last executing test programs: 6m56.80873236s ago: executing program 1 (id=1551): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 6m56.733410692s ago: executing program 0 (id=1552): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000"], 0xfc}}, 0x0) listen(r0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket(0x40000000015, 0x5, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af24bd4d00000004000e10000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) 6m56.639829844s ago: executing program 0 (id=1554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0xa81c0000, 0xfffffffffffffffc}, {0xffffffff, 0x0, 0x8001, 0xa, 0x0, 0x1fdf}]}) 6m56.639578595s ago: executing program 1 (id=1555): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) timer_getoverrun(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) r6 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f0000000100)='-1\x00', 0x2) 6m54.817829777s ago: executing program 1 (id=1556): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc020}, 0x0) 6m54.760785258s ago: executing program 0 (id=1557): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4008030) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001500)={@remote, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x5, 0x30, 0x64, 0x0, 0x1, 0x1, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1a}}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x4, 0x6, {0x5, 0x4, 0x2, 0x36, 0x9, 0x66, 0x2, 0xd7, 0x1d, 0x7ff, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) 6m54.480042005s ago: executing program 0 (id=1561): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 6m54.292167259s ago: executing program 0 (id=1562): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000"], 0xfc}}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket(0x40000000015, 0x5, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af24bd4d00000004000e10000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) 6m53.639934194s ago: executing program 0 (id=1565): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0xa81c0000, 0xfffffffffffffffc}, {0xffffffff, 0x0, 0x8001, 0xa, 0x0, 0x1fdf}]}) 6m53.230550843s ago: executing program 32 (id=1565): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0xa81c0000, 0xfffffffffffffffc}, {0xffffffff, 0x0, 0x8001, 0xa, 0x0, 0x1fdf}]}) 6m52.719578936s ago: executing program 1 (id=1570): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 6m52.483291531s ago: executing program 1 (id=1573): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000"], 0xfc}}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket(0x40000000015, 0x5, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af24bd4d00000004000e10000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) 6m52.192927888s ago: executing program 1 (id=1575): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfff, 0x2c200) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) 6m51.878929735s ago: executing program 33 (id=1575): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfff, 0x2c200) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) 29.311116691s ago: executing program 4 (id=3989): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 28.957780058s ago: executing program 4 (id=3991): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0ef4a1a67710cc1858b70921a690b53817937d15de216d635cc015a500000000000000d8d600"], 0x10}}], 0x1, 0x8044) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/111, 0x6f}, {0x0}], 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec779000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) 27.108469661s ago: executing program 4 (id=3992): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1004}, 0x38) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10}, 0x94) 26.813752468s ago: executing program 4 (id=3995): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc042, 0x34) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffffa1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0xf}}}, 0x84}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 25.690858353s ago: executing program 4 (id=4002): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x629f9000) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r1, 0x25, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000280)={0x0, 0x1, 0x101, 0x80000001}) ftruncate(0xffffffffffffffff, 0x1) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0xffffffca) 23.409256895s ago: executing program 4 (id=4004): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffd22}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r1, 0x57e, 0xead2, 0x11, 0x0, 0x0) 23.409145105s ago: executing program 34 (id=4004): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffd22}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r1, 0x57e, 