last executing test programs: 3m34.752573083s ago: executing program 32 (id=20): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x3, 0x4) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) timerfd_create(0x9, 0x0) close(0x3) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000000)) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r4}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff64010100}, 0x80, r4}) 3m20.539125963s ago: executing program 33 (id=11): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000380), 0x2000) 3m19.487025653s ago: executing program 34 (id=22): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) recvmsg$unix(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x1) 3m16.657671034s ago: executing program 35 (id=31): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="8b0f022609779d6e8334720b3d07da168226cf349a794cdca19efa85ea0e88d380ab78c3bf97e686efd0587607e114c78e75896b26cbd719b51998d870688d3d613cd22459761a3f300cd2e3022b20e32f8c8a950d2e57ddb2", 0x59}], 0x1}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfffffd4c, 0x10008095, 0x0, 0x0) 2m58.501094108s ago: executing program 36 (id=130): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x3f4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f000014c000/0x7000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000135000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff32) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m57.240373061s ago: executing program 4 (id=142): memfd_create(&(0x7f0000000140)='w\xca\xe7\xee\xae\xb4\x16\a&Um\xb9\x96`\xef\xedd\xeai\xb2\xc6\x06\xc9\xb8*>\xf4w\x1e\x92H/\x10d\xaet\xa4\xfcF$\xdf9\xa1\x8e\xb0;\xea\xa9\x00\x00\x00\x00\x00\x00\x00\t?K\xa0\xdc\xe5\xc1\xab\xe7\x8a\xc1\x8bZN/,\x06*\xc6\xd2\x12\xa9\aF\xa5\xe6\x99\xeb\xe6\xd4\xd8E\x81\xa4\xb8\n\xa8\xa70\xaf\x98\xfc\xcb\x9e\x05[\x04\x8cb\xb5\xd5\xa7\xcaO\x82\xf1X2X\xad\x02j\xf2\x87\x95\xb0\xb2B\xa6Bg\xed\xf1\x1aC\x05\xe4\xbd\xe3\x8d\xc4\xaa\xe4\xcc/TE7\xbf\x17\x06*\xc6\xe5\xfb\xd3\xee\xdc\xa7\x99c\x02pm\xd5\xf1/\xb8^_\xfb\x11\xf1g\xce\xe1\x88\xa4n\xf4\xef#y\xda\x19\xc6\xbd]\xf4:\xe6\x88\xf6\x86\xa6f\xeb,4\xbfiz\x9fgJ\x92{\xb1\xfe\xb8\x93\xc2\x91]\xce\xa7QT=\xfb\x0ec\x8929\xcb\xf7\xa2\x18\xa6 \xbd\xb6', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m56.931630705s ago: executing program 4 (id=144): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3080009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x3c00) 2m50.003528323s ago: executing program 5 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) getdents64(r0, &(0x7f0000000280)=""/235, 0xeb) 2m49.712785273s ago: executing program 5 (id=154): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, 0x0, 0x10) write$P9_RSTATu(r0, 0x0, 0xb8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x4000000000000, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 2m49.15665189s ago: executing program 5 (id=155): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0xb) 2m48.707969414s ago: executing program 5 (id=156): mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x10, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2m48.179183024s ago: executing program 37 (id=156): mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x10, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2m43.343892754s ago: executing program 38 (id=134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) 2m41.412908548s ago: executing program 39 (id=144): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3080009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x3c00) 1m44.664485204s ago: executing program 40 (id=446): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x3545, 0xf69, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000340)="791a5d19fd", 0x5}], 0x1}, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 1m43.427662912s ago: executing program 41 (id=458): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x13, 0x0, "7874ac44ed5798a8825e3719ad1706dd6deeb7ef01eaac8d512b5de86e26601aee41c9637ebd5f960f4f1fc375a6628e949d0cf20cd6342f0f8b050d7cacf95480282d67a9f0552622d973d609fc3db4"}, 0xd8) 1m19.702948623s ago: executing program 1 (id=674): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c0000280002800800080013"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x12, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m19.128055588s ago: executing program 1 (id=677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f32f08028fe0f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x75, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m17.925018358s ago: executing program 1 (id=688): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 1m16.941100455s ago: executing program 1 (id=695): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4, 0x0], 0x0, 0x0, 0x2, 0x1}}, 0x40) r3 = syz_create_resource$binfmt(&(0x7f0000000480)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20200, 0x80) close_range(r2, r2, 0x0) 1m16.556743752s ago: executing program 1 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000003000/0x2000)=nil, 0x2000}, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 1m16.1151334s ago: executing program 1 (id=706): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x100000000, 0x12) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f737472615a6567793f6469736162df6c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd"], 0xfe, 0x17f, &(0x7f00000002c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x1c}}, 0x40004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r3, &(0x7f0000000400), 0x1000) 1m15.952941933s ago: executing program 2 (id=708): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @local, 0x2}, 0x1c) listen(r0, 0xfff) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x1, {[@generic={0x22, 0x2}]}}}}}}}}, 0x0) 1m15.76618492s ago: executing program 2 (id=710): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x32) 1m15.56307023s ago: executing program 2 (id=712): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1m15.299148723s ago: executing program 2 (id=713): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0xe}}) 1m15.084850596s ago: executing program 2 (id=714): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000003000/0x2000)=nil, 0x2000}, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 1m14.604728802s ago: executing program 2 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 1m14.360509701s ago: executing program 0 (id=722): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m13.96444177s ago: executing program 0 (id=724): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38, 0x400c0}}], 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m13.804805912s ago: executing program 0 (id=726): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f32f08028fe0f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x75, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x7}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1m13.61546406s ago: executing program 0 (id=727): r0 = gettid() r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x78) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x4008014) 1m13.395206794s ago: executing program 0 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000003000/0x2000)=nil, 0x2000}, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 1m12.973342268s ago: executing program 0 (id=730): mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2071) 1m0.383107484s ago: executing program 42 (id=706): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x100000000, 0x12) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f737472615a6567793f6469736162df6c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd"], 0xfe, 0x17f, &(0x7f00000002c0)="$eJzslE9LMlEUxp97x1fxpVbtgmiRkC0cZ8aKNhHSFxD6R7ssJ7HGFJ0gbRVt+wBt2/YV3AR9kWoVgcvWE3fuVa+hFkFJdH6LM8+de+6Zc8/AA4Ig/ixPj68PVy+tcwPABBKIqffPRi+Ha/mnufj+VGr9tnV9f7lWnakMqhkEn/9+BMBd1oDfPdt/OqGem+BdvQWOBaV3wGAqvQeObaVdMOwqfaTpisg3zcOS55oHFa8ghCWCLYIjQuZ9f+0LhoLWH9P2643mcd7z3No3io/m185yrGr96f+rMxtLm58NDlvpDBg2lF5BrDMbORLt/tORXn3jh+9PggSJ3yZ6/hTcMMxr/hTR/CPtl6vpeqOZKpXzRbfonjhOZtlatKwlJx0akYwj/C8e+tN/rf6/IblRFsVZ3vdrtozdtSPjIMflof9xJOfkWnh/dGg3cp+pcyxUSWNEOkEQxNiYBUNghLapmFQu2oeTG3ejBEEQBEEQBEEQBEF8mbcAAAD//xQ9cG4=") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x1c}}, 0x40004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r3, &(0x7f0000000400), 0x1000) 59.481252134s ago: executing program 43 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 57.20259756s ago: executing program 44 (id=730): mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2071) 40.539777909s ago: executing program 5 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000003000/0x2000)=nil, 0x2000}, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 40.214500834s ago: executing program 5 (id=811): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) 38.943317128s ago: executing program 7 (id=822): mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 38.628501031s ago: executing program 7 (id=826): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0xade, 0x6, 0x4, 0x31b2, 0x1ff}) 38.38554278s ago: executing program 7 (id=827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20fb2"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 37.629800271s ago: executing program 7 (id=831): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38, 0x400c0}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 37.504367136s ago: executing program 7 (id=832): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000003000/0x2000)=nil, 0x2000}, 0x2}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 37.151922316s ago: executing program 6 (id=836): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f00000000c0), 0x0}, 0x20) 37.115956503s ago: executing program 7 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4d) write(r0, &(0x7f0000000000)='3', 0x4e) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/14, 0xe}, {0x0}, {&(0x7f0000000440)=""/2, 0x2}], 0x5, 0x0, 0x80) 36.920818702s ago: executing program 6 (id=839): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000711239000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000500000085000000500000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) unshare(0x6020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001800)={0x33, 0x14, 0x0, 0x8001, "4464abaaf64269c534fab30e6880a02ac168e02163d9b55c5b3ef15db5e3ad9d"}) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104ff7f0000000000000000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffffffff, 0xfb1ac66eff4fd8f4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) renameat2(r4, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000020109040000000000000000026b"], 0x14}}, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000340)=""/108) 36.58279552s ago: executing program 6 (id=840): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @broadcast}, &(0x7f0000000040)=0xc) sendto$inet(r0, &(0x7f0000000500)="60adc079f26bd0289f712134ac63255a75c2c9a3064f0a82e70c4b00a31669b2e16f6c3cda2bebd09b0c8fdcd1f09481469c80a0ef23250b164963f821ec024b101f44fd6d20761e", 0x48, 0x4000010, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000e80)="fc", 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000480), &(0x7f00000004c0)=0x8) syz_clone(0x41000000, &(0x7f0000000840)="62e0dc3a8b7a526caaa18784514b63ee0bee0979836a74aac4371851fd4fa54adf5008f71b6ba6f874c6f94d82fe57a524c3e83bca45f90ac349404400a990f56c8e722c6353e505b70eaa07c8c03034586a56115c7ee57e0a2902998f754aa9ac3ce5420c50da0809de836f7e6dd3a43741029bc308e89a65c339e962ba94570e7de0e4ba2f02e399ad9731b9b93b723a8be5d8763c6ca15a2e28035bd3aefb23d5dbc3cee4f589ba4ef54557b475cebd7a5300f2a87e5bf9938283f63ebbb8d8eb1c3c8ad01febe6dd280fa5f78ff7bfc67d0b099b4e5fe99f25a57f61ac9213483bf1431367c5870d8c97a0377065a7a04760a080a002a1", 0xf9, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="1b3ae06c04e07cb20db593006a9cfa2968b8cc8befefe4bf289f779870025b050c345d3c6c56da302bee9d2f0740f16f71daf74276636ddd3449fec3d07b358e4a58483b2d9a1c39b136e4ee3510e00c386dc65c23f373ffd386f4db33") sendmmsg$alg(r3, &(0x7f0000007e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000340)={'nat\x00', 0x9f, "ba815b96f9ae7881e0ce6895315c9a2939e0735ece95a11cbb0feb579310211d4379ee32e22a93050dede28ceb7f88850ab9505e6352108997bbbd5d13472ca51d7fe4c90ebb5d10628d708ca962f7814ddf90f57348af2f1339b6e867ce4ac7beba2dde822a697eb87dd1ec44b35df82c29746151f16fa7e033ea74b61dc6cdbc81cbbd4f470b270c5fc49d1f9f1d56cd2c135985d225c0cfd235549c2dad"}, &(0x7f0000000440)=0xc3) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='8250_pericom\n', 0xd) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/bus/pci/drivers/8250_pericom\x00', 0x0, 0x0) r7 = openat(r6, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000600)='0000:00:00.0\n', 0xd) r8 = openat(r6, &(0x7f0000000700)='new_id\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@getchain={0x34, 0x66, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xf}, {0xe, 0xffff}, {0x5, 0xd}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8801) write(r8, &(0x7f0000000800)='8086 29c0\n', 0xa) 36.061679754s ago: executing program 6 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) r1 = semget$private(0x0, 0x20000000102, 0x200) semctl$GETALL(r1, 0x0, 0xd, 0x0) 35.457558195s ago: executing program 6 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000003000/0x2000)=nil, 0x2000}, 0x2}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 35.03290574s ago: executing program 6 (id=848): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, r1, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x28, 0x4) 24.982075018s ago: executing program 45 (id=811): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) 21.486096707s ago: executing program 46 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4d) write(r0, &(0x7f0000000000)='3', 0x4e) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/14, 0xe}, {0x0}, {&(0x7f0000000440)=""/2, 0x2}], 0x5, 0x0, 0x80) 19.798531004s ago: executing program 47 (id=848): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, r1, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x28, 0x4) 8.040552654s ago: executing program 4 (id=879): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38, 0x400c0}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.352185811s ago: executing program 4 (id=922): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000008580)={[{@fat=@nfs_stale_rw}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48b}}, {@numtail}, {@uni_xlate}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {}, {@shortname_winnt}, {@utf8}]}, 0x0, 0x2bf, &(0x7f0000002bc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 6.948770002s ago: executing program 4 (id=926): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x4000, 0x24000, 0xe}}) 5.840513373s ago: executing program 4 (id=932): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x2000005, 0x401d132, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) dup(r0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) io_setup(0x3fd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) eventfd(0xe) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40030040, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 5.362850459s ago: executing program 48 (id=932): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x2000005, 0x401d132, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) dup(r0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) io_setup(0x3fd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) eventfd(0xe) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40030040, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 3.35333065s ago: executing program 9 (id=950): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x4000, 0x24000, 0xe}}) 3.176948416s ago: executing program 9 (id=951): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38, 0x400c0}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.586466253s ago: executing program 3 (id=956): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x8, 0x0, 0x0, 0x9, 0x4}]}}, &(0x7f0000000440)=""/243, 0x26, 0xf3, 0x1, 0x2}, 0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000fc0)=""/4081, 0xff1}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f0000000180)=""/49, 0x31}, {&(0x7f00000000c0)=""/158, 0x9e}], 0x5}, 0x8}], 0x1, 0x0, 0x0) 2.336609884s ago: executing program 9 (id=957): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x2a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x490b, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000840), &(0x7f0000000140)=r2}, 0x20) 2.080868134s ago: executing program 3 (id=958): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x4000, 0x24000, 0xe}}) 2.080631524s ago: executing program 9 (id=959): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8d, 0x0, 0x89}]}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x172) write(r3, &(0x7f00000002c0)='+ 1 0 3 1 0\n', 0xc) unshare(0x40000000) 1.85352515s ago: executing program 3 (id=960): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008054) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1000}, {}], 0x2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 1.262782358s ago: executing program 9 (id=964): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38, 0x400c0}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 900.24226ms ago: executing program 8 (id=966): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000100)=@sr0, 0x0, &(0x7f0000000240)='./file1\x00') 873.800656ms ago: executing program 3 (id=967): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x4000, 0x24000, 0xe}}) 652.95083ms ago: executing program 8 (id=968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d00", @ANYRES16=r0], 0x40c}}, 0x0) 551.06674ms ago: executing program 9 (id=969): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 458.446209ms ago: executing program 3 (id=970): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8000) 352.90312ms ago: executing program 8 (id=971): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) io_setup(0x3fd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 315.818337ms ago: executing program 8 (id=972): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000008580)={[{@fat=@nfs_stale_rw}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48b}}, {@numtail}, {@uni_xlate}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {}, {@shortname_winnt}, {@utf8}]}, 0x0, 0x2bf, &(0x7f0000002bc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 163.321328ms ago: executing program 8 (id=973): semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000340)=""/108) 88.894423ms ago: executing program 3 (id=974): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mkdir(0x0, 0x190) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 0s ago: executing program 8 (id=975): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) close_range(0xffffffffffffffff, r0, 0x2) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f00000002c0)={0x100000, 0x0, 0x80000, {r0}}, 0x20) kernel console output (not intermixed with test programs): syz.3.419 Not tainted syzkaller #0 [ 169.824393][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.834494][ T7679] Call Trace: [ 169.837806][ T7679] [ 169.840756][ T7679] dump_stack_lvl+0x18c/0x250 [ 169.845472][ T7679] ? show_regs_print_info+0x20/0x20 [ 169.850710][ T7679] ? load_image+0x420/0x420 [ 169.855262][ T7679] should_fail_ex+0x394/0x4c0 [ 169.860089][ T7679] get_futex_key+0x136/0x1030 [ 169.864786][ T7679] ? verify_lock_unused+0x140/0x140 [ 169.870008][ T7679] ? futex_setup_timer+0xc0/0xc0 [ 169.874993][ T7679] futex_wake+0x127/0x4f0 [ 169.879457][ T7679] ? __se_sys_fsmount+0x82d/0x9b0 [ 169.884521][ T7679] ? futex_wake_mark+0x150/0x150 [ 169.889506][ T7679] ? __lock_acquire+0x7d80/0x7d80 [ 169.894584][ T7679] do_futex+0x35d/0x3e0 [ 169.898777][ T7679] ? mutex_unlock+0x10/0x10 [ 169.903317][ T7679] ? __ia32_sys_get_robust_list+0x110/0x110 [ 169.909253][ T7679] ? dput+0x3b/0x1e0 [ 169.913371][ T7679] __se_sys_futex+0x3a9/0x440 [ 169.918096][ T7679] ? __x64_sys_futex+0xf0/0xf0 [ 169.922897][ T7679] ? __x64_sys_futex+0x21/0xf0 [ 169.927670][ T7679] do_syscall_64+0x55/0xb0 [ 169.932100][ T7679] ? clear_bhb_loop+0x40/0x90 [ 169.936846][ T7679] ? clear_bhb_loop+0x40/0x90 [ 169.941564][ T7679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.947590][ T7679] RIP: 0033:0x7f91cd19e159 [ 169.952037][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.971677][ T7679] RSP: 002b:00007f91ce0680e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.980224][ T7679] RAX: ffffffffffffffda RBX: 00007f91cd425fa8 RCX: 00007f91cd19e159 [ 169.988231][ T7679] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f91cd425fac [ 169.996282][ T7679] RBP: 00007f91cd425fa0 R08: 0000000000745aed R09: 0000000000000000 [ 170.004293][ T7679] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 170.012295][ T7679] R13: 00007f91cd426038 R14: 00007ffe7f6e4510 R15: 00007ffe7f6e45f8 [ 170.020329][ T7679] [ 170.295058][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.9.421'. [ 170.406866][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 170.587153][ T7710] loop9: detected capacity change from 0 to 256 [ 170.623838][ T7710] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.668486][ T7710] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.737052][ T7715] loop8: detected capacity change from 0 to 128 [ 170.763322][ T7715] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.812896][ T7715] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.903351][ T49] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.074295][ T7725] FAULT_INJECTION: forcing a failure. [ 171.074295][ T7725] name fail_futex, interval 1, probability 0, space 0, times 0 [ 171.096488][ T7725] CPU: 1 PID: 7725 Comm: syz.8.432 Not tainted syzkaller #0 [ 171.103841][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.114022][ T7725] Call Trace: [ 171.117330][ T7725] [ 171.120286][ T7725] dump_stack_lvl+0x18c/0x250 [ 171.125161][ T7725] ? show_regs_print_info+0x20/0x20 [ 171.130371][ T7725] ? load_image+0x420/0x420 [ 171.134883][ T7725] ? min_deadline_cb_rotate+0x150/0x150 [ 171.140435][ T7725] should_fail_ex+0x394/0x4c0 [ 171.145123][ T7725] get_futex_key+0x136/0x1030 [ 171.149893][ T7725] ? futex_setup_timer+0xc0/0xc0 [ 171.154831][ T7725] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 171.160838][ T7725] ? __lock_acquire+0x7d80/0x7d80 [ 171.165868][ T7725] ? lock_chain_count+0x20/0x20 [ 171.170727][ T7725] futex_wait_setup+0xbc/0x270 [ 171.175493][ T7725] ? futex_wait_multiple+0x920/0x920 [ 171.180863][ T7725] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 171.186754][ T7725] ? _raw_spin_unlock+0x40/0x40 [ 171.191695][ T7725] futex_wait+0x1bc/0x5c0 [ 171.196029][ T7725] ? futex_wait_setup+0x270/0x270 [ 171.201079][ T7725] do_futex+0x2ff/0x3e0 [ 171.205233][ T7725] ? mutex_unlock+0x10/0x10 [ 171.209735][ T7725] ? __ia32_sys_get_robust_list+0x110/0x110 [ 171.215717][ T7725] ? dput+0x3b/0x1e0 [ 171.219621][ T7725] __se_sys_futex+0x3a9/0x440 [ 171.224302][ T7725] ? __x64_sys_futex+0xf0/0xf0 [ 171.229069][ T7725] ? __x64_sys_futex+0x21/0xf0 [ 171.233831][ T7725] do_syscall_64+0x55/0xb0 [ 171.238248][ T7725] ? clear_bhb_loop+0x40/0x90 [ 171.242927][ T7725] ? clear_bhb_loop+0x40/0x90 [ 171.247606][ T7725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.253502][ T7725] RIP: 0033:0x7fd6fcf9e159 [ 171.257916][ T7725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.277848][ T7725] RSP: 002b:00007fd6fde460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 171.286330][ T7725] RAX: ffffffffffffffda RBX: 00007fd6fd225fa8 RCX: 00007fd6fcf9e159 [ 171.294353][ T7725] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd6fd225fa8 [ 171.302515][ T7725] RBP: 00007fd6fd225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 171.310506][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.318657][ T7725] R13: 00007fd6fd226038 R14: 00007ffc4c81dd70 R15: 00007ffc4c81de58 [ 171.326655][ T7725] [ 171.813546][ T28] audit: type=1800 audit(1790528962.691:77): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.439" name="(" dev="sda1" ino=2060 res=0 errno=0 [ 172.246946][ T7773] kvm: user requested TSC rate below hardware speed syzkaller syzkaller login: [ 172.982166][ T7793] FAULT_INJECTION: forcing a failure. [ 172.982166][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.025880][ T7793] CPU: 1 PID: 7793 Comm: syz.8.448 Not tainted syzkaller #0 [ 173.033246][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.043333][ T7793] Call Trace: [ 173.046643][ T7793] [ 173.049596][ T7793] dump_stack_lvl+0x18c/0x250 [ 173.054297][ T7793] ? show_regs_print_info+0x20/0x20 [ 173.059505][ T7793] ? load_image+0x420/0x420 [ 173.064016][ T7793] ? __might_fault+0xaa/0x120 [ 173.068698][ T7793] ? __lock_acquire+0x7d80/0x7d80 [ 173.073740][ T7793] should_fail_ex+0x394/0x4c0 [ 173.078440][ T7793] strncpy_from_user+0x36/0x2f0 [ 173.083313][ T7793] getname_flags+0xf6/0x500 [ 173.087829][ T7793] __x64_sys_symlink+0x5f/0x90 [ 173.092611][ T7793] do_syscall_64+0x55/0xb0 [ 173.097038][ T7793] ? clear_bhb_loop+0x40/0x90 [ 173.101730][ T7793] ? clear_bhb_loop+0x40/0x90 [ 173.106927][ T7793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.113486][ T7793] RIP: 0033:0x7fd6fcf9e159 [ 173.117908][ T7793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.137702][ T7793] RSP: 002b:00007fd6fde46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 173.146134][ T7793] RAX: ffffffffffffffda RBX: 00007fd6fd225fa0 RCX: 00007fd6fcf9e159 [ 173.154123][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.162362][ T7793] RBP: 00007fd6fd03506b R08: 0000000000000000 R09: 0000000000000000 [ 173.170512][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.178485][ T7793] R13: 00007fd6fd226038 R14: 00007fd6fd225fa0 R15: 00007ffc4c81de58 [ 173.186615][ T7793] [ 173.207404][ T7796] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 173.379132][ T28] audit: type=1800 audit(1790528964.261:78): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.451" name="(" dev="sda1" ino=2060 res=0 errno=0 [ 173.735333][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.8.455'. [ 173.753650][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.455'. [ 174.190948][ T7830] loop8: detected capacity change from 0 to 256 [ 174.235869][ T7830] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.338035][ T7830] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.403938][ T28] audit: type=1804 audit(1790528965.291:79): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.459" name="/newroot/99/file0/file0" dev="loop8" ino=1048653 res=1 errno=0 [ 175.093027][ T28] audit: type=1800 audit(1790528965.981:80): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.462" name="(" dev="sda1" ino=2060 res=0 errno=0 [ 175.360518][ T7854] FAULT_INJECTION: forcing a failure. [ 175.360518][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.416231][ T7854] CPU: 0 PID: 7854 Comm: syz.0.464 Not tainted syzkaller #0 [ 175.423586][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.433710][ T7854] Call Trace: [ 175.437011][ T7854] [ 175.439970][ T7854] dump_stack_lvl+0x18c/0x250 [ 175.444692][ T7854] ? show_regs_print_info+0x20/0x20 [ 175.449929][ T7854] ? load_image+0x420/0x420 [ 175.454487][ T7854] ? __lock_acquire+0x7d80/0x7d80 [ 175.459597][ T7854] should_fail_ex+0x394/0x4c0 [ 175.464323][ T7854] _copy_from_user+0x2f/0xe0 [ 175.468951][ T7854] io_rsrc_data_alloc+0x1a9/0x280 [ 175.474023][ T7854] io_sqe_buffers_register+0x173/0x520 [ 175.479537][ T7854] ? __might_fault+0xaa/0x120 [ 175.484261][ T7854] ? io_sqe_files_register+0x5e0/0x5e0 [ 175.489761][ T7854] ? __might_fault+0xaa/0x120 [ 175.494475][ T7854] ? __might_fault+0xc6/0x120 [ 175.499209][ T7854] ? __might_fault+0xaa/0x120 [ 175.503918][ T7854] io_register_rsrc+0x247/0x280 [ 175.508790][ T7854] ? mutex_lock_nested+0x20/0x20 [ 175.513745][ T7854] ? io_pollfree_wake+0x1f0/0x1f0 [ 175.518791][ T7854] ? __fget_files+0x3fc/0x460 [ 175.523502][ T7854] __se_sys_io_uring_register+0x791/0xc40 [ 175.529242][ T7854] do_syscall_64+0x55/0xb0 [ 175.533667][ T7854] ? clear_bhb_loop+0x40/0x90 [ 175.538354][ T7854] ? clear_bhb_loop+0x40/0x90 [ 175.543044][ T7854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.548946][ T7854] RIP: 0033:0x7f612b19e159 [ 175.553360][ T7854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.573033][ T7854] RSP: 002b:00007f612c081028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 175.581653][ T7854] RAX: ffffffffffffffda RBX: 00007f612b425fa0 RCX: 00007f612b19e159 [ 175.589639][ T7854] RDX: 0000200000001540 RSI: 000000000000000f RDI: 0000000000000004 [ 175.597785][ T7854] RBP: 00007f612b23506b R08: 0000000000000000 R09: 0000000000000000 [ 175.605757][ T7854] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 175.613728][ T7854] R13: 00007f612b426038 R14: 00007f612b425fa0 R15: 00007ffff3c97498 [ 175.621713][ T7854] [ 176.733228][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 177.178433][ T28] audit: type=1800 audit(1790528968.061:81): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.472" name="(" dev="sda1" ino=2060 res=0 errno=0 [ 177.816042][ T7910] kvm: user requested TSC rate below hardware speed [ 178.161913][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.8.479'. [ 178.185765][ T7924] FAULT_INJECTION: forcing a failure. [ 178.185765][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 178.229134][ T7924] CPU: 0 PID: 7924 Comm: syz.0.480 Not tainted syzkaller #0 [ 178.236490][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.246579][ T7924] Call Trace: [ 178.249886][ T7924] [ 178.252840][ T7924] dump_stack_lvl+0x18c/0x250 [ 178.257563][ T7924] ? show_regs_print_info+0x20/0x20 [ 178.262797][ T7924] ? load_image+0x420/0x420 [ 178.267337][ T7924] ? __lock_acquire+0x7d80/0x7d80 [ 178.272497][ T7924] ? __asan_memset+0x22/0x40 [ 178.277142][ T7924] should_fail_ex+0x394/0x4c0 [ 178.281874][ T7924] should_failslab+0x9/0x20 [ 178.286443][ T7924] slab_pre_alloc_hook+0x59/0x300 [ 178.291512][ T7924] ? lockdep_softirqs_off+0x440/0x440 [ 178.296948][ T7924] ? fuse_dev_alloc+0x52/0x2c0 [ 178.301772][ T7924] __kmem_cache_alloc_node+0x53/0x250 [ 178.307240][ T7924] ? fuse_dev_alloc+0x52/0x2c0 [ 178.312045][ T7924] kmalloc_trace+0x2a/0xe0 [ 178.316520][ T7924] fuse_dev_alloc+0x52/0x2c0 [ 178.321142][ T7924] ? fuse_dev_alloc_install+0xf/0x40 [ 178.326463][ T7924] fuse_dev_alloc_install+0x14/0x40 [ 178.331694][ T7924] cuse_channel_open+0xf2/0x650 [ 178.336577][ T7924] ? __kobject_del+0x2e0/0x2e0 [ 178.341373][ T7924] ? fuse_dax_writepages+0xe0/0xe0 [ 178.346512][ T7924] misc_open+0x326/0x3a0 [ 178.350771][ T7924] chrdev_open+0x58c/0x600 [ 178.355192][ T7924] ? cd_forget+0x160/0x160 [ 178.359617][ T7924] ? fsnotify_perm+0x3ed/0x5e0 [ 178.364389][ T7924] do_dentry_open+0x880/0x14b0 [ 178.369162][ T7924] ? cd_forget+0x160/0x160 [ 178.373582][ T7924] path_openat+0x284f/0x3270 [ 178.378191][ T7924] ? do_sys_openat2+0xda/0x1d0 [ 178.382962][ T7924] ? do_filp_open+0x430/0x430 [ 178.387668][ T7924] do_filp_open+0x1f2/0x430 [ 178.392213][ T7924] ? vfs_tmpfile+0x620/0x620 [ 178.396820][ T7924] ? _raw_spin_unlock+0x28/0x40 [ 178.401677][ T7924] ? alloc_fd+0x590/0x640 [ 178.406110][ T7924] do_sys_openat2+0x134/0x1d0 [ 178.410879][ T7924] ? do_sys_open+0xe0/0xe0 [ 178.415296][ T7924] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 178.421278][ T7924] ? lock_chain_count+0x20/0x20 [ 178.426162][ T7924] __x64_sys_openat+0x139/0x160 [ 178.431025][ T7924] do_syscall_64+0x55/0xb0 [ 178.435558][ T7924] ? clear_bhb_loop+0x40/0x90 [ 178.440257][ T7924] ? clear_bhb_loop+0x40/0x90 [ 178.444960][ T7924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.450869][ T7924] RIP: 0033:0x7f612b19e159 [ 178.455288][ T7924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.474902][ T7924] RSP: 002b:00007f612c081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.483319][ T7924] RAX: ffffffffffffffda RBX: 00007f612b425fa0 RCX: 00007f612b19e159 [ 178.491295][ T7924] RDX: 0000000000002842 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 178.499266][ T7924] RBP: 00007f612b23506b R08: 0000000000000000 R09: 0000000000000000 [ 178.507240][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.515210][ T7924] R13: 00007f612b426038 R14: 00007f612b425fa0 R15: 00007ffff3c97498 [ 178.523195][ T7924] [ 179.318511][ T28] audit: type=1800 audit(1790528970.201:82): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.483" name="(" dev="sda1" ino=2060 res=0 errno=0 [ 179.926107][ T7964] kvm: user requested TSC rate below hardware speed [ 180.347913][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 181.226259][ T28] audit: type=1326 audit(1790528972.111:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.8.497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 181.271985][ T7989] loop8: detected capacity change from 0 to 16 [ 181.305438][ T7989] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 181.323499][ T28] audit: type=1326 audit(1790528972.111:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.8.497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 181.420831][ T28] audit: type=1326 audit(1790528972.111:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.8.497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 181.487113][ T28] audit: type=1326 audit(1790528972.111:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.8.497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 181.542194][ T28] audit: type=1326 audit(1790528972.121:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.8.497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 181.590469][ T28] audit: type=1326 audit(1790528972.121:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.8.497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 181.648526][ T28] audit: type=1326 audit(1790528972.131:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.8.497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 181.728535][ T28] audit: type=1326 audit(1790528972.131:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.8.497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 183.009749][ T8031] overlayfs: missing 'lowerdir' [ 183.189199][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 183.189213][ T28] audit: type=1800 audit(1790528974.081:164): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.508" name="(" dev="sda1" ino=2060 res=0 errno=0 [ 183.410450][ T8042] bridge0: port 2(bridge_slave_1) entered listening state [ 183.444153][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.527751][ T8067] overlayfs: missing 'lowerdir' [ 186.409084][ T8116] overlayfs: missing 'lowerdir' [ 187.948581][ T28] audit: type=1326 audit(1790528978.831:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.055109][ T28] audit: type=1326 audit(1790528978.831:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.135235][ T28] audit: type=1326 audit(1790528978.831:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.242791][ T28] audit: type=1326 audit(1790528978.861:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.368550][ T28] audit: type=1326 audit(1790528978.861:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.481265][ T28] audit: type=1326 audit(1790528978.861:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.537076][ T8160] overlayfs: missing 'lowerdir' [ 188.551299][ T28] audit: type=1326 audit(1790528978.861:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.679172][ T28] audit: type=1326 audit(1790528978.861:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.741684][ T28] audit: type=1326 audit(1790528978.871:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.838909][ T28] audit: type=1326 audit(1790528978.871:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 188.900010][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.915945][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.929490][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.939384][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.947149][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 188.955829][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.962698][ T28] audit: type=1326 audit(1790528978.871:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 189.146968][ T28] audit: type=1326 audit(1790528978.871:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 189.248693][ T28] audit: type=1326 audit(1790528978.871:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.8.