa60/0x1600 [ 339.652991][ T5786] ? worker_attach_to_pool+0x370/0x370 [ 339.658497][ T5786] ? assign_work+0x3cc/0x5d0 [ 339.663148][ T5786] worker_thread+0xa5e/0xfe0 [ 339.667812][ T5786] kthread+0x2fa/0x390 [ 339.671917][ T5786] ? pr_cont_work+0x550/0x550 [ 339.676635][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 339.681250][ T5786] ret_from_fork+0x48/0x80 [ 339.685701][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 339.690323][ T5786] ret_from_fork_asm+0x11/0x20 [ 339.695136][ T5786] [ 339.731740][ T5786] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 339.745850][ T5786] Bluetooth: hci4: failed to register connection device [ 339.923343][ T6628] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 340.019552][ T9896] udevd[9896]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.150922][ T6628] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 340.203362][ T6628] usb 7-1: config 0 interface 0 has no altsetting 0 [ 340.210081][ T6628] usb 7-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 340.325438][ T6628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.369540][ T6628] usb 7-1: config 0 descriptor?? [ 340.405319][ T9888] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 340.502630][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 340.892528][ T6628] lenovo 0003:17EF:6062.0004: unknown main item tag 0x2 [ 341.567081][ T6628] lenovo 0003:17EF:6062.0004: unknown main item tag 0x3 [ 341.576805][ T6628] lenovo 0003:17EF:6062.0004: unknown main item tag 0x1 [ 341.584528][ T6628] lenovo 0003:17EF:6062.0004: unknown main item tag 0x2 [ 341.597085][ T6628] lenovo 0003:17EF:6062.0004: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.6-1/input0 [ 341.693487][ T6628] usb 7-1: USB disconnect, device number 2 [ 341.991764][ T9922] fido_id[9922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 342.277478][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1171'. [ 342.347301][ T9935] bond2: (slave vlan3): Opening slave failed [ 342.449872][ T9938] bond0: entered promiscuous mode [ 342.814158][ T5790] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 342.925715][ T9953] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1175'. [ 343.222004][ T9958] futex_wake_op: syz.1.1177 tries to shift op by 144; fix this program [ 343.246542][ T9958] futex_wake_op: syz.1.1177 tries to shift op by 144; fix this program [ 343.836011][ T6633] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 344.081130][ T6633] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.106178][ T6633] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.120651][ T6633] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 344.146574][ T28] audit: type=1326 audit(344.029:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 344.197010][ T6633] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.231948][ T6633] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 344.248180][ T28] audit: type=1326 audit(344.029:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 344.279491][ T6633] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.325897][ T28] audit: type=1326 audit(344.069:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 344.353418][ T28] audit: type=1326 audit(344.069:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 344.439204][ T28] audit: type=1326 audit(344.069:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 344.515639][ T28] audit: type=1326 audit(344.069:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 344.591667][ T28] audit: type=1326 audit(344.069:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 344.625795][ T6633] usb 7-1: USB disconnect, device number 3 [ 344.662673][ T28] audit: type=1326 audit(344.069:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 344.691152][ T28] audit: type=1326 audit(344.069:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 344.781663][ T28] audit: type=1326 audit(344.079:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 345.037514][ T9995] loop1: detected capacity change from 0 to 512 [ 345.093365][ T9995] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 345.172489][ T9995] EXT4-fs (loop1): 1 truncate cleaned up [ 345.186687][ T9995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.028887][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.466354][T10016] kvm: pic: non byte write [ 347.398227][T10042] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1196'. [ 349.095240][T10079] overlayfs: failed to clone lowerpath [ 349.132061][T10079] overlayfs: failed to clone lowerpath [ 349.179013][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 349.179029][ T28] audit: type=1326 audit(349.069:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.6.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08adb9f559 code=0x0 [ 349.205904][T10085] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 349.365064][T10085] bond2: entered allmulticast mode [ 349.407355][T10088] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 349.451437][T10088] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 349.511454][T10088] bond2: (slave vti0): making interface the new active one [ 349.531410][T10088] vti0: entered allmulticast mode [ 349.560948][T10088] bond2: (slave vti0): Enslaving as an active interface with an up link [ 349.617422][T10090] bond2 (unregistering): (slave vti0): Releasing backup interface [ 349.641058][T10090] vti0: left allmulticast mode [ 349.677194][T10090] bond2 (unregistering): Released all slaves [ 353.905524][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1229'. [ 354.863347][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 357.519923][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1242'. [ 357.541435][T10183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 358.105183][T10197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1250'. [ 358.124311][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1250'. [ 358.171434][T10199] ceph: No mds server is up or the cluster is laggy [ 359.175977][T10217] syzkaller0: entered promiscuous mode [ 359.181681][T10217] syzkaller0: entered allmulticast mode [ 360.166231][T10229] netlink: 'syz.1.1268': attribute type 10 has an invalid length. [ 360.240773][T10229] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 360.290717][T10229] team0: Failed to send options change via netlink (err -105) [ 360.323564][T10229] team0: Port device netdevsim0 added [ 361.003484][T10233] ceph: No mds server is up or the cluster is laggy [ 361.102225][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 361.322828][ T28] audit: type=1326 audit(361.209:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x0 [ 361.456848][ T28] audit: type=1326 audit(361.349:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 361.552159][ T28] audit: type=1326 audit(361.379:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 361.644315][ T28] audit: type=1326 audit(361.389:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 361.708966][ T28] audit: type=1326 audit(361.389:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 361.771906][ T28] audit: type=1326 audit(361.389:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f52cdb9f559 code=0x7ffc0000 [ 361.832514][ T28] audit: type=1326 audit(361.439:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52cdb5fd8e code=0x7ffc0000 [ 361.935614][ T28] audit: type=1326 audit(361.439:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52cdb5fd8e code=0x7ffc0000 [ 362.013561][ T28] audit: type=1326 audit(361.439:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52cdb5fd8e code=0x7ffc0000 [ 362.046426][ T28] audit: type=1326 audit(361.439:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.0.1265" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52cdb5fd8e code=0x7ffc0000 [ 362.381080][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 362.406799][T10267] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.417457][T10267] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.427400][T10267] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.437332][T10267] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.470750][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 362.482838][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 362.993485][ T6628] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 363.106882][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 363.177766][ T6628] usb 2-1: Using ep0 maxpacket: 16 [ 363.195314][ T6628] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.213365][ T6628] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.242603][ T6628] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.262339][ T6628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.288764][ T6628] usb 2-1: Product: syz [ 363.293038][ T6628] usb 2-1: Manufacturer: syz [ 363.301726][ T6628] usb 2-1: SerialNumber: syz [ 363.542527][ T6628] usb 2-1: 0:2 : does not exist [ 363.589696][ T6628] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 363.694619][ T6628] usb 2-1: USB disconnect, device number 8 [ 363.793556][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 363.822934][T10278] udevd[10278]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.859515][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 363.886825][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 363.932616][T10301] netlink: 'syz.0.1286': attribute type 1 has an invalid length. [ 364.203506][T10301] bond3: entered promiscuous mode [ 364.232255][T10301] bond3: entered allmulticast mode [ 364.258053][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 364.347153][T10303] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 364.388896][T10303] bond3: (slave bridge1): making interface the new active one [ 364.410141][T10303] bridge1: entered promiscuous mode [ 364.420906][T10303] bridge1: entered allmulticast mode [ 364.442204][T10303] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 364.469221][T10304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1286'. [ 364.486156][T10304] bond3: left promiscuous mode [ 364.512891][T10304] bridge1: left promiscuous mode [ 364.537150][T10304] bond3: left allmulticast mode [ 364.560397][T10304] bridge1: left allmulticast mode [ 364.600979][T10304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.629946][T10306] netlink: 'syz.4.1287': attribute type 1 has an invalid length. [ 364.878240][T10306] bond6: entered promiscuous mode [ 364.913621][T10306] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.973535][T10307] macvtap1: entered allmulticast mode [ 365.096552][T10308] bond6: (slave bridge4): making interface the new active one [ 365.109416][T10308] bridge4: entered promiscuous mode [ 365.121762][T10308] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 365.804701][T10327] loop1: detected capacity change from 0 to 512 [ 365.858036][T10327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 365.918448][T10327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.325857][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.521754][T10337] loop1: detected capacity change from 0 to 512 [ 366.529669][T10337] EXT4-fs: Ignoring removed i_version option [ 366.539667][T10337] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 366.551275][T10337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.615356][T10337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.827608][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.059346][T10352] ip6tnl1: entered promiscuous mode [ 367.074600][T10352] ip6tnl1: entered allmulticast mode [ 367.208543][T10349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 367.381412][ T5790] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 367.763327][ T56] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 367.976932][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 368.006732][ T56] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.070560][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.107564][ T56] usb 2-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 368.161997][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.234921][ T56] usb 2-1: config 0 descriptor?? [ 368.534198][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 368.572839][ T56] usbhid 2-1:0.0: can't add hid device: -71 [ 368.603459][ T56] usbhid: probe of 2-1:0.0 failed with error -71 [ 368.627603][ T56] usb 2-1: USB disconnect, device number 9 [ 369.732508][T10396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.846699][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.799220][T10412] wireguard0: entered promiscuous mode [ 371.236679][T10421] netlink: 'syz.1.1322': attribute type 11 has an invalid length. [ 371.650459][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1324'. [ 373.380049][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 373.458890][T10458] dummy0: left promiscuous mode [ 373.471717][T10458] bridge2: port 1(dummy0) entered blocking state [ 373.479864][T10458] bridge2: port 1(dummy0) entered disabled state [ 373.497424][T10458] dummy0: entered allmulticast mode [ 373.521625][T10458] dummy0: entered promiscuous mode [ 373.561608][T10463] netlink: 'syz.0.1336': attribute type 10 has an invalid length. [ 373.586635][T10463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1336'. [ 373.623429][T10463] bridge2: port 1(dummy0) entered blocking state [ 373.630850][T10463] bridge2: port 1(dummy0) entered forwarding state [ 373.642565][T10463] dummy0: left allmulticast mode [ 373.651378][T10463] bridge2: port 1(dummy0) entered disabled state [ 373.897242][T10465] rxe_eth0 speed is unknown, defaulting to 1000 [ 374.012517][T10468] syzkaller0: entered promiscuous mode [ 374.031073][T10468] syzkaller0: entered allmulticast mode [ 374.722970][T10480] dvmrp6: entered allmulticast mode [ 374.733668][T10482] netlink: 'syz.4.1340': attribute type 4 has an invalid length. [ 374.915178][T10466] rxe_eth0 speed is unknown, defaulting to 1000 [ 374.924171][T10465] lo speed is unknown, defaulting to 1000 [ 375.862207][T10466] lo speed is unknown, defaulting to 1000 [ 376.326687][T10505] overlayfs: failed to clone upperpath [ 378.003256][T10522] ÿÿÿ: renamed from bond_slave_0 (while UP) [ 378.729606][T10539] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 378.828684][T10539] 8021q: adding VLAN 0 to HW filter on device bond7 [ 379.288983][T10539] veth7: entered allmulticast mode [ 379.332073][T10539] bond7: (slave veth7): Enslaving as an active interface with a down link [ 379.561015][T10541] bond5: (slave veth0_to_bond): Releasing backup interface [ 379.670047][T10541] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 381.070750][T10582] syzkaller0: entered promiscuous mode [ 381.083790][T10582] syzkaller0: entered allmulticast mode [ 382.237376][T10610] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 384.073567][ T56] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 384.278314][ T56] usb 7-1: unable to get BOS descriptor or descriptor too short [ 384.307892][ T56] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.332116][ T56] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.358270][ T56] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 384.375691][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.397237][ T56] usb 7-1: Product: syz [ 384.416937][ T56] usb 7-1: Manufacturer: syz [ 384.431727][ T56] usb 7-1: SerialNumber: syz [ 384.472624][ T56] usb 7-1: selecting invalid altsetting 1 [ 384.492425][ T56] usb 7-1: unit 6 not found! [ 384.558196][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.565578][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.171517][ T56] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 385.240505][ T56] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 385.255383][ T56] usb 7-1: USB disconnect, device number 4 [ 385.331881][T10278] udevd[10278]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.393466][T10644] tipc: Started in network mode [ 385.408716][T10644] tipc: Node identity 2000004, cluster identity 4711 [ 385.432819][T10644] tipc: Node number set to 33554436 [ 385.791906][T10651] xt_TCPMSS: Only works on TCP SYN packets [ 385.889836][T10654] netlink: 'syz.0.1405': attribute type 4 has an invalid length. [ 386.270726][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 387.003665][ T6628] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 387.204791][ T6628] usb 2-1: not running at top speed; connect to a high speed hub [ 387.219986][ T6628] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.232045][ T6628] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 387.247569][ T6628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.283710][ T6628] usb 2-1: Found UVC 1.00 device (046d:0825) [ 387.498635][ T6628] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 387.524494][ T6628] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 387.551170][ T6628] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 387.605184][ T6628] usb 2-1: USB disconnect, device number 10 [ 387.988644][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 387.988660][ T28] audit: type=1326 audit(387.879:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.0.1417" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52cdb9f559 code=0x0 [ 388.303317][ T5786] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 388.867412][ T6628] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 389.073394][ T6628] usb 7-1: Using ep0 maxpacket: 32 [ 389.088506][ T6628] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.110191][ T6628] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.149083][ T6628] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.170356][ T6628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.212112][ T6628] usb 7-1: config 0 descriptor?? [ 389.238672][ T6628] hub 7-1:0.0: USB hub found [ 389.461042][ T6628] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 389.869982][ T6628] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 389.920750][ T6628] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 390.656105][T10720] netlink: 'syz.0.1431': attribute type 7 has an invalid length. [ 390.669197][T10691] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 390.736945][T10720] netlink: 'syz.0.1431': attribute type 7 has an invalid length. [ 390.806770][T10720] netlink: 'syz.0.1431': attribute type 7 has an invalid length. [ 391.132873][T10691] usbhid 7-1:0.0: reset_resume error -32 [ 391.282498][ T6633] usb 7-1: USB disconnect, device number 5 [ 394.938018][ T28] audit: type=1326 audit(394.829:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.1449" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x0 [ 395.070583][T10760] loop1: detected capacity change from 0 to 32768 [ 395.165394][T10760] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1447 (10760) [ 395.382657][T10760] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 395.419493][T10760] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 395.452690][ T5786] Bluetooth: hci2: unexpected event for opcode 0x200d [ 395.463653][T10760] BTRFS info (device loop1): using free space tree [ 395.774761][T10760] BTRFS info (device loop1): enabling ssd optimizations [ 395.782489][T10760] BTRFS info (device loop1): auto enabling async discard [ 397.159295][ T28] audit: type=1326 audit(397.049:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.0.1459" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52cdb9f559 code=0x0 [ 397.607162][T10760] BTRFS info (device loop1): balance: start -d -m [ 397.698681][T10760] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 397.988906][T10760] BTRFS info (device loop1): balance: canceled [ 398.529752][ T5773] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 399.507143][ T5786] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 399.518645][ T5786] Bluetooth: hci2: Injecting HCI hardware error event [ 399.529420][ T5786] Bluetooth: hci2: hardware error 0x00 [ 400.255635][T10859] EXT4-fs (sda1): shut down requested (2) [ 400.293173][T10859] Aborting journal on device sda1-8. [ 400.892579][ T28] audit: type=1326 audit(400.779:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.6.1477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08adb9f559 code=0x0 [ 401.021948][ T28] audit: type=1326 audit(400.909:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 401.110331][ T28] audit: type=1326 audit(400.949:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 401.196730][ T28] audit: type=1326 audit(400.949:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 401.308508][ T28] audit: type=1326 audit(400.949:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 401.408564][ T28] audit: type=1326 audit(400.949:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 401.487354][ T28] audit: type=1326 audit(400.949:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 401.583606][ T5786] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 401.633449][ T28] audit: type=1326 audit(400.949:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 401.771125][ T28] audit: type=1326 audit(400.949:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 401.853458][ T28] audit: type=1326 audit(400.959:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 401.947919][ T5786] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 401.957753][ T5786] CPU: 1 PID: 5786 Comm: kworker/u5:5 Tainted: G S syzkaller #0 [ 401.966838][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.976949][ T5786] Workqueue: hci4 hci_rx_work [ 401.981865][ T5786] Call Trace: [ 401.985224][ T5786] [ 401.988204][ T5786] dump_stack_lvl+0x18c/0x250 [ 401.993002][ T5786] ? show_regs_print_info+0x20/0x20 [ 401.998266][ T5786] ? load_image+0x420/0x420 [ 402.002880][ T5786] sysfs_create_dir_ns+0x26e/0x2a0 [ 402.008183][ T5786] ? __lock_acquire+0x7eb0/0x7eb0 [ 402.013312][ T5786] ? sysfs_warn_dup+0xa0/0xa0 [ 402.018161][ T5786] ? do_raw_spin_unlock+0x121/0x230 [ 402.023458][ T5786] kobject_add_internal+0x617/0xc90 [ 402.028812][ T5786] kobject_add+0x164/0x240 [ 402.033289][ T5786] ? kobject_init+0x1d0/0x1d0 [ 402.038034][ T5786] ? get_device_parent+0x366/0x390 [ 402.043273][ T5786] device_add+0x3fa/0xc40 [ 402.047673][ T5786] hci_conn_add_sysfs+0xd5/0x1e0 [ 402.052888][ T5786] le_conn_complete_evt+0xe9a/0x1480 [ 402.058315][ T5786] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 402.064733][ T5786] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 402.070532][ T5786] ? mutex_unlock+0x10/0x10 [ 402.075106][ T5786] ? skb_pull_data+0xf0/0x1f0 [ 402.079951][ T5786] hci_le_enh_conn_complete_evt+0x189/0x460 [ 402.085918][ T5786] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 402.092436][ T5786] ? hci_remote_host_features_evt+0x150/0x150 [ 402.098558][ T5786] hci_event_packet+0x7b4/0x1280 [ 402.103584][ T5786] ? __lock_acquire+0x7eb0/0x7eb0 [ 402.108675][ T5786] ? lock_chain_count+0x20/0x20 [ 402.113588][ T5786] ? bis_list+0x290/0x290 [ 402.117980][ T5786] ? kcov_remote_start+0x513/0x810 [ 402.123182][ T5786] ? lockdep_hardirqs_on+0x98/0x150 [ 402.128448][ T5786] ? hci_send_to_monitor+0xd7/0x4f0 [ 402.133725][ T5786] hci_rx_work+0x43a/0xd60 [ 402.138224][ T5786] ? process_scheduled_works+0x975/0x1600 [ 402.144045][ T5786] process_scheduled_works+0xa60/0x1600 [ 402.149678][ T5786] ? worker_attach_to_pool+0x370/0x370 [ 402.155205][ T5786] ? assign_work+0x3cc/0x5d0 [ 402.159886][ T5786] worker_thread+0xa5e/0xfe0 [ 402.164573][ T5786] kthread+0x2fa/0x390 [ 402.168714][ T5786] ? pr_cont_work+0x550/0x550 [ 402.173449][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 402.178101][ T5786] ret_from_fork+0x48/0x80 [ 402.182608][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 402.187260][ T5786] ret_from_fork_asm+0x11/0x20 [ 402.192159][ T5786] [ 402.204015][ T5786] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 402.218311][ T5786] Bluetooth: hci4: failed to register connection device [ 402.727072][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 402.810652][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1483'. [ 402.833081][T10898] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 402.865984][T10898] bond4: (slave vti0): Error -95 calling set_mac_address [ 402.940689][T10894] vlan3: entered allmulticast mode [ 402.977696][T10894] bond4: entered allmulticast mode [ 402.985746][T10894] bond4: (slave vlan3): Opening slave failed [ 403.092929][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1486'. [ 403.331092][T10907] loop1: detected capacity change from 0 to 512 [ 403.377909][T10906] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4226919146/4226919148 [ 403.422819][T10907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.452811][T10906] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4226919146/4226919147 [ 403.483486][T10906] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4226919146/4226919148 [ 403.523450][T10906] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4226919146/4226919147 [ 404.091429][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.559614][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'. [ 407.278325][T10988] overlayfs: failed to clone upperpath [ 407.682719][T11001] ip_tables: iptables: counters copy to user failed while replacing table [ 