0xead2, 0x11, 0x0, 0x0) 17.117306889s ago: executing program 6 (id=4007): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000000)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2) 13.14126207s ago: executing program 5 (id=3871): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000240)}, 0x20) 13.061123652s ago: executing program 6 (id=4007): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000000)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2) 10.339472874s ago: executing program 5 (id=3871): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000240)}, 0x20) 10.270995686s ago: executing program 6 (id=4007): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000000)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2) 8.503231266s ago: executing program 3 (id=4037): r0 = fsopen(&(0x7f00000001c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x81) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 8.234426812s ago: executing program 2 (id=4038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000107, 0x0, 0x10000003c04}]}) 8.179555144s ago: executing program 3 (id=4039): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}], 0x21) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x3eb, 0x400, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x1, 0xb2, 0xfffffffa, 0xffff0000, 0x0, 0x2, 0x871}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) 7.980392918s ago: executing program 5 (id=3871): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000240)}, 0x20) 7.952418958s ago: executing program 2 (id=4040): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 6.377783765s ago: executing program 6 (id=4007): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000000)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2) 5.866277456s ago: executing program 2 (id=4041): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x901043, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x4004662b, 0x0) 5.557739873s ago: executing program 2 (id=4042): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) dup(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x703e, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(0xffffffffffffffff) 5.060339165s ago: executing program 5 (id=3871): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000240)}, 0x20) 3.486433731s ago: executing program 6 (id=4007): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000000)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2) 2.876198414s ago: executing program 2 (id=4043): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x40, 0x400) readv(r1, &(0x7f0000005540)=[{&(0x7f00000010c0)=""/267, 0x10b}], 0x1) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 2.865540335s ago: executing program 3 (id=4044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x40010, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) recvmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x2320) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000e80)=0x5aaacdeeeb8c6348) r6 = accept4(r4, 0x0, 0x0, 0x80800) write(r6, &(0x7f0000000040)="cb", 0xfffffdef) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000180)=""/118, 0x76}], 0x1, 0x5c, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7d, 0x76, 0x1, 0x0, 0x0, 0x8, 0x90, 0xc, 0x8, 0x0, '\x00', 0x0, 0x7c}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"8fef3569e8d70dbc4f0d07edc79997de5ca94ea1d6d6122ad9c88f1441216c8570462261d46cd11adc918ef9c21cc59626c549d79562f7148e95b67f4140e43b46252292ec9364f375a97f025b58a6b7a9a36a2f785c64c74c7e5a06729fe4befeecc82f39ee1269746b2b5e00c5723322ecad7dc758c4c9a3bc8c02f98ccc3444762031728fbe7ef0a2d892650239fbd4a57bdb86acdd0af86418e9444409e44943c9ca088e6bf95a27b9197f5295514abef9f18cd61602c52532208fb7be5e3d8290c7a240e8b849b7b9cad03ff17a35dc7f4055e8b17d43ab8ecdee7139f6731733bc7cc7a14b3deb29748b7bec871604abd79632c13c6fd92d8e560bd83111c3630f1d0978f05a1e1541a74e3b62c167cf56e77fa1ac134c62cc53506cbbd85a0eec91d1123784931aadc9c94bb442912155959015ac03b240600d477ae3289bb44885a601653e74feaceafc0271dd3d7a43f7981fcae10bed055062560b98726d55cdd46a6f99b1b777f28b6e140672f1ce084d08e4ec5f99d820430eaad797926bf88ec5434412f5bbf830f6b9896a4cce672fb43487449da264b9ada305663524c731b8e43c40e5e87a2c277b0c5a8fec0f469172b14e33c25d5fd58cb5e2b74c8077ad9b7651ddb74170d69dcda8a1e08451d02d92f36e221c45ab37065f6da1d0a1005306f6a34fddd167628781f2ab7b1f0a4728c611514ad51a369f990d846ecff97acd1921c0dd67e3e1c7ca78e37bf1fc8d819399d6a29bfc76c612c0beae4febb737f68ad199defd64cb692a1c670bc9b3ea5b9f3075d69e6adb971f7f3a9c0743f877780dc0449c999fa6335fda520b4048d14799fc92b3916013a7631a05546ed8e8f8b49ee840b2b4e713442bdfff433729c5f9985f11df5a28d4c53bd968e5757b595bf5e5da346f206e27cef0a254d9fa9137fbdd6b3ddfacfc3861cc222add0746f9fa0b7057477096ad812cf90463974757875feb2667d58ac9da22af05deddac3387cf92