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 189.322890][ T2956] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.575260][ T2956] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.643066][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 189.846288][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.868737][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.878622][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.887325][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.896865][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 189.906721][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.928305][ T2956] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.025944][ T8201] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.036855][ T8201] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.291817][ T2956] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.567704][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 191.010222][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.553'. [ 191.034939][ T8231] loop0: detected capacity change from 0 to 16 [ 191.063164][ T8231] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 191.078980][ T5782] Bluetooth: hci2: command tx timeout [ 191.118746][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.126815][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.134542][ T8166] bridge_slave_0: entered allmulticast mode [ 191.147574][ T8166] bridge_slave_0: entered promiscuous mode [ 191.257601][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.265653][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.273049][ T8166] bridge_slave_1: entered allmulticast mode [ 191.280532][ T8166] bridge_slave_1: entered promiscuous mode [ 191.676714][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.805947][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.974509][ T8193] chnl_net:caif_netlink_parms(): no params data found [ 192.039366][ T5782] Bluetooth: hci4: command tx timeout [ 192.113999][ T8166] team0: Port device team_slave_0 added [ 192.149917][ T8166] team0: Port device team_slave_1 added [ 192.457148][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.478452][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.506400][ T8166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.558786][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.565780][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.595938][ T8166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.663957][ T8278] loop0: detected capacity change from 0 to 16 [ 192.681325][ T8278] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 193.015553][ T8295] ip_tables: iptables: counters copy to user failed while replacing table [ 193.042312][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.073316][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.098730][ T8193] bridge_slave_0: entered allmulticast mode [ 193.106076][ T8193] bridge_slave_0: entered promiscuous mode [ 193.140056][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.147225][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.158827][ T5782] Bluetooth: hci2: command tx timeout [ 193.181646][ T8193] bridge_slave_1: entered allmulticast mode [ 193.189299][ T8193] bridge_slave_1: entered promiscuous mode [ 193.228028][ T8301] ip_tables: iptables: counters copy to user failed while replacing table [ 193.343955][ T8166] hsr_slave_0: entered promiscuous mode [ 193.361690][ T8166] hsr_slave_1: entered promiscuous mode [ 193.378488][ T8166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.380504][ T8306] loop0: detected capacity change from 0 to 164 [ 193.399851][ T8166] Cannot create hsr debugfs directory [ 193.420301][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.8.566'. [ 193.587459][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.672199][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.789747][ T8193] team0: Port device team_slave_0 added [ 193.819134][ T8193] team0: Port device team_slave_1 added [ 193.860684][ T2956] hsr_slave_0: left promiscuous mode [ 193.866441][ T28] kauditd_printk_skb: 280 callbacks suppressed [ 193.866455][ T28] audit: type=1326 audit(1790528984.751:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 193.877869][ T8321] loop0: detected capacity change from 0 to 16 [ 193.915345][ T8321] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 193.922538][ T2956] hsr_slave_1: left promiscuous mode [ 193.929294][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.936739][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.941244][ T28] audit: type=1326 audit(1790528984.751:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 193.979352][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.986826][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.003874][ T2956] bridge_slave_1: left allmulticast mode [ 194.010450][ T2956] bridge_slave_1: left promiscuous mode [ 194.019598][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.023270][ T28] audit: type=1326 audit(1790528984.761:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 194.052888][ T2956] bridge_slave_0: left allmulticast mode [ 194.058249][ T28] audit: type=1326 audit(1790528984.761:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 194.059757][ T2956] bridge_slave_0: left promiscuous mode [ 194.099148][ T28] audit: type=1326 audit(1790528984.761:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 194.116744][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.130148][ T28] audit: type=1326 audit(1790528984.761:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 194.130194][ T28] audit: type=1326 audit(1790528984.761:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 194.178295][ T5782] Bluetooth: hci4: command tx timeout [ 194.183890][ T28] audit: type=1326 audit(1790528984.761:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 194.208819][ T28] audit: type=1326 audit(1790528984.761:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 194.232879][ T28] audit: type=1326 audit(1790528984.761:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.0.569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 194.287077][ T2956] veth1_macvtap: left promiscuous mode [ 194.298969][ T2956] veth0_macvtap: left promiscuous mode [ 194.304721][ T2956] veth1_vlan: left promiscuous mode [ 194.313404][ T2956] veth0_vlan: left promiscuous mode [ 194.448906][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.455263][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.154020][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 195.196190][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 195.238509][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.248669][ T5782] Bluetooth: hci2: command tx timeout [ 195.287844][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.615241][ T2956] bond0 (unregistering): Released all slaves [ 195.786496][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 195.814105][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.826587][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.861212][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.881201][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.888193][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.917397][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.033858][ T8193] hsr_slave_0: entered promiscuous mode [ 196.042505][ T8193] hsr_slave_1: entered promiscuous mode [ 196.048981][ T8193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.056579][ T8193] Cannot create hsr debugfs directory [ 196.204681][ T5782] Bluetooth: hci4: command tx timeout [ 196.279175][ T8347] ip_tables: iptables: counters copy to user failed while replacing table [ 196.970496][ T2956] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.121961][ T2956] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.136000][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.582'. [ 197.298880][ T8386] loop0: detected capacity change from 0 to 16 [ 197.318585][ T5782] Bluetooth: hci2: command tx timeout [ 197.319627][ T8386] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 197.526556][ T2956] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.713834][ T2956] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.767078][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.278799][ T5782] Bluetooth: hci4: command tx timeout [ 198.502219][ T8398] syz.8.590 (8398) used greatest stack depth: 19880 bytes left [ 198.559934][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 199.181730][ T8437] FAULT_INJECTION: forcing a failure. [ 199.181730][ T8437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.200364][ T8437] CPU: 0 PID: 8437 Comm: syz.0.597 Not tainted syzkaller #0 [ 199.207716][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.217818][ T8437] Call Trace: [ 199.221127][ T8437] [ 199.224079][ T8437] dump_stack_lvl+0x18c/0x250 [ 199.228793][ T8437] ? show_regs_print_info+0x20/0x20 [ 199.234035][ T8437] ? load_image+0x420/0x420 [ 199.238573][ T8437] ? __might_fault+0xaa/0x120 [ 199.243287][ T8437] ? __lock_acquire+0x7d80/0x7d80 [ 199.248356][ T8437] should_fail_ex+0x394/0x4c0 [ 199.253078][ T8437] _copy_from_user+0x2f/0xe0 [ 199.257703][ T8437] kvm_arch_vm_ioctl+0x8b4/0x1770 [ 199.262781][ T8437] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 199.268212][ T8437] ? deref_stack_reg+0x1ab/0x230 [ 199.273186][ T8437] ? is_bpf_text_address+0x26/0x2a0 [ 199.278429][ T8437] ? __lock_acquire+0x7d80/0x7d80 [ 199.283492][ T8437] ? is_bpf_text_address+0x28f/0x2a0 [ 199.288782][ T8437] ? is_bpf_text_address+0x26/0x2a0 [ 199.293981][ T8437] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.300058][ T8437] ? kernel_text_address+0xa0/0xd0 [ 199.305171][ T8437] ? __kernel_text_address+0xd/0x30 [ 199.310393][ T8437] ? unwind_get_return_address+0x91/0xc0 [ 199.316042][ T8437] ? stack_trace_save+0x100/0x100 [ 199.321074][ T8437] ? arch_stack_walk+0x160/0x190 [ 199.326022][ T8437] ? stack_trace_save+0xaa/0x100 [ 199.330971][ T8437] ? stack_trace_snprint+0xf0/0xf0 [ 199.336084][ T8437] ? __stack_depot_save+0x1f/0x660 [ 199.341191][ T8437] ? do_syscall_64+0x55/0xb0 [ 199.345779][ T8437] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.351853][ T8437] ? kasan_set_track+0x5f/0x70 [ 199.356619][ T8437] ? kasan_set_track+0x4e/0x70 [ 199.361483][ T8437] ? kasan_save_free_info+0x28/0x40 [ 199.366688][ T8437] ? ____kasan_slab_free+0x126/0x1f0 [ 199.371970][ T8437] ? slab_free_freelist_hook+0x130/0x1a0 [ 199.377599][ T8437] ? __kmem_cache_free+0xba/0x1f0 [ 199.382627][ T8437] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 199.388261][ T8437] ? security_file_ioctl+0x70/0xa0 [ 199.393378][ T8437] ? __se_sys_ioctl+0x48/0x170 [ 199.398139][ T8437] ? do_syscall_64+0x55/0xb0 [ 199.402731][ T8437] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.408819][ T8437] ? mark_lock+0x94/0x320 [ 199.413158][ T8437] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 199.419144][ T8437] ? do_vfs_ioctl+0x156c/0x1cc0 [ 199.424022][ T8437] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 199.429664][ T8437] kvm_vm_ioctl+0x78f/0xb10 [ 199.434176][ T8437] ? kvm_device_release+0x1f0/0x1f0 [ 199.439388][ T8437] ? __kmem_cache_free+0xba/0x1f0 [ 199.444424][ T8437] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 199.450069][ T8437] ? tomoyo_path_number_perm+0x217/0x5e0 [ 199.455704][ T8437] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 199.461194][ T8437] ? __fget_files+0x28/0x460 [ 199.465797][ T8437] ? bpf_lsm_file_ioctl+0x9/0x10 [ 199.470742][ T8437] ? security_file_ioctl+0x80/0xa0 [ 199.475854][ T8437] ? kvm_device_release+0x1f0/0x1f0 [ 199.481054][ T8437] __se_sys_ioctl+0xfd/0x170 [ 199.485655][ T8437] do_syscall_64+0x55/0xb0 [ 199.490072][ T8437] ? clear_bhb_loop+0x40/0x90 [ 199.494747][ T8437] ? clear_bhb_loop+0x40/0x90 [ 199.499429][ T8437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.505328][ T8437] RIP: 0033:0x7f612b19e159 [ 199.509748][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.529361][ T8437] RSP: 002b:00007f612c081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.537776][ T8437] RAX: ffffffffffffffda RBX: 00007f612b425fa0 RCX: 00007f612b19e159 [ 199.545743][ T8437] RDX: 0000200000000180 RSI: 000000004040ae77 RDI: 0000000000000004 [ 199.553722][ T8437] RBP: 00007f612b23506b R08: 0000000000000000 R09: 0000000000000000 [ 199.561696][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.569669][ T8437] R13: 00007f612b426038 R14: 00007f612b425fa0 R15: 00007ffff3c97498 [ 199.577652][ T8437] [ 199.729906][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.601'. [ 199.873029][ T28] kauditd_printk_skb: 300 callbacks suppressed [ 199.873043][ T28] audit: type=1326 audit(1790528990.761:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 199.909617][ T28] audit: type=1326 audit(1790528990.761:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 199.941250][ T8458] loop0: detected capacity change from 0 to 16 [ 199.956606][ T8458] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 199.981995][ T28] audit: type=1326 audit(1790528990.761:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 200.033446][ T5947] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.063229][ T2956] hsr_slave_0: left promiscuous mode [ 200.078999][ T28] audit: type=1326 audit(1790528990.761:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 200.120175][ T2956] hsr_slave_1: left promiscuous mode [ 200.132611][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.156099][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.159407][ T28] audit: type=1326 audit(1790528990.801:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 200.198308][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.228567][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.236110][ T28] audit: type=1326 audit(1790528990.801:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 200.270736][ T2956] bridge_slave_1: left allmulticast mode [ 200.276437][ T2956] bridge_slave_1: left promiscuous mode [ 200.296295][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.299051][ T28] audit: type=1326 audit(1790528990.801:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 200.332906][ T28] audit: type=1326 audit(1790528990.821:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 200.358163][ T2956] bridge_slave_0: left allmulticast mode [ 200.363181][ T28] audit: type=1326 audit(1790528990.821:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 200.393052][ T28] audit: type=1326 audit(1790528990.821:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.0.602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 200.395985][ T2956] bridge_slave_0: left promiscuous mode [ 200.440753][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.499543][ T2956] veth1_macvtap: left promiscuous mode [ 200.506113][ T2956] veth0_macvtap: left promiscuous mode [ 200.520654][ T2956] veth1_vlan: left promiscuous mode [ 200.526079][ T2956] veth0_vlan: left promiscuous mode [ 200.568952][ T8473] loop0: detected capacity change from 0 to 128 [ 200.655305][ T2963] kworker/u4:9: attempt to access beyond end of device [ 200.655305][ T2963] loop0: rw=1, sector=129, nr_sectors = 1 limit=128 [ 201.005411][ T2956] bond1 (unregistering): Released all slaves [ 201.629174][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 201.673350][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 201.726059][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.772945][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.077368][ T2956] bond0 (unregistering): Released all slaves [ 202.178889][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 202.364360][ T8506] loop0: detected capacity change from 0 to 16 [ 202.377086][ T8193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.390607][ T8506] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 202.433915][ T5949] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.471890][ T8193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.509686][ T8193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.647363][ T8193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.689356][ T8515] ip_tables: iptables: counters copy to user failed while replacing table [ 202.719628][ T8515] ip_tables: iptables: counters copy to user failed while replacing table [ 202.808033][ T8166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.815240][ T8518] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 202.849284][ T8166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 202.928516][ T8166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 202.963981][ T8166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.288620][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.8.626'. [ 203.374550][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.442019][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.542494][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.603069][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.610288][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.664490][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.671708][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.704334][ T8193] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.770266][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.777435][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.850817][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.857982][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.379311][ T8570] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 204.562173][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.703601][ T8193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.845786][ T8166] veth0_vlan: entered promiscuous mode [ 204.996733][ T8193] veth0_vlan: entered promiscuous mode [ 205.020397][ T8166] veth1_vlan: entered promiscuous mode [ 205.067269][ T28] kauditd_printk_skb: 283 callbacks suppressed [ 205.067284][ T28] audit: type=1326 audit(1790528995.951:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.091999][ T8586] loop0: detected capacity change from 0 to 16 [ 205.139930][ T8193] veth1_vlan: entered promiscuous mode [ 205.142414][ T28] audit: type=1326 audit(1790528995.951:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.172194][ T8586] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 205.228114][ T28] audit: type=1326 audit(1790528995.951:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.273275][ T5949] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.308814][ T8166] veth0_macvtap: entered promiscuous mode [ 205.322250][ T28] audit: type=1326 audit(1790528995.951:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.353111][ T8166] veth1_macvtap: entered promiscuous mode [ 205.396353][ T28] audit: type=1326 audit(1790528995.951:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.486515][ T28] audit: type=1326 audit(1790528995.951:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.528303][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.556294][ T28] audit: type=1326 audit(1790528995.951:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.565393][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.632263][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.641782][ T28] audit: type=1326 audit(1790528995.951:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.656874][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.707882][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.746178][ T28] audit: type=1326 audit(1790528995.951:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.801496][ T28] audit: type=1326 audit(1790528995.951:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.0.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f612b19e159 code=0x7ffc0000 [ 205.855264][ T8193] veth0_macvtap: entered promiscuous mode [ 205.888507][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.927422][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.954263][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.988432][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.024274][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.112683][ T8166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.153107][ T8166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.163773][ T8166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.172653][ T8166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.224197][ T8193] veth1_macvtap: entered promiscuous mode [ 206.345875][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.369684][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.393012][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.407212][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.421389][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.435002][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.456970][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.565840][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.592730][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.607395][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.623347][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.635555][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.649505][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.670361][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.780334][ T8193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.808548][ T8193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.827542][ T8193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.846590][ T8193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.996074][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.035372][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.160797][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.177433][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.249014][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.256882][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.314999][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.338795][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.090147][ T8657] process 'syz.8.650' launched './file0' with NULL argv: empty string added [ 208.924704][ T8669] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 209.190219][ T8678] loop2: detected capacity change from 0 to 16 [ 209.239592][ T8678] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 209.804036][ T8695] kvm: user requested TSC rate below hardware speed [ 210.034152][ T8707] loop1: detected capacity change from 0 to 164 [ 210.995403][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 210.995418][ T28] audit: type=1326 audit(1790529001.881:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.110919][ T8736] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 211.118616][ T28] audit: type=1326 audit(1790529001.931:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.167454][ T28] audit: type=1326 audit(1790529001.931:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.208206][ T28] audit: type=1326 audit(1790529001.931:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.241778][ T28] audit: type=1326 audit(1790529001.931:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.297744][ T28] audit: type=1326 audit(1790529001.931:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.330571][ T28] audit: type=1326 audit(1790529001.931:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.428452][ T28] audit: type=1326 audit(1790529001.931:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.496385][ T28] audit: type=1326 audit(1790529001.931:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.596255][ T28] audit: type=1326 audit(1790529001.931:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.8.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 211.627284][ T8746] loop0: detected capacity change from 0 to 8192 [ 212.213140][ T8746] loop0: p1 p2 p3 [ 212.288752][ T8746] loop0: partition table partially beyond EOD, truncated [ 212.349211][ T8746] loop0: p1 start 51379968 is beyond EOD, truncated [ 212.461509][ T8746] loop0: p3 size 100663552 extends beyond EOD, truncated [ 212.619817][ T8768] overlayfs: failed to clone upperpath [ 213.022019][ T8774] loop0: detected capacity change from 0 to 164 [ 213.063731][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.674'. [ 213.193020][ T8774] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 213.360282][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 213.375185][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 214.050285][ T8799] loop0: detected capacity change from 0 to 16 [ 214.081447][ T8799] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 214.191528][ T8807] ip_tables: iptables: counters copy to user failed while replacing table [ 215.477536][ T8848] loop2: detected capacity change from 0 to 16 [ 215.551278][ T8848] erofs: Unknown parameter 'cache_straZegy?disabßled' [ 215.970945][ T8863] kvm: user requested TSC rate below hardware speed [ 216.215469][ T8881] loop0: detected capacity change from 0 to 16 [ 216.233739][ T8881] erofs: (device loop0): mounted with root inode @ nid 36. [ 217.668429][ T28] kauditd_printk_skb: 207 callbacks suppressed [ 217.668446][ T28] audit: type=1326 audit(1790529008.551:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.8.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 217.817493][ T28] audit: type=1326 audit(1790529008.551:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.8.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 217.918558][ T28] audit: type=1326 audit(1790529008.551:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.8.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 218.018489][ T28] audit: type=1326 audit(1790529008.561:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.8.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 218.129705][ T28] audit: type=1326 audit(1790529008.561:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.8.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 218.231891][ T28] audit: type=1326 audit(1790529008.561:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.8.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 218.259113][ T28] audit: type=1326 audit(1790529008.561:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.8.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 218.291668][ T28] audit: type=1326 audit(1790529008.561:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.8.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 218.396685][ T28] audit: type=1326 audit(1790529008.561:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8927 comm="syz.8.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd6fcf9e159 code=0x7ffc0000 [ 219.215513][ T8969] kvm: user requested TSC rate below hardware speed [ 219.582524][ T8978] ip_tables: iptables: counters copy to user failed while replacing table [ 227.354505][ T9114] bond1: option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 227.409637][ T9114] bond1 (unregistering): Released all slaves [ 232.975575][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.993546][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.009342][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.027705][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.048546][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.068741][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.729732][ T9226] overlayfs: failed to clone upperpath [ 233.868785][ T9210] chnl_net:caif_netlink_parms(): no params data found [ 233.937410][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.947829][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.957987][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.972167][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.996880][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.005282][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.229637][ T9210] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.259831][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.267106][ T9210] bridge_slave_0: entered allmulticast mode [ 234.299989][ T9210] bridge_slave_0: entered promiscuous mode [ 234.318674][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.325856][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.348696][ T9210] bridge_slave_1: entered allmulticast mode [ 234.356062][ T9210] bridge_slave_1: entered promiscuous mode [ 234.441742][ T9210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.505799][ T9210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.657755][ T9210] team0: Port device team_slave_0 added [ 234.667635][ T9210] team0: Port device team_slave_1 added [ 234.794793][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.001568][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.035298][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.060171][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.108777][ T9210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.135215][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.158915][ T5780] Bluetooth: hci0: command tx timeout [ 235.180104][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.248467][ T9210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.370872][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.443416][ T9240] 9pnet_fd: p9_fd_create_tcp (9240): problem connecting socket to 127.0.0.1 [ 235.617904][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.795083][ T9210] hsr_slave_0: entered promiscuous mode [ 235.824913][ T9210] hsr_slave_1: entered promiscuous mode [ 235.832660][ T9210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.858678][ T9210] Cannot create hsr debugfs directory [ 235.937245][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.956027][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.965811][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.024288][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.033737][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 236.044288][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.118585][ T5776] Bluetooth: hci2: command tx timeout [ 236.204117][ T9231] chnl_net:caif_netlink_parms(): no params data found [ 236.615388][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.827856][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.868977][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.876136][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.909282][ T9231] bridge_slave_0: entered allmulticast mode [ 236.916681][ T9231] bridge_slave_0: entered promiscuous mode [ 236.955869][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.963362][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.978924][ T9231] bridge_slave_1: entered allmulticast mode [ 236.986291][ T9231] bridge_slave_1: entered promiscuous mode [ 237.058767][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.238939][ T5776] Bluetooth: hci0: command tx timeout [ 237.385326][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.442319][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.477554][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.478611][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 237.620695][ T9231] team0: Port device team_slave_0 added [ 237.649080][ T9231] team0: Port device team_slave_1 added [ 237.722969][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.731494][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.757910][ T9231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.802422][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.831601][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.877322][ T9231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.119418][ T5780] Bluetooth: hci3: command tx timeout [ 238.198580][ T5780] Bluetooth: hci2: command tx timeout [ 238.237707][ T9231] hsr_slave_0: entered promiscuous mode [ 238.263315][ T9231] hsr_slave_1: entered promiscuous mode [ 238.285730][ T9231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.309425][ T9231] Cannot create hsr debugfs directory [ 238.350488][ T9248] chnl_net:caif_netlink_parms(): no params data found [ 238.958954][ T9248] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.966814][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.974353][ T9248] bridge_slave_0: entered allmulticast mode [ 238.992783][ T9248] bridge_slave_0: entered promiscuous mode [ 239.001764][ T9248] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.009017][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.016240][ T9248] bridge_slave_1: entered allmulticast mode [ 239.023623][ T9248] bridge_slave_1: entered promiscuous mode [ 239.168536][ T9248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.280840][ T9248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.328859][ T5780] Bluetooth: hci0: command tx timeout [ 239.664985][ T9248] team0: Port device team_slave_0 added [ 239.694378][ T9248] team0: Port device team_slave_1 added [ 239.906169][ T9248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.921835][ T9248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.978522][ T9248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.198741][ T5780] Bluetooth: hci3: command tx timeout [ 240.236741][ T9248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.254033][ T9248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.278498][ T5780] Bluetooth: hci2: command tx timeout [ 240.335903][ T9248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.745964][ T9248] hsr_slave_0: entered promiscuous mode [ 240.766202][ T9248] hsr_slave_1: entered promiscuous mode [ 240.774172][ T9248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.788472][ T9248] Cannot create hsr debugfs directory [ 241.398755][ T5780] Bluetooth: hci0: command tx timeout [ 241.739552][ T65] hsr_slave_0: left promiscuous mode [ 241.746767][ T9393] 9pnet_fd: p9_fd_create_tcp (9393): problem connecting socket to 127.0.0.1 [ 241.756251][ T65] hsr_slave_1: left promiscuous mode [ 241.781641][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.789519][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.808915][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.816780][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.833274][ T65] bridge_slave_1: left allmulticast mode [ 241.848649][ T65] bridge_slave_1: left promiscuous mode [ 241.854501][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.887227][ T65] bridge_slave_0: left allmulticast mode [ 241.898462][ T65] bridge_slave_0: left promiscuous mode [ 241.904315][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.937525][ T65] hsr_slave_0: left promiscuous mode [ 241.966890][ T65] hsr_slave_1: left promiscuous mode [ 241.973198][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.989846][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.004571][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.018664][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.028153][ T65] bridge_slave_1: left allmulticast mode [ 242.043269][ T65] bridge_slave_1: left promiscuous mode [ 242.049605][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.068703][ T65] bridge_slave_0: left allmulticast mode [ 242.074403][ T65] bridge_slave_0: left promiscuous mode [ 242.090357][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.149959][ T65] veth1_macvtap: left promiscuous mode [ 242.155579][ T65] veth0_macvtap: left promiscuous mode [ 242.163607][ T9411] overlayfs: failed to clone lowerpath [ 242.169050][ T65] veth1_vlan: left promiscuous mode [ 242.184777][ T65] veth0_vlan: left promiscuous mode [ 242.194476][ T65] veth1_macvtap: left promiscuous mode [ 242.206525][ T65] veth0_macvtap: left promiscuous mode [ 242.212812][ T65] veth1_vlan: left promiscuous mode [ 242.218178][ T65] veth0_vlan: left promiscuous mode [ 242.281082][ T5780] Bluetooth: hci3: command tx timeout [ 242.358922][ T5780] Bluetooth: hci2: command tx timeout [ 243.385064][ T65] team0 (unregistering): Port device team_slave_1 removed [ 243.422396][ T65] team0 (unregistering): Port device team_slave_0 removed [ 243.462851][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.506753][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.824105][ T65] bond0 (unregistering): Released all slaves [ 244.307228][ T65] team0 (unregistering): Port device team_slave_1 removed [ 244.351251][ T65] team0 (unregistering): Port device team_slave_0 removed [ 244.358764][ T5780] Bluetooth: hci3: command tx timeout [ 244.395640][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.435912][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.743820][ T65] bond0 (unregistering): Released all slaves [ 244.870701][ T9210] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 244.928307][ T9210] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 244.941997][ T9210] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 244.987092][ T9210] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 245.071692][ T9231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.203062][ T9231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.230549][ T9231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 245.307300][ T9231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 245.596647][ T9210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.694354][ T9210] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.760654][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.767800][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.792402][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.799611][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.904867][ T9210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.965750][ T9248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 246.019425][ T9248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 246.045302][ T9248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 246.066363][ T9248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 246.143714][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.230487][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.271770][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.332214][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.383647][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.423542][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.456020][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.463258][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.503402][ T9210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.557658][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.564888][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.597159][ T9248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.786469][ T9248] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.847358][ T9231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.898022][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.905276][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.916060][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.923276][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.375443][ T9210] veth0_vlan: entered promiscuous mode [ 247.475915][ T9210] veth1_vlan: entered promiscuous mode [ 247.580412][ T9210] veth0_macvtap: entered promiscuous mode [ 247.612529][ T9248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.623463][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.634359][ T9210] veth1_macvtap: entered promiscuous mode [ 247.671955][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.706084][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.720690][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.738771][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.775886][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.846926][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.860071][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.872495][ T9210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.884730][ T9210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.896390][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.987914][ T9210] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.011060][ T9210] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.028434][ T9210] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.037182][ T9210] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.319465][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.327333][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.461308][ T9231] veth0_vlan: entered promiscuous mode [ 248.486706][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.508138][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.511807][ T65] hsr_slave_0: left promiscuous mode [ 248.527692][ T65] hsr_slave_1: left promiscuous mode [ 248.535688][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.548931][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.557017][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.575456][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.586904][ T65] bridge_slave_1: left promiscuous mode [ 248.597377][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.610569][ T65] bridge_slave_0: left allmulticast mode [ 248.616265][ T65] bridge_slave_0: left promiscuous mode [ 248.627844][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.670226][ T65] veth1_macvtap: left promiscuous mode [ 248.676692][ T65] veth0_macvtap: left promiscuous mode [ 248.691319][ T65] veth1_vlan: left promiscuous mode [ 248.696717][ T65] veth0_vlan: left promiscuous mode [ 249.494836][ T65] team0 (unregistering): Port device team_slave_1 removed [ 249.540666][ T65] team0 (unregistering): Port device team_slave_0 removed [ 249.581474][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.625712][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.934800][ T65] bond0 (unregistering): Released all slaves [ 250.093402][ T9231] veth1_vlan: entered promiscuous mode [ 250.121374][ T9248] veth0_vlan: entered promiscuous mode [ 250.219161][ T9248] veth1_vlan: entered promiscuous mode [ 250.274957][ T9231] veth0_macvtap: entered promiscuous mode [ 250.350036][ T9231] veth1_macvtap: entered promiscuous mode [ 250.430335][ T9248] veth0_macvtap: entered promiscuous mode [ 250.462265][ T9248] veth1_macvtap: entered promiscuous mode [ 250.494741][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.509466][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.526814][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.540816][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.557962][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.607449][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.630083][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.644721][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.655908][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.671426][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.684010][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.701126][ T9248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.712637][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.724860][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.735542][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.747075][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.770899][ T9248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.791118][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.834335][ T9571] loop7: detected capacity change from 0 to 128 [ 250.842300][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.860689][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.876232][ T9571] FAT-fs (loop7): Directory bread(block 524322) failed [ 250.887553][ T9571] FAT-fs (loop7): Directory bread(block 524323) failed [ 250.895234][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.912704][ T9571] FAT-fs (loop7): Directory bread(block 524324) failed [ 250.935218][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.945855][ T9571] FAT-fs (loop7): Directory bread(block 524325) failed [ 250.952987][ T9571] FAT-fs (loop7): Directory bread(block 524326) failed [ 250.960028][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.970001][ T9571] FAT-fs (loop7): Directory bread(block 524327) failed [ 250.976905][ T9571] FAT-fs (loop7): Directory bread(block 524328) failed [ 250.985357][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.006350][ T9571] FAT-fs (loop7): Directory bread(block 524329) failed [ 251.018159][ T9248] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.030207][ T9248] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.065839][ T9248] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.085605][ T9248] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.132690][ T9231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.174053][ T9231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.202609][ T9231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.214622][ T9571] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4240259311 (33922074488 ns) > initial count (30841923920 ns). Using initial count to start timer. [ 251.233372][ T9231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.560170][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.568042][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.603841][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.628182][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.691332][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.703559][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.7.808'. [ 251.732815][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.784679][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.812223][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.056431][ T9602] loop7: detected capacity change from 0 to 512 [ 252.240665][ T9602] printk: console [ttyS0] disabled [ 252.525664][ T9610] printk: console [ttyS0] enabled [ 253.136622][ T9646] FAULT_INJECTION: forcing a failure. [ 253.136622][ T9646] name fail_futex, interval 1, probability 0, space 0, times 0 [ 253.187115][ T9646] CPU: 0 PID: 9646 Comm: syz.7.818 Not tainted syzkaller #0 [ 253.187897][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.8.819'. [ 253.194447][ T9646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.194482][ T9646] Call Trace: [ 253.194493][ T9646] [ 253.194502][ T9646] dump_stack_lvl+0x18c/0x250 [ 253.194538][ T9646] ? show_regs_print_info+0x20/0x20 [ 253.194562][ T9646] ? load_image+0x420/0x420 [ 253.194584][ T9646] ? __kmem_cache_free+0xba/0x1f0 [ 253.194621][ T9646] should_fail_ex+0x394/0x4c0 [ 253.194653][ T9646] get_futex_key+0x136/0x1030 [ 253.194682][ T9646] ? futex_setup_timer+0xc0/0xc0 [ 253.194709][ T9646] futex_wake+0x127/0x4f0 [ 253.194736][ T9646] ? futex_wake_mark+0x150/0x150 [ 253.194772][ T9646] do_futex+0x35d/0x3e0 [ 253.194797][ T9646] ? __ia32_sys_get_robust_list+0x110/0x110 [ 253.194828][ T9646] __se_sys_futex+0x3a9/0x440 [ 253.194854][ T9646] ? __x64_sys_futex+0xf0/0xf0 [ 253.194881][ T9646] ? __x64_sys_futex+0x21/0xf0 [ 253.194902][ T9646] do_syscall_64+0x55/0xb0 [ 253.292494][ T9646] ? clear_bhb_loop+0x40/0x90 [ 253.297207][ T9646] ? clear_bhb_loop+0x40/0x90 [ 253.301897][ T9646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.307878][ T9646] RIP: 0033:0x7f8fedf9e159 [ 253.312306][ T9646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.331921][ T9646] RSP: 002b:00007f8feeef00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 253.340343][ T9646] RAX: ffffffffffffffda RBX: 00007f8fee225fa8 RCX: 00007f8fedf9e159 [ 253.348931][ T9646] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8fee225fac [ 253.356902][ T9646] RBP: 00007f8fee225fa0 R08: 0000000000745aed R09: 0000000000000000 [ 253.364876][ T9646] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 253.372934][ T9646] R13: 00007f8fee226038 R14: 00007fff34b39a70 R15: 00007fff34b39b58 [ 253.380951][ T9646] [ 254.799613][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.829'. [ 255.899427][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.905780][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.560858][ T9738] FAULT_INJECTION: forcing a failure. [ 256.560858][ T9738] name failslab, interval 1, probability 0, space 0, times 0 [ 256.632565][ T9738] CPU: 1 PID: 9738 Comm: syz.6.843 Not tainted syzkaller #0 [ 256.639940][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.650027][ T9738] Call Trace: [ 256.653337][ T9738] [ 256.656298][ T9738] dump_stack_lvl+0x18c/0x250 [ 256.661064][ T9738] ? show_regs_print_info+0x20/0x20 [ 256.666291][ T9738] ? load_image+0x420/0x420 [ 256.670804][ T9738] ? __might_sleep+0xe0/0xe0 [ 256.675442][ T9738] ? __lock_acquire+0x7d80/0x7d80 [ 256.680468][ T9738] ? aa_get_newest_label+0xfd/0x5c0 [ 256.685668][ T9738] should_fail_ex+0x394/0x4c0 [ 256.690357][ T9738] should_failslab+0x9/0x20 [ 256.694869][ T9738] slab_pre_alloc_hook+0x59/0x300 [ 256.699909][ T9738] ? kvmalloc_node+0x70/0x180 [ 256.704590][ T9738] ? kvmalloc_node+0x70/0x180 [ 256.709265][ T9738] __kmem_cache_alloc_node+0x53/0x250 [ 256.714652][ T9738] ? kvmalloc_node+0x70/0x180 [ 256.719332][ T9738] __kmalloc_node+0xa6/0x240 [ 256.723927][ T9738] ? semctl_main+0x119/0x1660 [ 256.728605][ T9738] ? semctl_main+0x119/0x1660 [ 256.733279][ T9738] kvmalloc_node+0x70/0x180 [ 256.737789][ T9738] semctl_main+0x8a4/0x1660 [ 256.742295][ T9738] ? semctl_main+0x119/0x1660 [ 256.746977][ T9738] ? semctl_stat+0x6f0/0x6f0 [ 256.751601][ T9738] ? do_futex+0x2ff/0x3e0 [ 256.755941][ T9738] __se_sys_semctl+0x33c/0x3e0 [ 256.760723][ T9738] ? __x64_sys_semctl+0xb0/0xb0 [ 256.765601][ T9738] ? lockdep_hardirqs_on+0x98/0x150 [ 256.770802][ T9738] do_syscall_64+0x55/0xb0 [ 256.775223][ T9738] ? clear_bhb_loop+0x40/0x90 [ 256.779946][ T9738] ? clear_bhb_loop+0x40/0x90 [ 256.784633][ T9738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.790531][ T9738] RIP: 0033:0x7f07e119e159 [ 256.794952][ T9738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.814593][ T9738] RSP: 002b:00007f07e212c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 256.823016][ T9738] RAX: ffffffffffffffda RBX: 00007f07e1425fa0 RCX: 00007f07e119e159 [ 256.830992][ T9738] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 256.838961][ T9738] RBP: 00007f07e123506b R08: 0000000000000000 R09: 0000000000000000 [ 256.846935][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.854903][ T9738] R13: 00007f07e1426038 R14: 00007f07e1425fa0 R15: 00007ffdf1d280e8 [ 256.862896][ T9738] [ 263.267888][ T9861] fuse: Bad value for 'fd' [ 268.394142][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.407148][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.425450][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.448850][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.461057][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.468530][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.838938][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.023804][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.201402][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.300641][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.993959][ T9956] chnl_net:caif_netlink_parms(): no params data found [ 270.521155][ T5780] Bluetooth: hci4: command tx timeout [ 270.629110][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.650324][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.677960][ T9956] bridge_slave_0: entered allmulticast mode [ 270.709769][ T9956] bridge_slave_0: entered promiscuous mode [ 270.792169][ T9956] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.816992][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.829755][ T9956] bridge_slave_1: entered allmulticast mode [ 270.837440][ T9956] bridge_slave_1: entered promiscuous mode [ 271.201716][ T9956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.302330][ T9956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.506461][ T9956] team0: Port device team_slave_0 added [ 271.626461][ T9956] team0: Port device team_slave_1 added [ 271.856693][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.866100][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.887230][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.913278][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.935991][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.945809][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.049559][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.056554][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.137176][ T9956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.170579][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.190680][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.237976][ T9956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.539286][ T49] hsr_slave_0: left promiscuous mode [ 272.545460][ T49] hsr_slave_1: left promiscuous mode [ 272.596236][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.604176][ T5780] Bluetooth: hci4: command tx timeout [ 272.613781][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.675355][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.718115][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.743958][ T49] bridge_slave_1: left allmulticast mode [ 272.750962][ T49] bridge_slave_1: left promiscuous mode [ 272.756745][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.814401][ T49] bridge_slave_0: left allmulticast mode [ 272.834246][ T49] bridge_slave_0: left promiscuous mode [ 272.859949][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.968964][ T49] veth1_macvtap: left promiscuous mode [ 272.974556][ T49] veth0_macvtap: left promiscuous mode [ 272.998899][ T49] veth1_vlan: left promiscuous mode [ 273.004283][ T49] veth0_vlan: left promiscuous mode [ 273.319064][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.331068][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.344426][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.361675][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.377954][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.388172][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.043789][ T5776] Bluetooth: hci0: command tx timeout [ 274.077129][ T49] team0 (unregistering): Port device team_slave_1 removed [ 274.147364][ T49] team0 (unregistering): Port device team_slave_0 removed [ 274.227953][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.287288][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.692805][ T5776] Bluetooth: hci4: command tx timeout [ 274.720409][ T49] bond0 (unregistering): Released all slaves [ 274.932304][ T9956] hsr_slave_0: entered promiscuous mode [ 274.967744][ T9956] hsr_slave_1: entered promiscuous mode [ 274.980925][ T9956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.001500][ T9956] Cannot create hsr debugfs directory [ 275.479037][ T5776] Bluetooth: hci2: command tx timeout [ 276.118959][ T5776] Bluetooth: hci0: command tx timeout [ 276.130198][T10044] chnl_net:caif_netlink_parms(): no params data found [ 276.587398][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.705548][T10077] chnl_net:caif_netlink_parms(): no params data found [ 276.760100][ T5776] Bluetooth: hci4: command tx timeout [ 276.822002][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.941753][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.972956][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.988652][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.995929][T10044] bridge_slave_0: entered allmulticast mode [ 277.022457][T10044] bridge_slave_0: entered promiscuous mode [ 277.053002][T10044] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.060512][T10044] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.067729][T10044] bridge_slave_1: entered allmulticast mode [ 277.082725][T10044] bridge_slave_1: entered promiscuous mode [ 277.130561][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.313059][T10044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.394226][ T9956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.483335][ T9956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.510439][T10044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.560020][ T5776] Bluetooth: hci2: command tx timeout [ 277.561302][T10077] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.586765][T10077] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.608617][T10077] bridge_slave_0: entered allmulticast mode [ 277.616066][T10077] bridge_slave_0: entered promiscuous mode [ 277.629261][ T9956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.668899][T10077] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.676105][T10077] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.688922][T10077] bridge_slave_1: entered allmulticast mode [ 277.696190][T10077] bridge_slave_1: entered promiscuous mode [ 277.744342][ T9956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.765374][T10044] team0: Port device team_slave_0 added [ 277.788142][T10044] team0: Port device team_slave_1 added [ 277.840853][T10077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.921483][T10077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.009642][T10044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.016645][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.075846][T10044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.195592][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.206711][ T5776] Bluetooth: hci0: command tx timeout [ 278.245891][T10044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.254124][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.283257][T10044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.318024][T10077] team0: Port device team_slave_0 added [ 278.375659][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.428858][T10077] team0: Port device team_slave_1 added [ 278.457243][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.506025][T10044] hsr_slave_0: entered promiscuous mode [ 278.516621][T10044] hsr_slave_1: entered promiscuous mode [ 278.523739][T10044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.534916][T10044] Cannot create hsr debugfs directory [ 278.564583][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.593532][T10077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.601875][T10077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.632746][T10077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.646313][T10077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.653505][T10077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.681987][T10077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.836285][T10077] hsr_slave_0: entered promiscuous mode [ 278.851230][T10077] hsr_slave_1: entered promiscuous mode [ 278.857648][T10077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.875482][T10077] Cannot create hsr debugfs directory [ 279.301975][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.638751][ T5776] Bluetooth: hci2: command tx timeout [ 279.638887][ T9956] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.847739][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.854917][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.924316][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.931501][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.288625][ T5776] Bluetooth: hci0: command tx timeout [ 280.522044][ T9956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.713279][T10044] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 280.739253][T10044] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 280.775694][ T49] hsr_slave_0: left promiscuous mode [ 280.785890][ T49] hsr_slave_1: left promiscuous mode [ 280.793523][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.801258][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.809474][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.816887][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.825000][ T49] bridge_slave_1: left allmulticast mode [ 280.831454][ T49] bridge_slave_1: left promiscuous mode [ 280.837298][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.846315][ T49] bridge_slave_0: left allmulticast mode [ 280.852273][ T49] bridge_slave_0: left promiscuous mode [ 280.857924][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.870601][ T49] hsr_slave_0: left promiscuous mode [ 280.876374][ T49] hsr_slave_1: left promiscuous mode [ 280.884163][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.892254][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.900330][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.907766][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.915790][ T49] bridge_slave_1: left allmulticast mode [ 280.921660][ T49] bridge_slave_1: left promiscuous mode [ 280.927518][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.936470][ T49] bridge_slave_0: left allmulticast mode [ 280.942548][ T49] bridge_slave_0: left promiscuous mode [ 280.948205][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.980046][ T49] veth1_macvtap: left promiscuous mode [ 280.985583][ T49] veth0_macvtap: left promiscuous mode [ 280.991669][ T49] veth1_vlan: left promiscuous mode [ 280.996964][ T49] veth0_vlan: left promiscuous mode [ 281.005185][ T49] veth1_macvtap: left promiscuous mode [ 281.010967][ T49] veth0_macvtap: left promiscuous mode [ 281.016509][ T49] veth1_vlan: left promiscuous mode [ 281.021971][ T49] veth0_vlan: left promiscuous mode [ 281.654377][ T49] team0 (unregistering): Port device team_slave_1 removed [ 281.693228][ T49] team0 (unregistering): Port device team_slave_0 removed [ 281.732059][ T5776] Bluetooth: hci2: command tx timeout [ 281.739326][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.777664][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.067608][ T49] bond0 (unregistering): Released all slaves [ 282.559123][ T49] team0 (unregistering): Port device team_slave_1 removed [ 282.597016][ T49] team0 (unregistering): Port device team_slave_0 removed [ 282.638248][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.677893][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.957766][ T49] bond0 (unregistering): Released all slaves [ 283.042892][T10044] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 283.052640][T10044] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 283.191892][T10077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.213418][T10077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.232104][T10077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.254081][T10077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 283.384134][ T9956] veth0_vlan: entered promiscuous mode [ 283.424208][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.457502][ T9956] veth1_vlan: entered promiscuous mode [ 283.493442][T10044] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.575164][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.582315][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.595882][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.603047][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.644322][ T9956] veth0_macvtap: entered promiscuous mode [ 283.653277][ T9956] veth1_macvtap: entered promiscuous mode [ 283.699822][T10077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.727521][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.739631][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.751175][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.776924][T10077] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.801031][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.812879][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.823794][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.834516][ T9956] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.844528][ T9956] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.854060][ T9956] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.862994][ T9956] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.902927][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.910112][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.936227][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.943461][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.125403][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.153241][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.239055][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.246925][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.335302][T10044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.474337][T10077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.625273][T10077] veth0_vlan: entered promiscuous mode [ 284.661144][T10077] veth1_vlan: entered promiscuous mode [ 284.742573][T10077] veth0_macvtap: entered promiscuous mode [ 284.766851][T10077] veth1_macvtap: entered promiscuous mode [ 284.811118][T10077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.834104][T10077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.854222][T10077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.865199][T10077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.877673][T10077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.913878][T10077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.926382][T10077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.936892][T10077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.952342][T10077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.966042][T10077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.001627][T10077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.011295][T10077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.022089][T10077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.034722][T10077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.161866][T10044] veth0_vlan: entered promiscuous mode [ 285.215029][T10044] veth1_vlan: entered promiscuous mode [ 285.262905][T10255] loop4: detected capacity change from 0 to 128 [ 285.370714][T10044] veth0_macvtap: entered promiscuous mode [ 285.381940][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.401335][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.426453][T10044] veth1_macvtap: entered promiscuous mode [ 285.466368][ T9956] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 285.499407][ T9956] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 285.516441][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.532144][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.543498][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.554833][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.565784][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.576515][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.590179][T10044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.607690][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.612922][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.626974][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.631659][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.648108][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.658885][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.668771][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.679652][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.691406][T10044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.789851][T10044] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.822596][T10044] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.831894][T10044] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.863363][T10044] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.141716][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.165998][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.236854][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.272508][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.736658][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.747624][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.755842][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.771221][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.787998][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.796477][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.005280][T10333] FAULT_INJECTION: forcing a failure. [ 288.005280][T10333] name fail_futex, interval 1, probability 0, space 0, times 0 [ 288.049494][T10333] CPU: 1 PID: 10333 Comm: syz.3.943 Not tainted syzkaller #0 [ 288.056930][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.067008][T10333] Call Trace: [ 288.070309][T10333] [ 288.073357][T10333] dump_stack_lvl+0x18c/0x250 [ 288.078064][T10333] ? show_regs_print_info+0x20/0x20 [ 288.083289][T10333] ? load_image+0x420/0x420 [ 288.087822][T10333] ? __lock_acquire+0x1336/0x7d80 [ 288.092884][T10333] should_fail_ex+0x394/0x4c0 [ 288.097592][T10333] get_futex_key+0x16f/0x1030 [ 288.102299][T10333] ? futex_setup_timer+0xc0/0xc0 [ 288.107311][T10333] futex_wake+0x127/0x4f0 [ 288.111682][T10333] ? futex_wake_mark+0x150/0x150 [ 288.116653][T10333] do_futex+0x35d/0x3e0 [ 288.120829][T10333] ? __might_fault+0xaa/0x120 [ 288.125526][T10333] ? __ia32_sys_get_robust_list+0x110/0x110 [ 288.131447][T10333] ? __might_fault+0xc6/0x120 [ 288.136146][T10333] mm_release+0x184/0x3a0 [ 288.140498][T10333] ? exit_mm_release+0x30/0x30 [ 288.145285][T10333] ? lockdep_hardirqs_on+0x98/0x150 [ 288.150521][T10333] exit_mm+0xa4/0x340 [ 288.154530][T10333] ? sysctl_delayacct+0x220/0x220 [ 288.159573][T10333] ? do_exit+0x2530/0x2530 [ 288.164019][T10333] do_exit+0x909/0x2530 [ 288.168209][T10333] ? put_task_struct+0xc0/0xc0 [ 288.173352][T10333] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 288.179454][T10333] ? get_signal+0x100e/0x1390 [ 288.184160][T10333] ? lock_chain_count+0x20/0x20 [ 288.189039][T10333] ? _raw_spin_lock_irq+0xbb/0xf0 [ 288.194093][T10333] do_group_exit+0x22d/0x2f0 [ 288.198707][T10333] ? lockdep_hardirqs_on+0x98/0x150 [ 288.203917][T10333] get_signal+0x12a6/0x1390 [ 288.208438][T10333] arch_do_signal_or_restart+0xc2/0x7b0 [ 288.214028][T10333] ? __ia32_sys_get_robust_list+0x110/0x110 [ 288.219920][T10333] ? get_sigframe_size+0x20/0x20 [ 288.224855][T10333] ? rawv6_setsockopt+0x276/0x5d0 [ 288.229898][T10333] ? exit_to_user_mode_loop+0x3b/0x110 [ 288.235397][T10333] exit_to_user_mode_loop+0x70/0x110 [ 288.240720][T10333] exit_to_user_mode_prepare+0xee/0x180 [ 288.246296][T10333] syscall_exit_to_user_mode+0x1a/0x50 [ 288.251777][T10333] do_syscall_64+0x61/0xb0 [ 288.256212][T10333] ? clear_bhb_loop+0x40/0x90 [ 288.260908][T10333] ? clear_bhb_loop+0x40/0x90 [ 288.265610][T10333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.271529][T10333] RIP: 0033:0x7fd49219e159 [ 288.275986][T10333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.295619][T10333] RSP: 002b:00007fd4931300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 288.304062][T10333] RAX: fffffffffffffe00 RBX: 00007fd492425fa8 RCX: 00007fd49219e159 [ 288.311889][T10323] chnl_net:caif_netlink_parms(): no params data found [ 288.312038][T10333] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd492425fa8 [ 288.326819][T10333] RBP: 00007fd492425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 288.334811][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.342954][T10333] R13: 00007fd492426038 R14: 00007ffc820286b0 R15: 00007ffc82028798 [ 288.350966][T10333] [ 288.631592][T10323] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.654201][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.683074][T10323] bridge_slave_0: entered allmulticast mode [ 288.700110][T10323] bridge_slave_0: entered promiscuous mode [ 288.735751][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.757656][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.767858][T10356] FAULT_INJECTION: forcing a failure. [ 288.767858][T10356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.768028][T10323] bridge_slave_1: entered allmulticast mode [ 288.794409][T10323] bridge_slave_1: entered promiscuous mode [ 288.837555][T10356] CPU: 1 PID: 10356 Comm: syz.3.948 Not tainted syzkaller #0 [ 288.844992][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.855342][T10356] Call Trace: [ 288.855585][T10323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.858622][T10356] [ 288.858633][T10356] dump_stack_lvl+0x18c/0x250 [ 288.858665][T10356] ? show_regs_print_info+0x20/0x20 [ 288.858689][T10356] ? load_image+0x420/0x420 [ 288.858713][T10356] ? __might_fault+0xaa/0x120 [ 288.858733][T10356] ? __lock_acquire+0x7d80/0x7d80 [ 288.858757][T10356] should_fail_ex+0x394/0x4c0 [ 288.858786][T10356] _copy_from_user+0x2f/0xe0 [ 288.876750][T10323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.880646][T10356] do_semtimedop+0x234/0x380 [ 288.880685][T10356] ? ksys_semtimedop+0x160/0x160 [ 288.880708][T10356] ? vfs_write+0x5de/0x9a0 [ 288.880766][T10356] ? lockdep_hardirqs_on+0x98/0x150 [ 288.932438][T10356] do_syscall_64+0x55/0xb0 [ 288.936904][T10356] ? clear_bhb_loop+0x40/0x90 [ 288.941615][T10356] ? clear_bhb_loop+0x40/0x90 [ 288.946305][T10356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.952203][T10356] RIP: 0033:0x7fd49219e159 [ 288.956620][T10356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.976231][T10356] RSP: 002b:00007fd493130028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 288.984649][T10356] RAX: ffffffffffffffda RBX: 00007fd492425fa0 RCX: 00007fd49219e159 [ 288.992618][T10356] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000000 [ 289.000593][T10356] RBP: 00007fd49223506b R08: 0000000000000000 R09: 0000000000000000 [ 289.008573][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.016560][T10356] R13: 00007fd492426038 R14: 00007fd492425fa0 R15: 00007ffc82028798 [ 289.024562][T10356] [ 289.067987][T10323] team0: Port device team_slave_0 added [ 289.096627][T10323] team0: Port device team_slave_1 added [ 289.183394][T10323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.205310][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.285139][T10323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.352052][T10323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.376607][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.468023][T10323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.658728][T10323] hsr_slave_0: entered promiscuous mode [ 289.676375][T10323] hsr_slave_1: entered promiscuous mode [ 289.691469][T10323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.716946][T10323] Cannot create hsr debugfs directory [ 289.878472][ T5780] Bluetooth: hci3: command tx timeout [ 289.899355][ T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.048530][ T65] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.165720][ T65] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.315470][ T65] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.814619][T10440] netlink: 996 bytes leftover after parsing attributes in process `syz.8.968'. [ 291.959013][ T5780] Bluetooth: hci3: command tx timeout [ 292.375856][T10323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.492785][T10323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.568764][T10323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.591675][T10323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.931309][ T65] hsr_slave_0: left promiscuous mode [ 292.952326][ T65] hsr_slave_1: left promiscuous mode [ 292.970512][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.977965][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.003194][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.019566][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.039052][ T65] bridge_slave_1: left allmulticast mode [ 293.058918][ T65] bridge_slave_1: left promiscuous mode [ 293.064702][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.089506][ T65] bridge_slave_0: left allmulticast mode [ 293.098853][ T65] bridge_slave_0: left promiscuous mode [ 293.104677][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.143166][ T65] veth1_macvtap: left promiscuous mode [ 293.155226][ T65] veth0_macvtap: left promiscuous mode [ 293.169703][ T65] veth1_vlan: left promiscuous mode [ 293.175210][ T65] veth0_vlan: left promiscuous mode [ 293.991686][ T65] team0 (unregistering): Port device team_slave_1 removed [ 294.031586][ T65] team0 (unregistering): Port device team_slave_0 removed [ 294.039623][ T5780] Bluetooth: hci3: command tx timeout [ 294.079905][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.121595][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.412658][ T65] bond0 (unregistering): Released all slaves [ 294.537899][T10323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.580766][T10323] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.620080][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.627267][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.681534][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.688748][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.792164][T10323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.075736][T10323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.156477][T10323] veth0_vlan: entered promiscuous mode [ 295.203251][T10323] veth1_vlan: entered promiscuous mode [ 295.244918][T10323] veth0_macvtap: entered promiscuous mode [ 295.276790][T10323] veth1_macvtap: entered promiscuous mode [ 295.302141][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.321441][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.335297][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.349659][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.364352][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.376704][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.393879][T10323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.418288][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.432921][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.444431][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.461205][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.474257][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.485344][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.497398][T10323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.520859][T10323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.532954][T10323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.543998][T10323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.554283][T10323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.682404][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.697915][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.753268][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.761788][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.118516][ T5780] Bluetooth: hci3: command tx timeout [ 317.326831][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.333230][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.763303][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.771467][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.209275][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 396.209333][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 411.558558][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 440.207704][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.214115][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.278626][ T29] INFO: task jbd2/sda1-8:5103 blocked for more than 143 seconds. [ 454.286884][ T29] Not tainted syzkaller #0 [ 454.292798][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.301592][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5103 ppid:2 flags:0x00004000 [ 454.310879][ T29] Call Trace: [ 454.314252][ T29] [ 454.317173][ T29] __schedule+0x15ae/0x4660 [ 454.322016][ T29] ? asan.module_dtor+0x20/0x20 [ 454.326908][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 454.332052][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 454.337983][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 454.343273][ T29] schedule+0xbd/0x170 [ 454.347355][ T29] io_schedule+0x80/0xd0 [ 454.351703][ T29] bit_wait_io+0x11/0xd0 [ 454.355950][ T29] __wait_on_bit+0x9f/0x2c0 [ 454.360615][ T29] ? bit_wait+0xd0/0xd0 [ 454.364784][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 454.370586][ T29] ? bit_wait+0xd0/0xd0 [ 454.374758][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 454.379767][ T29] ? do_raw_write_lock+0x11e/0x260 [ 454.384910][ T29] ? bit_waitqueue+0x30/0x30 [ 454.390499][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 454.396097][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 454.402567][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 454.409425][ T29] ? lock_chain_count+0x20/0x20 [ 454.414294][ T29] ? _raw_spin_unlock+0x40/0x40 [ 454.419222][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 454.424877][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 454.430233][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 454.435264][ T29] ? timer_delete_sync+0x20/0x20 [ 454.440389][ T29] ? do_raw_read_unlock+0x80/0x80 [ 454.445427][ T29] ? prepare_to_wait+0x1aa/0x200 [ 454.450464][ T29] kjournald2+0x40f/0x810 [ 454.454888][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 454.460181][ T29] ? wake_bit_function+0x200/0x200 [ 454.465312][ T29] ? _raw_spin_unlock+0x40/0x40 [ 454.470247][ T29] ? __kthread_parkme+0x71/0x1c0 [ 454.475234][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 454.480488][ T29] kthread+0x2fa/0x390 [ 454.484578][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 454.489821][ T29] ? kthread_blkcg+0xd0/0xd0 [ 454.495276][ T29] ret_from_fork+0x48/0x80 [ 454.499827][ T29] ? kthread_blkcg+0xd0/0xd0 [ 454.504443][ T29] ret_from_fork_asm+0x11/0x20 [ 454.509304][ T29] [ 454.512357][ T29] INFO: task syz-executor:5758 blocked for more than 143 seconds. [ 454.520303][ T29] Not tainted syzkaller #0 [ 454.525288][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.533992][ T29] task:syz-executor state:D stack:22888 pid:5758 ppid:5757 flags:0x00004002 [ 454.543304][ T29] Call Trace: [ 454.546619][ T29] [ 454.549649][ T29] __schedule+0x15ae/0x4660 [ 454.554188][ T29] ? mark_lock+0x94/0x320 [ 454.558653][ T29] ? asan.module_dtor+0x20/0x20 [ 454.563526][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 454.568628][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 454.574537][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 454.579837][ T29] schedule+0xbd/0x170 [ 454.583927][ T29] io_schedule+0x80/0xd0 [ 454.588180][ T29] bit_wait_io+0x11/0xd0 [ 454.592649][ T29] __wait_on_bit+0x9f/0x2c0 [ 454.597878][ T29] ? bit_wait+0xd0/0xd0 [ 454.602209][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 454.607681][ T29] ? bit_wait+0xd0/0xd0 [ 454.611877][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 