409.619009][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'. [ 409.656323][T11027] vlan3: entered promiscuous mode [ 409.685347][T11027] syz_tun: entered promiscuous mode [ 409.808226][T11023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1525'. [ 409.906285][T11030] 0: reclassify loop, rule prio 0, protocol 03 [ 410.152529][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 410.152546][ T28] audit: type=1326 audit(410.039:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7fc00000 [ 410.223936][ T5846] IPVS: starting estimator thread 0... [ 410.293863][ T28] audit: type=1326 audit(410.039:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff206f9f559 code=0x7fc00000 [ 410.317863][T11041] IPVS: using max 17 ests per chain, 40800 per kthread [ 410.383614][ T28] audit: type=1326 audit(410.039:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7fc00000 [ 410.475081][ T28] audit: type=1326 audit(410.039:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7fc00000 [ 410.517931][ T28] audit: type=1326 audit(410.039:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7fc00000 [ 410.555886][ T28] audit: type=1326 audit(410.039:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7fc00000 [ 410.594422][ T28] audit: type=1326 audit(410.039:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7fc00000 [ 410.635448][ T28] audit: type=1326 audit(410.039:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.1529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7fc00000 [ 410.894153][T11058] binder: 11057:11058 ioctl c0306201 200000000680 returned -14 [ 411.462756][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'. [ 412.770740][T11090] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1551'. [ 412.818269][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 412.847029][T11095] loop1: detected capacity change from 0 to 512 [ 412.935666][T11095] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 413.031029][T11095] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 413.133494][T11095] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1552: bg 0: block 248: padding at end of block bitmap is not set [ 413.199383][T11095] Quota error (device loop1): write_blk: dquota write failed [ 413.223562][T11095] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 413.239649][T11095] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1552: Failed to acquire dquot type 1 [ 413.319658][T11095] EXT4-fs (loop1): 1 truncate cleaned up [ 413.341957][T11095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 413.386691][T11108] netlink: 'syz.0.1555': attribute type 1 has an invalid length. [ 413.577410][T11108] bond5: entered promiscuous mode [ 413.603968][T11108] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.714860][T11112] macvtap1: entered allmulticast mode [ 413.826268][T11113] bond5: (slave bridge3): making interface the new active one [ 413.836092][T11113] bridge3: entered promiscuous mode [ 413.852160][T11113] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 413.882411][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 414.637595][T11136] veth0: entered promiscuous mode [ 414.655443][T11136] veth0: left promiscuous mode [ 415.350062][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 415.851624][T11171] binder: 11170:11171 unknown command 0 [ 415.862040][T11171] binder: 11170:11171 ioctl c0306201 2000000004c0 returned -22 [ 417.269728][T11203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1586'. [ 417.423863][T11209] FAULT_INJECTION: forcing a failure. [ 417.423863][T11209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.444410][T11209] CPU: 0 PID: 11209 Comm: syz.6.1587 Tainted: G S syzkaller #0 [ 417.453446][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.463560][T11209] Call Trace: [ 417.466917][T11209] [ 417.469895][T11209] dump_stack_lvl+0x18c/0x250 [ 417.474647][T11209] ? show_regs_print_info+0x20/0x20 [ 417.479929][T11209] ? load_image+0x420/0x420 [ 417.484548][T11209] ? __lock_acquire+0x7eb0/0x7eb0 [ 417.489652][T11209] ? mark_lock+0x94/0x320 [ 417.494050][T11209] should_fail_ex+0x394/0x4c0 [ 417.498859][T11209] prepare_alloc_pages+0x1e1/0x5b0 [ 417.504074][T11209] __alloc_pages+0x134/0x460 [ 417.508718][T11209] ? zone_statistics+0x170/0x170 [ 417.513700][T11209] ? do_wp_page+0x733/0x34d0 [ 417.518326][T11209] ? do_wp_page+0xf17/0x34d0 [ 417.522982][T11209] ? __lock_acquire+0x7eb0/0x7eb0 [ 417.528053][T11209] __folio_alloc+0x10/0x20 [ 417.532502][T11209] vma_alloc_folio+0x474/0x8f0 [ 417.537340][T11209] do_wp_page+0x118d/0x34d0 [ 417.541893][T11209] ? folio_put+0xd0/0xd0 [ 417.546165][T11209] ? do_raw_spin_lock+0x11f/0x2b0 [ 417.551229][T11209] ? __rwlock_init+0x150/0x150 [ 417.556047][T11209] handle_mm_fault+0x1306/0x4a50 [ 417.561020][T11209] ? handle_mm_fault+0xe6/0x4a50 [ 417.565999][T11209] ? numa_migrate_prep+0x350/0x350 [ 417.571154][T11209] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 417.576474][T11209] do_user_addr_fault+0x736/0x12d0 [ 417.581660][T11209] exc_page_fault+0x64/0x100 [ 417.586317][T11209] asm_exc_page_fault+0x26/0x30 [ 417.591291][T11209] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 417.597145][T11209] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 417.616800][T11209] RSP: 0018:ffffc90005057958 EFLAGS: 00050206 [ 417.622923][T11209] RAX: ffffffff84326101 RBX: 1ffff92000a0afb7 RCX: 000000000000066f [ 417.630941][T11209] RDX: 0000000000000000 RSI: ffff88807adee780 RDI: 0000200000010000 [ 417.638953][T11209] RBP: ffffc90005057ab8 R08: ffff88807adeedee R09: 1ffff1100f5bddbd [ 417.646960][T11209] R10: dffffc0000000000 R11: ffffed100f5bddbe R12: ffff88807adee000 [ 417.654963][T11209] R13: 0000000000000def R14: 0000000000000def R15: ffffc90005057dc8 [ 417.662975][T11209] ? _copy_to_iter+0x171/0x1110 [ 417.667879][T11209] _copy_to_iter+0x24f/0x1110 [ 417.672609][T11209] ? mark_lock+0x94/0x320 [ 417.676975][T11209] ? iov_iter_init+0x1e0/0x1e0 [ 417.681780][T11209] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 417.687798][T11209] ? __lock_acquire+0x7eb0/0x7eb0 [ 417.692865][T11209] ? lock_chain_count+0x20/0x20 [ 417.697753][T11209] ? _raw_spin_lock_irq+0xbb/0xf0 [ 417.702901][T11209] ? _raw_spin_lock_irqsave+0x100/0x100 [ 417.708496][T11209] ? page_copy_sane+0x4e/0x270 [ 417.713313][T11209] copy_page_to_iter+0xa7/0x150 [ 417.718218][T11209] pipe_read+0x539/0x1330 [ 417.722629][T11209] ? pipe_wait_writable+0x5c0/0x5c0 [ 417.727870][T11209] ? futex_wake+0x42a/0x4f0 [ 417.732435][T11209] ? end_current_label_crit_section+0x149/0x170 [ 417.738811][T11209] ? common_file_perm+0x198/0x1f0 [ 417.743880][T11209] vfs_read+0x486/0x990 [ 417.748180][T11209] ? kernel_read+0x1e0/0x1e0 [ 417.752849][T11209] ? __fget_files+0x3fc/0x460 [ 417.757610][T11209] ? __fdget_pos+0x1d8/0x330 [ 417.762246][T11209] ? ksys_read+0x74/0x260 [ 417.766622][T11209] ksys_read+0x151/0x260 [ 417.770909][T11209] ? vfs_write+0x9a0/0x9a0 [ 417.775370][T11209] ? lockdep_hardirqs_on+0x98/0x150 [ 417.780619][T11209] do_syscall_64+0x55/0xb0 [ 417.785066][T11209] ? clear_bhb_loop+0x40/0x90 [ 417.789780][T11209] ? clear_bhb_loop+0x40/0x90 [ 417.794491][T11209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.800503][T11209] RIP: 0033:0x7f08adb9f559 [ 417.804959][T11209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.824605][T11209] RSP: 002b:00007f08ae9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.833060][T11209] RAX: ffffffffffffffda RBX: 00007f08ade25fa0 RCX: 00007f08adb9f559 [ 417.841065][T11209] RDX: 000000000000fdef RSI: 0000200000000880 RDI: 0000000000000006 [ 417.849070][T11209] RBP: 00007f08adc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 417.857085][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.865122][T11209] R13: 00007f08ade26038 R14: 00007f08ade25fa0 R15: 00007fff78c9bb68 [ 417.873166][T11209] [ 418.174101][T11218] overlayfs: failed to clone upperpath [ 419.783382][T11257] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 419.851311][T11258] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 420.379009][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1615'. [ 420.637164][T11268] loop1: detected capacity change from 0 to 128 [ 420.789255][T11268] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.431061][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.698792][T10366] netdevsim netdevsim5 