f77962607fa4444050570354d7430ea41b14eed9136f43d0c1d06b86d42455407fdd813af34dadacf9b71fe0e794e7b6b0a6504bfb3ae718646fe2df90a4e02765f5998b9a5b85d2be9f0039b0779cc6206457921a2463a945453a5d6a1694163253455316a760cd2e62c5c37943d3d5717bfe26a6e40956079f14cf2bab615eb46e866fb6b1fcd9771c2505ce189876ad5c02b651695342665e5d12eee838f474f92f6a8fe2bbb168bb3ab54c050aa4180cc3d4a4153d1683d651d68ec3e41354707c7d6a5550856b97b6db66a370c802d02469f4ced055e1c8d8a77b33fd4e497b5aeff4d181970435ca0c975b511609c9b5c56382eb9b93b61a0e39e3f674f29958a39217e3069c6477b6cd769579698f0bce590d6a8885624dbe4d073ac82e8560bd4142237758066d0eea8dd2f946"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000002000093010000000700000001000000ffffff7f0600ff"], &(0x7f0000000f40)=""/4089, 0x45, 0xff9, 0x1}, 0x28) 2.496796573s ago: executing program 3 (id=4045): r0 = io_uring_setup(0x68f7, &(0x7f0000000540)={0x0, 0x48ca, 0x80, 0x0, 0xb38}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) sendmsg$inet(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000008c0)='G', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write$9p(r2, &(0x7f0000000500)="c6", 0x1) readv(r1, &(0x7f0000000cc0)=[{&(0x7f0000000b40)=""/195, 0xc3}], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000004, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 2.241500759s ago: executing program 5 (id=3871): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000240)}, 0x20) 2.216016069s ago: executing program 3 (id=4046): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) 925.446339ms ago: executing program 6 (id=4007): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000000)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2) 177.799226ms ago: executing program 2 (id=4047): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0xf, 0xffffffff}) 159.204666ms ago: executing program 3 (id=4048): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0x11, 0x4) 0s ago: executing program 5 (id=3871): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000240)}, 0x20) kernel console output (not intermixed with test programs): 0 [ 332.343087][T11115] do_futex+0x35d/0x3e0 [ 332.347313][T11115] ? __ia32_sys_get_robust_list+0x110/0x110 [ 332.353278][T11115] ? fput+0x154/0x1a0 [ 332.357328][T11115] __se_sys_futex+0x3a9/0x440 [ 332.362082][T11115] ? __x64_sys_futex+0xf0/0xf0 [ 332.366912][T11115] ? __x64_sys_futex+0x21/0xf0 [ 332.371763][T11115] do_syscall_64+0x55/0xb0 [ 332.376255][T11115] ? clear_bhb_loop+0x40/0x90 [ 332.380995][T11115] ? clear_bhb_loop+0x40/0x90 [ 332.385734][T11115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.391699][T11115] RIP: 0033:0x7f111b99e159 [ 332.396171][T11115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.415821][T11115] RSP: 002b:00007f111c88d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 332.424282][T11115] RAX: ffffffffffffffda RBX: 00007f111bc25fa8 RCX: 00007f111b99e159 [ 332.432326][T11115] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f111bc25fac [ 332.440326][T11115] RBP: 00007f111bc25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 332.448326][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.456330][T11115] R13: 00007f111bc26038 R14: 00007ffd4d622010 R15: 00007ffd4d6220f8 [ 332.464347][T11115] [ 332.873784][T11125] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (8) [ 333.599910][T11148] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1889'. [ 334.548276][T11183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1900'. [ 335.331795][T11201] kvm: apic: phys broadcast and lowest prio [ 336.340493][T11234] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1912'. [ 336.918645][T11257] loop3: detected capacity change from 0 to 2048 [ 337.173946][T11257] loop3: unable to read partition table [ 337.199375][T11257] loop3: partition table beyond EOD, truncated [ 337.232114][T11257] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 337.632222][ T5140] loop3: unable to read partition table [ 337.645102][ T5140] loop3: partition table beyond EOD, truncated [ 337.681197][T11261] kvm: apic: phys broadcast and lowest prio [ 338.154224][T11291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1923'. [ 339.361659][T11341] loop2: detected capacity change from 0 to 2048 [ 339.700347][T11354] syzkaller0: entered promiscuous mode [ 339.708101][T11354] syzkaller0: entered allmulticast mode [ 339.898429][T11341] loop2: unable to read partition table [ 339.909097][T11341] loop2: partition table beyond EOD, truncated [ 339.933224][T11341] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 340.825471][T11387] program syz.3.1947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.198814][T11397] ip_tables: iptables: counters copy to user failed while replacing table [ 342.555679][T11443] FAULT_INJECTION: forcing a failure. [ 