454.616645][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 454.621807][ T29] ? bit_waitqueue+0x30/0x30 [ 454.626420][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 454.631740][ T29] do_get_write_access+0x5c9/0xe00 [ 454.636872][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 454.642951][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 454.649210][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 454.655394][ T29] ? __might_sleep+0xe0/0xe0 [ 454.660117][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 454.665680][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 454.671231][ T29] ext4_dirty_inode+0xcb/0x110 [ 454.676013][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 454.681901][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 454.686962][ T29] file_update_time+0x187/0x1a0 [ 454.691901][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 454.696974][ T29] ? do_wp_page+0x4ce/0x34d0 [ 454.702741][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 454.709087][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 454.714139][ T29] do_page_mkwrite+0x153/0x3f0 [ 454.718995][ T29] do_wp_page+0xd4d/0x34d0 [ 454.723463][ T29] ? folio_put+0xd0/0xd0 [ 454.727700][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 454.732825][ T29] ? __rwlock_init+0x150/0x150 [ 454.737604][ T29] handle_mm_fault+0x1306/0x4a50 [ 454.742610][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 454.747583][ T29] ? numa_migrate_prep+0x350/0x350 [ 454.752796][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 454.758095][ T29] do_user_addr_fault+0x736/0x12d0 [ 454.763503][ T29] exc_page_fault+0x64/0x100 [ 454.768130][ T29] ? clear_bhb_loop+0x40/0x90 [ 454.772905][ T29] asm_exc_page_fault+0x26/0x30 [ 454.777778][ T29] RIP: 0033:0x7f0e964701e3 [ 454.782291][ T29] RSP: 002b:00007ffdd6939ec0 EFLAGS: 00010212 [ 454.788430][ T29] RAX: 00007f0e8edfd1e4 RBX: 00007ffdd6939ff0 RCX: 0000000000000000 [ 454.796411][ T29] RDX: 00007f0e8edfd1e0 RSI: 0000000000000008 RDI: 00007ffdd6939ff0 [ 454.805142][ T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 454.813369][ T29] R10: 00007ffdd6939fd0 R11: 0000000000000000 R12: 0000000000000000 [ 454.821415][ T29] R13: 0000000000002e1c R14: ffffffffffffd1e4 R15: 0000000000000000 [ 454.829457][ T29] [ 454.832495][ T29] INFO: task syz.3.974:10459 blocked for more than 143 seconds. [ 454.840239][ T29] Not tainted syzkaller #0 [ 454.845187][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.853926][ T29] task:syz.3.974 state:D stack:27560 pid:10459 ppid:10077 flags:0x00004004 [ 454.863211][ T29] Call Trace: [ 454.866496][ T29] [ 454.869500][ T29] __schedule+0x15ae/0x4660 [ 454.874043][ T29] ? mark_lock+0x94/0x320 [ 454.878446][ T29] ? asan.module_dtor+0x20/0x20 [ 454.883323][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 454.888402][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 454.894322][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 454.899620][ T29] schedule+0xbd/0x170 [ 454.903713][ T29] io_schedule+0x80/0xd0 [ 454.908941][ T29] bit_wait_io+0x11/0xd0 [ 454.913210][ T29] __wait_on_bit+0x9f/0x2c0 [ 454.917721][ T29] ? bit_wait+0xd0/0xd0 [ 454.922263][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 454.927718][ T29] ? bit_wait+0xd0/0xd0 [ 454.931926][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 454.936701][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 454.941925][ T29] ? bit_waitqueue+0x30/0x30 [ 454.946538][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 454.951804][ T29] do_get_write_access+0x5c9/0xe00 [ 454.956954][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 454.963027][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 454.969257][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 454.975405][ T29] ? __might_sleep+0xe0/0xe0 [ 454.980071][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 454.985630][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 454.991241][ T29] ext4_dirty_inode+0xcb/0x110 [ 454.996059][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 455.002026][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 455.007620][ T29] file_update_time+0x187/0x1a0 [ 455.012563][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 455.017596][ T29] ? filemap_fault+0x103c/0x1540 [ 455.022652][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 455.028610][ T29] ? pte_alloc_one+0x3b6/0x540 [ 455.033444][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 455.039780][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 455.044846][ T29] do_page_mkwrite+0x153/0x3f0 [ 455.049704][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 455.054659][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 455.059722][ T29] ? numa_migrate_prep+0x350/0x350 [ 455.064861][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 455.070237][ T29] do_user_addr_fault+0x736/0x12d0 [ 455.075374][ T29] exc_page_fault+0x64/0x100 [ 455.080352][ T29] ? clear_bhb_loop+0x40/0x90 [ 455.085060][ T29] asm_exc_page_fault+0x26/0x30 [ 455.090109][ T29] RIP: 0033:0x7fd49206baa3 [ 455.094534][ T29] RSP: 002b:00007ffc82028900 EFLAGS: 00010246 [ 455.100933][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b31e64000 [ 455.109501][ T29] RDX: 0000001b31e24000 RSI: 0000000000400000 RDI: 00007fd4923e0708 [ 455.117487][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.125500][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 455.133505][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc82028b90 [ 455.141647][ T29] [ 455.144685][ T29] INFO: task syz.8.975:10461 blocked for more than 144 seconds. [ 455.152363][ T29] Not tainted syzkaller #0 [ 455.157304][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.166057][ T29] task:syz.8.975 state:D stack:27624 pid:10461 ppid:6478 flags:0x00004004 [ 455.175344][ T29] Call Trace: [ 455.178843][ T29] [ 455.181796][ T29] __schedule+0x15ae/0x4660 [ 455.186344][ T29] ? mark_lock+0x94/0x320 [ 455.190778][ T29] ? asan.module_dtor+0x20/0x20 [ 455.195634][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 455.200716][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 455.206624][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 455.212656][ T29] schedule+0xbd/0x170 [ 455.216756][ T29] io_schedule+0x80/0xd0 [ 455.221062][ T29] bit_wait_io+0x11/0xd0 [ 455.225315][ T29] __wait_on_bit+0x9f/0x2c0 [ 455.229871][ T29] ? bit_wait+0xd0/0xd0 [ 455.234093][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 455.239976][ T29] ? bit_wait+0xd0/0xd0 [ 455.244159][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 455.248977][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 455.254018][ T29] ? bit_waitqueue+0x30/0x30 [ 455.258670][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 455.263900][ T29] do_get_write_access+0x5c9/0xe00 [ 455.269097][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 455.275095][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 455.281322][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 455.287510][ T29] ? __might_sleep+0xe0/0xe0 [ 455.292187][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 455.297761][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 455.303320][ T29] ext4_dirty_inode+0xcb/0x110 [ 455.308130][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 455.314494][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 455.319832][ T29] file_update_time+0x187/0x1a0 [ 455.324706][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 455.329771][ T29] ? filemap_fault+0x103c/0x1540 [ 455.334726][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 455.340512][ T29] ? pte_alloc_one+0x3b6/0x540 [ 455.345299][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 455.351577][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 455.356615][ T29] do_page_mkwrite+0x153/0x3f0 [ 455.361441][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 455.366395][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 455.371400][ T29] ? numa_migrate_prep+0x350/0x350 [ 455.376555][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 455.381910][ T29] do_user_addr_fault+0x736/0x12d0 [ 455.387054][ T29] exc_page_fault+0x64/0x100 [ 455.391703][ T29] ? clear_bhb_loop+0x40/0x90 [ 455.396403][ T29] asm_exc_page_fault+0x26/0x30 [ 455.401671][ T29] RIP: 0033:0x7fd6fce6baa3 [ 455.406111][ T29] RSP: 002b:00007ffc4c81dfc0 EFLAGS: 00010246 [ 455.412225][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b30664000 [ 455.420952][ T29] RDX: 0000001b30624000 RSI: 0000000000400000 RDI: 00007fd6fd1e0708 [ 455.429231][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.437217][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 455.445243][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc4c81e250 [ 455.453263][ T29] [ 455.456323][ T29] [ 455.456323][ T29] Showing all locks held in the system: [ 455.464096][ T29] 1 lock held by khungtaskd/29: [ 455.468987][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 455.479303][ T29] 3 locks held by kworker/u4:5/77: [ 455.484439][ T29] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 455.494432][ T29] #1: ffffc900020ffd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 455.507671][ T29] #2: ffff8880b8e295d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 455.517118][ T29] 3 locks held by syz-executor/5758: [ 455.522766][ T29] #0: ffff88807ac1a7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 455.532769][ T29] #1: ffff88814dfce510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 455.542712][ T29] #2: ffff88814e0ba990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 455.552416][ T29] 2 locks held by getty/9649: [ 455.557095][ T29] #0: ffff88823bd900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 455.567108][ T29] #1: ffffc9000382b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 455.577279][ T29] 3 locks held by syz.3.974/10459: [ 455.582426][ T29] #0: ffff88807dd35720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 455.592434][ T29] #1: ffff88814dfce510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 455.602239][ T29] #2: ffff88814e0ba990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 455.612011][ T29] 3 locks held by syz.8.975/10461: [ 455.617141][ T29] #0: ffff88807dd34420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 455.627682][ T29] #1: ffff88814dfce510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 455.637680][ T29] #2: ffff88814e0ba990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 455.647413][ T29] [ 455.650021][ T29] ============================================= [ 455.650021][ T29] [ 455.658492][ T29] NMI backtrace for cpu 1 [ 455.662818][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 455.670010][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.680071][ T29] Call Trace: [ 455.683335][ T29] [ 455.686249][ T29] dump_stack_lvl+0x18c/0x250 [ 455.690928][ T29] ? __wake_up_klogd+0xd9/0x100 [ 455.695817][ T29] ? show_regs_print_info+0x20/0x20 [ 455.701010][ T29] ? load_image+0x420/0x420 [ 455.705505][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 455.710448][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 455.716611][ T29] ? load_image+0x420/0x420 [ 455.721105][ T29] ? wq_watchdog_touch+0xef/0x170 [ 455.726134][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 455.732205][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 455.738185][ T29] watchdog+0xf59/0xfa0 [ 455.742340][ T29] ? watchdog+0x1e1/0xfa0 [ 455.746670][ T29] kthread+0x2fa/0x390 [ 455.750730][ T29] ? hungtask_pm_notify+0x50/0x50 [ 455.755772][ T29] ? kthread_blkcg+0xd0/0xd0 [ 455.760354][ T29] ret_from_fork+0x48/0x80 [ 455.764767][ T29] ? kthread_blkcg+0xd0/0xd0 [ 455.769349][ T29] ret_from_fork_asm+0x11/0x20 [ 455.774119][ T29] [ 455.777813][ T29] Sending NMI from CPU 1 to CPUs 0: [ 455.783219][ C0] NMI backtrace for cpu 0 [ 455.783229][ C0] CPU: 0 PID: 2963 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 455.783245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.783254][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 455.783281][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x6d/0xe0 [ 455.783302][ C0] Code: 4c 09 01 48 8b 54 24 20 65 4c 8b 05 9d 27 7c 7e 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 8b 27 7c 7e <41> 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 41 83 b8 24 [ 455.783315][ C0] RSP: 0018:ffffc9000c0972b0 EFLAGS: 00000246 [ 455.783327][ C0] RAX: 0000000000000003 RBX: ffffffff8f10b61b RCX: 0000000000000003 [ 455.783337][ C0] RDX: ffffffff813bc212 RSI: ffffffff8cfa0950 RDI: 0000000000000002 [ 455.783348][ C0] RBP: ffffc9000c097db8 R08: ffff88802bbd9e00 R09: 0000000000000000 [ 455.783358][ C0] R10: 0000000000000002 R11: 0000000080000002 R12: ffffffff8f10b61a [ 455.783368][ C0] R13: ffffc9000c0973a8 R14: 0000000000000002 R15: dffffc0000000000 [ 455.783378][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 455.783390][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.783400][ C0] CR2: 00005601d2660168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 455.783414][ C0] Call Trace: [ 455.783419][ C0] [ 455.783426][ C0] unwind_next_frame+0xe42/0x2990 [ 455.783446][ C0] ? process_scheduled_works+0xa60/0x1600 [ 455.783465][ C0] ? process_scheduled_works+0xa60/0x1600 [ 455.783483][ C0] ? stack_trace_save+0x100/0x100 [ 455.783500][ C0] arch_stack_walk+0x144/0x190 [ 455.783518][ C0] ? process_scheduled_works+0xa60/0x1600 [ 455.783538][ C0] stack_trace_save+0xaa/0x100 [ 455.783563][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 455.783579][ C0] ? mark_lock+0x94/0x320 [ 455.783599][ C0] save_stack+0x125/0x230 [ 455.783615][ C0] ? __reset_page_owner+0x190/0x190 [ 455.783629][ C0] ? seqcount_lockdep_reader_access+0x10a/0x190 [ 455.783645][ C0] ? post_alloc_hook+0x1c1/0x200 [ 455.783664][ C0] ? get_page_from_freelist+0x2181/0x22a0 [ 455.783678][ C0] ? __alloc_pages+0x1f0/0x460 [ 455.783691][ C0] ? alloc_slab_page+0x5d/0x180 [ 455.783705][ C0] ? new_slab+0x87/0x2d0 [ 455.783717][ C0] ? ___slab_alloc+0xc5c/0x12f0 [ 455.783729][ C0] ? kmem_cache_alloc_node+0x12e/0x310 [ 455.783748][ C0] ? __alloc_skb+0x103/0x2c0 [ 455.783765][ C0] ? nsim_dev_trap_report_work+0x253/0xa90 [ 455.783781][ C0] ? process_scheduled_works+0xa60/0x1600 [ 455.783800][ C0] ? get_page_from_freelist+0x67b/0x22a0 [ 455.783815][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 455.783830][ C0] ? do_raw_spin_trylock+0xb2/0x190 [ 455.783851][ C0] __set_page_owner+0x1d/0x60 [ 455.783865][ C0] post_alloc_hook+0x1c1/0x200 [ 455.783887][ C0] get_page_from_freelist+0x2181/0x22a0 [ 455.783905][ C0] ? mark_lock+0x94/0x320 [ 455.783930][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 455.783956][ C0] __alloc_pages+0x1f0/0x460 [ 455.783971][ C0] ? zone_statistics+0x170/0x170 [ 455.783989][ C0] ? alloc_pages+0x4e1/0x740 [ 455.784003][ C0] ? lock_chain_count+0x20/0x20 [ 455.784020][ C0] alloc_slab_page+0x5d/0x180 [ 455.784036][ C0] new_slab+0x87/0x2d0 [ 455.784050][ C0] ___slab_alloc+0xc5c/0x12f0 [ 455.784065][ C0] ? __alloc_skb+0x103/0x2c0 [ 455.784084][ C0] kmem_cache_alloc_node+0x12e/0x310 [ 455.784103][ C0] ? __alloc_skb+0x103/0x2c0 [ 455.784121][ C0] __alloc_skb+0x103/0x2c0 [ 455.784139][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 455.784160][ C0] ? process_scheduled_works+0x975/0x1600 [ 455.784177][ C0] ? process_scheduled_works+0x975/0x1600 [ 455.784196][ C0] process_scheduled_works+0xa60/0x1600 [ 455.784226][ C0] ? worker_attach_to_pool+0x370/0x370 [ 455.784247][ C0] ? assign_work+0x3cc/0x5d0 [ 455.784266][ C0] worker_thread+0xa5e/0xfe0 [ 455.784288][ C0] ? _raw_spin_unlock+0x40/0x40 [ 455.784303][ C0] ? __kthread_parkme+0x71/0x1c0 [ 455.784322][ C0] kthread+0x2fa/0x390 [ 455.784335][ C0] ? pr_cont_work+0x550/0x550 [ 455.784352][ C0] ? kthread_blkcg+0xd0/0xd0 [ 455.784366][ C0] ret_from_fork+0x48/0x80 [ 455.784383][ C0] ? kthread_blkcg+0xd0/0xd0 [ 455.784397][ C0] ret_from_fork_asm+0x11/0x20 [ 455.784423][ C0] [ 456.200640][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 456.207511][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 456.214723][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.224787][ T29] Call Trace: [ 456.228070][ T29] [ 456.230993][ T29] dump_stack_lvl+0x18c/0x250 [ 456.235680][ T29] ? show_regs_print_info+0x20/0x20 [ 456.240877][ T29] ? load_image+0x420/0x420 [ 456.245380][ T29] panic+0x2ca/0x720 [ 456.249272][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 456.253762][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 456.259302][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 456.264676][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 456.270985][ T29] watchdog+0xf98/0xfa0 [ 456.275159][ T29] ? watchdog+0x1e1/0xfa0 [ 456.279514][ T29] kthread+0x2fa/0x390 [ 456.283580][ T29] ? hungtask_pm_notify+0x50/0x50 [ 456.288604][ T29] ? kthread_blkcg+0xd0/0xd0 [ 456.293212][ T29] ret_from_fork+0x48/0x80 [ 456.297643][ T29] ? kthread_blkcg+0xd0/0xd0 [ 456.302227][ T29] ret_from_fork_asm+0x11/0x20 [ 456.306996][ T29] [ 456.310262][ T29] Kernel Offset: disabled [ 456.314634][ T29] Rebooting in 86400 seconds..