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.803877][T10366] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.867923][T10366] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.945544][T10366] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.457262][T11313] batadv_slave_1: entered promiscuous mode [ 423.480853][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 423.492177][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.701113][T11313] batadv_slave_1 (unregistering): left promiscuous mode [ 423.710367][T11313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.837021][T10366] hsr_slave_0: left promiscuous mode [ 424.846128][T10366] hsr_slave_1: left promiscuous mode [ 424.857509][T10366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.877421][T10366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.885633][T10366] bridge_slave_1: left allmulticast mode [ 424.891434][T10366] bridge_slave_1: left promiscuous mode [ 424.902854][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.916944][T10366] bridge_slave_0: left allmulticast mode [ 424.931365][T10366] bridge_slave_0: left promiscuous mode [ 424.952253][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.415206][T10366] team0 (unregistering): Port device team_slave_1 removed [ 426.533018][T10366] team0 (unregistering): Port device team_slave_0 removed [ 426.640951][T10366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.737046][T10366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.579327][T10366] bond0 (unregistering): Released all slaves [ 427.735843][T11355] batadv_slave_1: entered promiscuous mode [ 427.742013][T11355] batadv_slave_1: left promiscuous mode [ 427.754564][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1632'. [ 427.783455][T11360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.922335][T11360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.813698][T11429] FAULT_INJECTION: forcing a failure. [ 430.813698][T11429] name failslab, interval 1, probability 0, space 0, times 0 [ 430.850861][T11429] CPU: 1 PID: 11429 Comm: syz.1.1652 Tainted: G S syzkaller #0 [ 430.860022][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.870288][T11429] Call Trace: [ 430.873628][T11429] [ 430.876609][T11429] dump_stack_lvl+0x18c/0x250 [ 430.881344][T11429] ? show_regs_print_info+0x20/0x20 [ 430.886600][T11429] ? load_image+0x420/0x420 [ 430.891174][T11429] ? __lock_acquire+0x7eb0/0x7eb0 [ 430.896285][T11429] should_fail_ex+0x394/0x4c0 [ 430.901078][T11429] should_failslab+0x9/0x20 [ 430.905758][T11429] slab_pre_alloc_hook+0x59/0x300 [ 430.910850][T11429] ? __dma_fence_unwrap_merge+0x572/0xee0 [ 430.917124][T11429] ? __dma_fence_unwrap_merge+0x572/0xee0 [ 430.923090][T11429] __kmem_cache_alloc_node+0x53/0x250 [ 430.928816][T11429] ? __dma_fence_unwrap_merge+0x572/0xee0 [ 430.934621][T11429] __kmalloc+0xa7/0x240 [ 430.938839][T11429] ? dma_fence_chain_walk+0x3d9/0x4a0 [ 430.944286][T11429] __dma_fence_unwrap_merge+0x572/0xee0 [ 430.949944][T11429] sync_file_ioctl+0xc3a/0xef0 [ 430.954865][T11429] ? sync_file_poll+0x240/0x240 [ 430.959829][T11429] ? bpf_lsm_file_ioctl+0x9/0x10 [ 430.964948][T11429] ? security_file_ioctl+0x80/0xa0 [ 430.970141][T11429] ? sync_file_poll+0x240/0x240 [ 430.975216][T11429] __se_sys_ioctl+0xfd/0x170 [ 430.979868][T11429] do_syscall_64+0x55/0xb0 [ 430.984336][T11429] ? clear_bhb_loop+0x40/0x90 [ 430.989385][T11429] ? clear_bhb_loop+0x40/0x90 [ 430.994135][T11429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.000190][T11429] RIP: 0033:0x7f60ca99f559 [ 431.004659][T11429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.024757][T11429] RSP: 002b:00007f60cb8c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.033323][T11429] RAX: ffffffffffffffda RBX: 00007f60cac25fa0 RCX: 00007f60ca99f559 [ 431.041351][T11429] RDX: 0000200000000780 RSI: 00000000c0303e03 RDI: 0000000000000006 [ 431.049381][T11429] RBP: 00007f60caa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 431.057417][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.065891][T11429] R13: 00007f60cac26038 R14: 00007f60cac25fa0 R15: 00007fff577fef98 [ 431.073951][T11429] [ 431.105276][T11431] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.1651'. [ 431.355612][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1655'. [ 431.372375][ T28] audit: type=1326 audit(431.259:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.1.1657" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60ca99f559 code=0x0 [ 431.421316][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1655'. [ 432.354048][T11460] FAULT_INJECTION: forcing a failure. [ 432.354048][T11460] name fail_futex, interval 1, probability 0, space 0, times 1 [ 432.404613][T11460] CPU: 1 PID: 11460 Comm: syz.6.1665 Tainted: G S syzkaller #0 [ 432.413652][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.423768][T11460] Call Trace: [ 432.427113][T11460] [ 432.430088][T11460] dump_stack_lvl+0x18c/0x250 [ 432.434825][T11460] ? show_regs_print_info+0x20/0x20 [ 432.440081][T11460] ? load_image+0x420/0x420 [ 432.444657][T11460] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 432.450879][T11460] should_fail_ex+0x394/0x4c0 [ 432.455630][T11460] get_futex_key+0x136/0x1030 [ 432.460382][T11460] ? futex_setup_timer+0xc0/0xc0 [ 432.465378][T11460] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 432.471430][T11460] ? __lock_acquire+0x7eb0/0x7eb0 [ 432.476563][T11460] ? preempt_schedule+0xc0/0xd0 [ 432.481483][T11460] futex_wait_setup+0xbc/0x270 [ 432.486308][T11460] ? futex_wait_multiple+0x920/0x920 [ 432.491661][T11460] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 432.497641][T11460] ? _raw_spin_unlock+0x40/0x40 [ 432.502558][T11460] futex_wait+0x1bc/0x5c0 [ 432.506980][T11460] ? futex_wait_setup+0x270/0x270 [ 432.512105][T11460] do_futex+0x2ff/0x3e0 [ 432.516327][T11460] ? __ia32_sys_get_robust_list+0x110/0x110 [ 432.522290][T11460] __se_sys_futex+0x3a9/0x440 [ 432.527061][T11460] ? __x64_sys_futex+0xf0/0xf0 [ 432.531882][T11460] ? __x64_sys_futex+0x21/0xf0 [ 432.536710][T11460] do_syscall_64+0x55/0xb0 [ 432.541174][T11460] ? clear_bhb_loop+0x40/0x90 [ 432.545897][T11460] ? clear_bhb_loop+0x40/0x90 [ 432.550628][T11460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.556587][T11460] RIP: 0033:0x7f08adb9f559 [ 432.561049][T11460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.580719][T11460] RSP: 002b:00007f08ae9f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 432.589205][T11460] RAX: ffffffffffffffda RBX: 00007f08ade25fa8 RCX: 00007f08adb9f559 [ 432.597234][T11460] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f08ade25fa8 [ 432.605274][T11460] RBP: 00007f08ade25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 432.613294][T11460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.621331][T11460] R13: 00007f08ade26038 R14: 00007fff78c9ba80 R15: 00007fff78c9bb68 [ 432.629382][T11460] [ 432.941461][T11469] loop6: detected capacity change from 0 to 764 [ 432.991484][T11469] rock: directory entry would overflow storage [ 433.023220][T11469] rock: sig=0x5245, size=8, remaining=5 [ 433.422596][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 433.500445][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 433.507662][T11476] loop1: detected capacity change from 0 to 1024 [ 433.572695][T11476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.847808][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.288812][T11500] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 434.443524][ T1191] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 434.447409][T11508] xt_hashlimit: max too large, truncated to 1048576 [ 434.709202][ T28] audit: type=1326 audit(434.599:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.4.1679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff206f9f559 code=0x0 [ 434.784063][ T1191] usb 2-1: Using ep0 maxpacket: 16 [ 434.806066][ T1191] usb 2-1: config 0 has no interfaces? [ 434.840765][ T1191] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 434.851319][ T1191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 434.860666][ T1191] usb 2-1: SerialNumber: syz [ 434.904661][ T1191] usb 2-1: config 0 descriptor?? [ 435.694389][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1682'. [ 435.792988][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1682'. [ 435.975537][T11530] loop6: detected capacity change from 0 to 256 [ 436.051270][T11470] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 436.656500][T11545] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 436.701476][T11544] rxe_eth0 speed is unknown, defaulting to 1000 [ 437.193864][ T6628] usb 2-1: USB disconnect, device number 11 [ 437.380641][T11560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1697'. [ 437.410122][T11560] ip6gre1: entered promiscuous mode [ 437.454175][T11560] ip6gre1: entered allmulticast mode [ 437.592198][T11560] netlink: 'syz.1.1697': attribute type 6 has an invalid length. [ 437.607710][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 439.813558][T11612] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 439.862427][T11608] loop1: detected capacity change from 0 to 8192 [ 439.870365][T11612] 8021q: adding VLAN 0 to HW filter on device bond6 [ 439.897169][T11615] dummy0: left promiscuous mode [ 439.920720][T11608] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 439.984064][T11615] bond6: (slave dummy0): making interface the new active one [ 440.005265][T11615] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 440.217089][T11612] : renamed from dummy0 (while UP) [ 440.553864][T11626] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1720'. [ 440.639449][T11630] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 440.973647][T11645] tipc: Failed to remove unknown binding: 66,0,0/0:3403113157/3403113159 [ 440.982415][T11645] tipc: Failed to remove unknown binding: 66,0,0/0:3403113157/3403113158 [ 440.996311][T11645] tipc: Failed to remove unknown binding: 66,0,0/0:3403113157/3403113158 [ 441.005192][T11645] tipc: Failed to remove unknown binding: 66,0,0/0:3403113157/3403113159 [ 441.017405][T11645] tipc: Failed to remove unknown binding: 66,0,0/0:3403113157/3403113158 [ 441.342551][T11650] loop6: detected capacity change from 0 to 8192 [ 441.392030][T11650] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.004096][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.023326][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.132169][T11729] xt_HMARK: proto mask must be zero with L3 mode [ 447.469532][ T28] audit: type=1326 audit(447.359:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 447.540809][ T28] audit: type=1326 audit(447.389:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 447.612183][ T28] audit: type=1326 audit(447.389:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 447.682710][ T28] audit: type=1326 audit(447.389:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 447.722849][ T28] audit: type=1326 audit(447.389:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 447.821179][ T28] audit: type=1326 audit(447.399:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 447.907032][ T28] audit: type=1326 audit(447.409:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 448.100191][ T28] audit: type=1326 audit(447.409:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 448.203402][ T28] audit: type=1326 audit(447.409:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff206f5fd8e code=0x7ffc0000 [ 448.318804][ T28] audit: type=1326 audit(447.409:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.4.1760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff206f9f559 code=0x7ffc0000 [ 554.523069][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 554.529850][ C1] rcu: 1-...!: (10499 ticks this GP) idle=ca4c/1/0x4000000000000000 softirq=48555/48556 fqs=0 [ 554.542288][ C1] rcu: (t=10500 jiffies g=63333 q=72 ncpus=2) [ 554.548490][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g63333 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 554.560854][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=29992 [ 554.568769][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g63333 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 554.580177][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 554.590174][ C1] rcu: RCU grace-period kthread stack dump: [ 554.596094][ C1] task:rcu_preempt state:I stack:27848 pid:17 ppid:2 flags:0x00004000 [ 554.605445][ C1] Call Trace: [ 554.608790][ C1] [ 554.611765][ C1] __schedule+0x15ae/0x4660 [ 554.616341][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 554.621435][ C1] ? lock_chain_count+0x20/0x20 [ 554.626363][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 554.631611][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 554.637583][ C1] ? asan.module_dtor+0x20/0x20 [ 554.642477][ C1] ? rcu_is_watching+0x15/0xb0 [ 554.647327][ C1] schedule+0xbd/0x170 [ 554.651441][ C1] schedule_timeout+0x188/0x2d0 [ 554.656342][ C1] ? console_conditional_schedule+0x40/0x40 [ 554.662349][ C1] ? update_process_times+0x1b0/0x1b0 [ 554.667770][ C1] ? prepare_to_swait_event+0x344/0x360 [ 554.673370][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 554.678275][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 554.683173][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 554.689197][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 554.694273][ C1] ? rcu_gp_init+0x1530/0x1530 [ 554.699073][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 554.703966][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.709213][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 554.714458][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 554.719095][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 554.724250][ C1] ? __kthread_parkme+0x71/0x1c0 [ 554.729235][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 554.734305][ C1] kthread+0x2fa/0x390 [ 554.738439][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 554.743596][ C1] ? kthread_blkcg+0xd0/0xd0 [ 554.748238][ C1] ret_from_fork+0x48/0x80 [ 554.752699][ C1] ? kthread_blkcg+0xd0/0xd0 [ 554.757360][ C1] ret_from_fork_asm+0x11/0x20 [ 554.762186][ C1] [ 554.765253][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 554.771608][ C1] Sending NMI from CPU 1 to CPUs 0: [ 554.776859][ C0] NMI backtrace for cpu 0 [ 554.776871][ C0] CPU: 0 PID: 11742 Comm: syz.4.1762 Tainted: G S syzkaller #0 [ 554.776888][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.776898][ C0] RIP: 0010:lock_release+0x22c/0x8c0 [ 554.776923][ C0] Code: 44 89 7c 24 3c 44 89 fa 85 c0 0f 84 d7 01 00 00 4d 85 e4 0f 84 01 03 00 00 4d 8d 74 24 24 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 9d 04 00 00 41 83 3e 00 0f 85 ca 03 00 00 4d 8d 74 24 [ 554.776937][ C0] RSP: 0018:ffffc90000007ba0 EFLAGS: 00000807 [ 554.776952][ C0] RAX: 0000000000000000 RBX: 000000000000000a RCX: 85981f15ba4afd00 [ 554.776963][ C0] RDX: 0000000000000002 RSI: ffffffff983696d0 RDI: ffff88802202c738 [ 554.776974][ C0] RBP: ffffc90000007cb0 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d [ 554.776987][ C0] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: ffff88802202c738 [ 554.776999][ C0] R13: dffffc0000000000 R14: ffff88802202c75c R15: 0000000000000002 [ 554.777011][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 554.777024][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.777035][ C0] CR2: 00007f08ae9f6ff8 CR3: 0000000076b9d000 CR4: 00000000003506f0 [ 554.777050][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 554.777060][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 554.777071][ C0] Call Trace: [ 554.777078][ C0] [ 554.777087][ C0] ? __hrtimer_run_queues+0x2cc/0xc10 [ 554.777117][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 554.777145][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 554.777172][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 554.777196][ C0] ? _raw_spin_lock+0x40/0x40 [ 554.777220][ C0] _raw_spin_unlock_irqrestore+0x71/0x120 [ 554.777245][ C0] ? _raw_spin_unlock+0x40/0x40 [ 554.777269][ C0] ? debug_object_deactivate+0x67/0x380 [ 554.777298][ C0] __hrtimer_run_queues+0x2cc/0xc10 [ 554.777317][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 554.777339][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 554.777368][ C0] ? hrtimer_interrupt+0x980/0x980 [ 554.777387][ C0] ? read_tsc+0x9/0x20 [ 554.777405][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 554.777431][ C0] hrtimer_interrupt+0x39d/0x980 [ 554.777461][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 554.777485][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 554.777507][ C0] [ 554.777512][ C0] [ 554.777517][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 554.777536][ C0] RIP: 0010:unwind_next_frame+0x1ce3/0x2990 [ 554.777554][ C0] Code: 53 a1 a4 00 49 8b 07 4c 39 f3 0f 96 c1 4c 39 f0 0f 97 c2 84 d1 74 3c 49 8d 4e 08 48 39 d9 0f 96 c2 48 39 c1 0f 97 c0 4d 39 e6 <0f> 97 c3 08 c3 08 d3 4c 89 f7 4c 89 e6 e8 fb c1 4b 00 80 fb 01 0f [ 554.777567][ C0] RSP: 0018:ffffc9000f2d6e38 EFLAGS: 00000202 [ 554.777581][ C0] RAX: ffffc9000f2d8000 RBX: ffffc9000f2d0000 RCX: ffffc9000f2d7950 [ 554.777593][ C0] RDX: ffff88802202bc00 RSI: 0000000000000001 RDI: ffffc9000f2d6f10 [ 554.777605][ C0] RBP: 0000000000000001 R08: ffff88802202bc00 R09: 0000000000000003 [ 554.777615][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000f2d7910 [ 554.777625][ C0] R13: ffffc9000f2d6f08 R14: ffffc9000f2d7948 R15: ffffc9000f2d6f18 [ 554.777647][ C0] ? unwind_next_frame+0x1c5e/0x2990 [ 554.777668][ C0] ? dentry_kill+0xb8/0x290 [ 554.777695][ C0] ? dentry_kill+0xb8/0x290 [ 554.777720][ C0] ? stack_trace_save+0x100/0x100 [ 554.777741][ C0] arch_stack_walk+0x144/0x190 [ 554.777762][ C0] ? dput+0xfe/0x1e0 [ 554.777787][ C0] stack_trace_save+0xaa/0x100 [ 554.777808][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 554.777834][ C0] save_stack+0x125/0x230 [ 554.777852][ C0] ? __reset_page_owner+0x190/0x190 [ 554.777868][ C0] ? free_unref_page_prepare+0x7d7/0x8f0 [ 554.777886][ C0] ? free_unref_page_list+0xbe/0x860 [ 554.777900][ C0] ? release_pages+0x208a/0x2300 [ 554.777919][ C0] ? __folio_batch_release+0x71/0xe0 [ 554.777937][ C0] ? shmem_undo_range+0x5ff/0x1a80 [ 554.777956][ C0] ? shmem_evict_inode+0x285/0xa70 [ 554.777976][ C0] ? evict+0x4b7/0x8a0 [ 554.777995][ C0] ? __dentry_kill+0x412/0x630 [ 554.778009][ C0] ? dentry_kill+0xb8/0x290 [ 554.778036][ C0] ? page_ext_get+0x22/0x2b0 [ 554.778058][ C0] ? page_ext_get+0x1e2/0x2b0 [ 554.778079][ C0] __reset_page_owner+0x4e/0x190 [ 554.778095][ C0] ? rcu_is_watching+0x15/0xb0 [ 554.778120][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 554.778151][ C0] free_unref_page_list+0xbe/0x860 [ 554.778167][ C0] ? __folio_memcg+0x63/0x170 [ 554.778187][ C0] ? folio_memcg+0x127/0x4a0 [ 554.778207][ C0] release_pages+0x208a/0x2300 [ 554.778231][ C0] ? lru_cache_disable+0x30/0x30 [ 554.778251][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 554.778278][ C0] __folio_batch_release+0x71/0xe0 [ 554.778298][ C0] shmem_undo_range+0x5ff/0x1a80 [ 554.778319][ C0] ? verify_lock_unused+0x140/0x140 [ 554.778342][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 554.778360][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 554.778386][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 554.778411][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 554.778437][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 554.778455][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 554.778481][ C0] shmem_evict_inode+0x285/0xa70 [ 554.778505][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 554.778530][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 554.778552][ C0] ? sb_clear_inode_writeback+0x330/0x330 [ 554.778575][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 554.778598][ C0] ? bit_waitqueue+0x30/0x30 [ 554.778619][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 554.778644][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 554.778666][ C0] evict+0x4b7/0x8a0 [ 554.778686][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 554.778707][ C0] ? proc_nr_inodes+0x230/0x230 [ 554.778729][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 554.778753][ C0] ? _raw_spin_unlock+0x28/0x40 [ 554.778780][ C0] __dentry_kill+0x412/0x630 [ 554.778797][ C0] dentry_kill+0xb8/0x290 [ 554.778822][ C0] ? dput+0x3b/0x1e0 [ 554.778846][ C0] dput+0xfe/0x1e0 [ 554.778871][ C0] __fput+0x5b2/0x940 [ 554.778892][ C0] task_work_run+0x1d4/0x260 [ 554.778918][ C0] ? task_work_cancel+0x220/0x220 [ 554.778946][ C0] do_exit+0x986/0x2530 [ 554.778976][ C0] ? put_task_struct+0xc0/0xc0 [ 554.779003][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 554.779023][ C0] ? get_signal+0x100e/0x1390 [ 554.779039][ C0] ? lock_chain_count+0x20/0x20 [ 554.779061][ C0] do_group_exit+0x22d/0x2f0 [ 554.779076][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 554.779097][ C0] get_signal+0x12a6/0x1390 [ 554.779123][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 554.779184][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 554.779203][ C0] ? get_sigframe_size+0x20/0x20 [ 554.779238][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 554.779264][ C0] exit_to_user_mode_loop+0x70/0x110 [ 554.779289][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 554.779314][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 554.779335][ C0] do_syscall_64+0x61/0xb0 [ 554.779350][ C0] ? clear_bhb_loop+0x40/0x90 [ 554.779366][ C0] ? clear_bhb_loop+0x40/0x90 [ 554.779383][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.779411][ C0] RIP: 0033:0x7ff206f9f559 [ 554.779424][ C0] Code: Unable to access opcode bytes at 0x7ff206f9f52f. [ 554.779431][ C0] RSP: 002b:00007ff207e900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.779447][ C0] RAX: 0000000000000001 RBX: 00007ff207225fa8 RCX: 00007ff206f9f559 [ 554.779458][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff207225fac [ 554.779469][ C0] RBP: 00007ff207225fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 554.779480][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.779489][ C0] R13: 00007ff207226038 R14: 00007ffe66ed8ea0 R15: 00007ffe66ed8f88 [ 554.779508][ C0] [ 554.779884][ C1] Sending NMI from CPU 1 to CPUs 0: [ 555.552652][ C0] NMI backtrace for cpu 0 [ 555.552664][ C0] CPU: 0 PID: 11742 Comm: syz.4.1762 Tainted: G S syzkaller #0 [ 555.552682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.552693][ C0] RIP: 0010:__lock_acquire+0x14e3/0x7eb0 [ 555.552721][ C0] Code: f8 74 56 4c 8d 73 18 4c 89 f0 48 c1 e8 03 42 80 3c 00 00 74 12 4c 89 f7 e8 9a be 77 00 49 b8 00 00 00 00 00 fc ff df 49 8b 06 <4c> 39 e0 0f 84 ba 11 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 [ 555.552735][ C0] RSP: 0018:ffffc90000007880 EFLAGS: 00000046 [ 555.552749][ C0] RAX: 4135954741f79c6b RBX: ffffffff920032c0 RCX: ffffffff8168b2a1 [ 555.552762][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff91ff1500 [ 555.552773][ C0] RBP: ffffc90000007ac8 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 555.552785][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 4135954741f79c6b [ 555.552798][ C0] R13: ffff88802202bc00 R14: ffffffff920032d8 R15: ffff88802202c758 [ 555.552810][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 555.552824][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.552836][ C0] CR2: 00007f08ae9f6ff8 CR3: 0000000076b9d000 CR4: 00000000003506f0 [ 555.552850][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.552860][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 555.552870][ C0] Call Trace: [ 555.552878][ C0] [ 555.552900][ C0] ? verify_lock_unused+0x140/0x140 [ 555.552929][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 555.552957][ C0] lock_acquire+0x19e/0x420 [ 555.552976][ C0] ? debug_object_activate+0x6c/0x500 [ 555.553003][ C0] ? debug_objects_fill_pool+0xcc/0x790 [ 555.553027][ C0] ? read_lock_is_recursive+0x20/0x20 [ 555.553048][ C0] ? debug_object_activate+0x500/0x500 [ 555.553080][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 555.553106][ C0] ? debug_object_activate+0x6c/0x500 [ 555.553129][ C0] ? _raw_spin_lock+0x40/0x40 [ 555.553151][ C0] ? advance_sched+0x9d7/0xc70 [ 555.553268][ C0] debug_object_activate+0x6c/0x500 [ 555.553293][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 555.553319][ C0] enqueue_hrtimer+0x34/0x380 [ 555.553338][ C0] ? __hrtimer_run_queues+0x620/0xc10 [ 555.553358][ C0] __hrtimer_run_queues+0x62f/0xc10 [ 555.553378][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 555.553400][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 555.553430][ C0] ? hrtimer_interrupt+0x980/0x980 [ 555.553448][ C0] ? read_tsc+0x9/0x20 [ 555.553467][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 555.553492][ C0] hrtimer_interrupt+0x39d/0x980 [ 555.553522][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 555.553546][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 555.553568][ C0] [ 555.553573][ C0] [ 555.553583][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 555.553601][ C0] RIP: 0010:unwind_next_frame+0x1ce3/0x2990 [ 555.553619][ C0] Code: 53 a1 a4 00 49 8b 07 4c 39 f3 0f 96 c1 4c 39 f0 0f 97 c2 84 d1 74 3c 49 8d 4e 08 48 39 d9 0f 96 c2 48 39 c1 0f 97 c0 4d 39 e6 <0f> 97 c3 08 c3 08 d3 4c 89 f7 4c 89 e6 e8 fb c1 4b 00 80 fb 01 0f [ 555.553633][ C0] RSP: 0018:ffffc9000f2d6e38 EFLAGS: 00000202 [ 555.553647][ C0] RAX: ffffc9000f2d8000 RBX: ffffc9000f2d0000 RCX: ffffc9000f2d7950 [ 555.553659][ C0] RDX: ffff88802202bc00 RSI: 0000000000000001 RDI: ffffc9000f2d6f10 [ 555.553671][ C0] RBP: 0000000000000001 R08: ffff88802202bc00 R09: 0000000000000003 [ 555.553681][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000f2d7910 [ 555.553691][ C0] R13: ffffc9000f2d6f08 R14: ffffc9000f2d7948 R15: ffffc9000f2d6f18 [ 555.553711][ C0] ? unwind_next_frame+0x1c5e/0x2990 [ 555.553733][ C0] ? dentry_kill+0xb8/0x290 [ 555.553759][ C0] ? dentry_kill+0xb8/0x290 [ 555.553783][ C0] ? stack_trace_save+0x100/0x100 [ 555.553804][ C0] arch_stack_walk+0x144/0x190 [ 555.553824][ C0] ? dput+0xfe/0x1e0 [ 555.553850][ C0] stack_trace_save+0xaa/0x100 [ 555.553871][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 555.553897][ C0] save_stack+0x125/0x230 [ 555.553915][ C0] ? __reset_page_owner+0x190/0x190 [ 555.553931][ C0] ? free_unref_page_prepare+0x7d7/0x8f0 [ 555.553947][ C0] ? free_unref_page_list+0xbe/0x860 [ 555.553962][ C0] ? release_pages+0x208a/0x2300 [ 555.553981][ C0] ? __folio_batch_release+0x71/0xe0 [ 555.554000][ C0] ? shmem_undo_range+0x5ff/0x1a80 [ 555.554018][ C0] ? shmem_evict_inode+0x285/0xa70 [ 555.554039][ C0] ? evict+0x4b7/0x8a0 [ 555.554058][ C0] ? __dentry_kill+0x412/0x630 [ 555.554081][ C0] ? dentry_kill+0xb8/0x290 [ 555.554108][ C0] ? page_ext_get+0x22/0x2b0 [ 555.554129][ C0] ? page_ext_get+0x1e2/0x2b0 [ 555.554151][ C0] __reset_page_owner+0x4e/0x190 [ 555.554167][ C0] ? rcu_is_watching+0x15/0xb0 [ 555.554192][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 555.554211][ C0] free_unref_page_list+0xbe/0x860 [ 555.554227][ C0] ? __folio_memcg+0x63/0x170 [ 555.554247][ C0] ? folio_memcg+0x127/0x4a0 [ 555.554267][ C0] release_pages+0x208a/0x2300 [ 555.554291][ C0] ? lru_cache_disable+0x30/0x30 [ 555.554311][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 555.554338][ C0] __folio_batch_release+0x71/0xe0 [ 555.554358][ C0] shmem_undo_range+0x5ff/0x1a80 [ 555.554379][ C0] ? verify_lock_unused+0x140/0x140 [ 555.554402][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 555.554420][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 555.554446][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 555.554471][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 555.554497][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 555.554516][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 555.554541][ C0] shmem_evict_inode+0x285/0xa70 [ 555.554566][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 555.554592][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 555.554614][ C0] ? sb_clear_inode_writeback+0x330/0x330 [ 555.554638][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 555.554662][ C0] ? bit_waitqueue+0x30/0x30 [ 555.554682][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 555.554706][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 555.554727][ C0] evict+0x4b7/0x8a0 [ 555.554748][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 555.554769][ C0] ? proc_nr_inodes+0x230/0x230 [ 555.554790][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 555.554814][ C0] ? _raw_spin_unlock+0x28/0x40 [ 555.554840][ C0] __dentry_kill+0x412/0x630 [ 555.554858][ C0] dentry_kill+0xb8/0x290 [ 555.554882][ C0] ? dput+0x3b/0x1e0 [ 555.554906][ C0] dput+0xfe/0x1e0 [ 555.554930][ C0] __fput+0x5b2/0x940 [ 555.554952][ C0] task_work_run+0x1d4/0x260 [ 555.554977][ C0] ? task_work_cancel+0x220/0x220 [ 555.555005][ C0] do_exit+0x986/0x2530 [ 555.555036][ C0] ? put_task_struct+0xc0/0xc0 [ 555.555062][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 555.555087][ C0] ? get_signal+0x100e/0x1390 [ 555.555104][ C0] ? lock_chain_count+0x20/0x20 [ 555.555126][ C0] do_group_exit+0x22d/0x2f0 [ 555.555140][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 555.555161][ C0] get_signal+0x12a6/0x1390 [ 555.555187][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 555.555214][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 555.555233][ C0] ? get_sigframe_size+0x20/0x20 [ 555.555267][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 555.555293][ C0] exit_to_user_mode_loop+0x70/0x110 [ 555.555318][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 555.555342][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 555.555363][ C0] do_syscall_64+0x61/0xb0 [ 555.555378][ C0] ? clear_bhb_loop+0x40/0x90 [ 555.555394][ C0] ? clear_bhb_loop+0x40/0x90 [ 555.555412][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.555440][ C0] RIP: 0033:0x7ff206f9f559 [ 555.555452][ C0] Code: Unable to access opcode bytes at 0x7ff206f9f52f. [ 555.555460][ C0] RSP: 002b:00007ff207e900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 555.555475][ C0] RAX: 0000000000000001 RBX: 00007ff207225fa8 RCX: 00007ff206f9f559 [ 555.555487][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff207225fac [ 555.555497][ C0] RBP: 00007ff207225fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 555.555507][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.555516][ C0] R13: 00007ff207226038 R14: 00007ffe66ed8ea0 R15: 00007ffe66ed8f88 [ 555.555535][ C0] [ 555.555647][ C1] CPU: 1 PID: 11761 Comm: syz.6.1769 Tainted: G S syzkaller #0 [ 556.367756][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.377853][ C1] RIP: 0010:smp_call_function_many_cond+0xd85/0x1190 [ 556.384587][ C1] Code: 45 8b 34 24 44 89 f6 83 e6 01 31 ff e8 34 01 0b 00 41 83 e6 01 49 be 00 00 00 00 00 fc ff df 75 07 e8 6f fd 0a 00 eb 38 f3 90 <42> 0f b6 04 33 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 53 fd [ 556.404317][ C1] RSP: 0018:ffffc9000f607820 EFLAGS: 00000246 [ 556.410424][ C1] RAX: ffffffff817c935d RBX: 1ffff110171887a5 RCX: 0000000000080000 [ 556.418437][ C1] RDX: ffffc9000df69000 RSI: 000000000007ffff RDI: 0000000000080000 [ 556.426536][ C1] RBP: ffffc9000f607990 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d [ 556.434633][ C1] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: ffff8880b8c43d28 [ 556.442644][ C1] R13: ffff8880b8d3d380 R14: dffffc0000000000 R15: 0000000000000000 [ 556.450655][ C1] FS: 00007f08ae9f76c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 556.459709][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.466330][ C1] CR2: 0000001b2d923ffc CR3: 000000001bb04000 CR4: 00000000003506e0 [ 556.474349][ C1] Call Trace: [ 556.477673][ C1] [ 556.480724][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 556.486070][ C1] ? smp_call_function_many+0x40/0x40 [ 556.491491][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 556.497455][ C1] ? _raw_spin_unlock+0x40/0x40 [ 556.502543][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 556.508663][ C1] clock_was_set+0x756/0x800 [ 556.513572][ C1] ? destroy_hrtimer_on_stack+0x20/0x20 [ 556.519335][ C1] ? __asan_memcpy+0x40/0x70 [ 556.524155][ C1] timekeeping_inject_offset+0x5d0/0x670 [ 556.529838][ C1] ? do_adjtimex+0x47c/0xa10 [ 556.534482][ C1] ? timekeeping_warp_clock+0xc0/0xc0 [ 556.539908][ C1] ? add_device_randomness+0xc6/0x110 [ 556.545376][ C1] ? crng_reseed+0x230/0x230 [ 556.550101][ C1] ? security_capable+0x89/0xb0 [ 556.555182][ C1] do_adjtimex+0x47c/0xa10 [ 556.559655][ C1] ? random_get_entropy_fallback+0x80/0x80 [ 556.565524][ C1] ? __might_fault+0xaa/0x120 [ 556.570246][ C1] ? __might_fault+0xc6/0x120 [ 556.574960][ C1] ? __might_fault+0xaa/0x120 [ 556.579682][ C1] __x64_sys_clock_adjtime+0x244/0x320 [ 556.585235][ C1] ? do_clock_adjtime+0x120/0x120 [ 556.590320][ C1] ? lock_chain_count+0x20/0x20 [ 556.595222][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 556.600478][ C1] do_syscall_64+0x55/0xb0 [ 556.604953][ C1] ? clear_bhb_loop+0x40/0x90 [ 556.609670][ C1] ? clear_bhb_loop+0x40/0x90 [ 556.614391][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.620344][ C1] RIP: 0033:0x7f08adb9f559 [ 556.624817][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.644473][ C1] RSP: 002b:00007f08ae9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 556.652935][ C1] RAX: ffffffffffffffda RBX: 00007f08ade25fa0 RCX: 00007f08adb9f559 [ 556.660946][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 556.668950][ C1] RBP: 00007f08adc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 556.676990][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.685000][ C1] R13: 00007f08ade26038 R14: 00007f08ade25fa0 R15: 00007fff78c9bb68 [ 556.693056][ C1]