342.555679][T11443] name failslab, interval 1, probability 0, space 0, times 0 [ 342.598014][T11443] CPU: 0 PID: 11443 Comm: syz.5.1968 Not tainted syzkaller #0 [ 342.605610][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.615722][T11443] Call Trace: [ 342.619074][T11443] [ 342.622108][T11443] dump_stack_lvl+0x18c/0x250 [ 342.626870][T11443] ? show_regs_print_info+0x20/0x20 [ 342.632168][T11443] ? load_image+0x420/0x420 [ 342.636753][T11443] ? __might_sleep+0xe0/0xe0 [ 342.641454][T11443] ? __lock_acquire+0x7eb0/0x7eb0 [ 342.646555][T11443] should_fail_ex+0x394/0x4c0 [ 342.651317][T11443] should_failslab+0x9/0x20 [ 342.655888][T11443] slab_pre_alloc_hook+0x59/0x300 [ 342.660995][T11443] kmem_cache_alloc+0x5a/0x2c0 [ 342.665869][T11443] ? ptlock_alloc+0x20/0x70 [ 342.670441][T11443] ptlock_alloc+0x20/0x70 [ 342.674846][T11443] pte_alloc_one+0xcc/0x540 [ 342.679417][T11443] ? pfn_modify_allowed+0x560/0x560 [ 342.684691][T11443] ? hugepage_vma_check+0x471/0x560 [ 342.689977][T11443] handle_mm_fault+0x2f72/0x4a50 [ 342.694987][T11443] ? handle_mm_fault+0xe6/0x4a50 [ 342.700004][T11443] ? numa_migrate_prep+0x350/0x350 [ 342.705214][T11443] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 342.710569][T11443] do_user_addr_fault+0x736/0x12d0 [ 342.715767][T11443] exc_page_fault+0x64/0x100 [ 342.720431][T11443] asm_exc_page_fault+0x26/0x30 [ 342.725350][T11443] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 342.731215][T11443] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 342.750887][T11443] RSP: 0018:ffffc90011217d50 EFLAGS: 00050216 [ 342.757060][T11443] RAX: ffffffff84348a01 RBX: 0000000000000020 RCX: 0000000000000020 [ 342.765100][T11443] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90011217e40 [ 342.773145][T11443] RBP: ffffc90011217ed8 R08: ffffc90011217e5f R09: 1ffff92002242fcb [ 342.781179][T11443] R10: dffffc0000000000 R11: fffff52002242fcc R12: 0000000000000020 [ 342.789249][T11443] R13: 1ffff92002242fb8 R14: ffffc90011217e40 R15: 0000000000000000 [ 342.797298][T11443] ? rcuref_put_slowpath+0xc1/0x150 [ 342.802582][T11443] _copy_from_user+0x8b/0xe0 [ 342.807237][T11443] do_fcntl+0x856/0x14a0 [ 342.811557][T11443] ? kill_fasync+0x4b0/0x4b0 [ 342.816213][T11443] ? __fget_files+0x28/0x460 [ 342.820877][T11443] ? __fget_files+0x3fc/0x460 [ 342.825647][T11443] ? tomoyo_file_fcntl+0x7b/0x220 [ 342.830744][T11443] ? bpf_lsm_file_fcntl+0x9/0x10 [ 342.835749][T11443] ? security_file_fcntl+0x80/0xa0 [ 342.840959][T11443] __se_sys_fcntl+0xc9/0x1a0 [ 342.845636][T11443] do_syscall_64+0x55/0xb0 [ 342.850122][T11443] ? clear_bhb_loop+0x40/0x90 [ 342.854864][T11443] ? clear_bhb_loop+0x40/0x90 [ 342.859612][T11443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.865592][T11443] RIP: 0033:0x7f111b99e159 [ 342.870076][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.889744][T11443] RSP: 002b:00007f111c88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 342.898225][T11443] RAX: ffffffffffffffda RBX: 00007f111bc25fa0 RCX: 00007f111b99e159 [ 342.906261][T11443] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000004 [ 342.914299][T11443] RBP: 00007f111ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 342.922338][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.930364][T11443] R13: 00007f111bc26038 R14: 00007f111bc25fa0 R15: 00007ffd4d6220f8 [ 342.938427][T11443] [ 344.201062][T11494] kvm: apic: phys broadcast and lowest prio [ 346.149907][ T4539] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.941949][T11481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.530271][T11635] syzkaller0: entered promiscuous mode [ 348.535840][T11635] syzkaller0: entered allmulticast mode [ 348.614815][T11639] fuse: Bad value for 'fd' [ 349.674315][T11687] kvm: emulating exchange as write [ 349.904432][T11694] FAULT_INJECTION: forcing a failure. [ 349.904432][T11694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.933812][T11694] CPU: 1 PID: 11694 Comm: syz.2.2024 Not tainted syzkaller #0 [ 349.941394][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.951514][T11694] Call Trace: [ 349.954976][T11694] [ 349.958223][T11694] dump_stack_lvl+0x18c/0x250 [ 349.963148][T11694] ? show_regs_print_info+0x20/0x20 [ 349.968499][T11694] ? load_image+0x420/0x420 [ 349.973107][T11694] ? __might_fault+0xaa/0x120 [ 349.977963][T11694] ? __lock_acquire+0x7eb0/0x7eb0 [ 349.983090][T11694] should_fail_ex+0x394/0x4c0 [ 349.987884][T11694] _copy_from_user+0x2f/0xe0 [ 349.992537][T11694] restore_altstack+0xaf/0x4e0 [ 349.997413][T11694] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 350.003458][T11694] ? __lock_acquire+0x7eb0/0x7eb0 [ 350.008560][T11694] ? __ia32_sys_sigaltstack+0x2a0/0x2a0 [ 350.014207][T11694] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.019618][T11694] ? lockdep_hardirqs_on+0x98/0x150 [ 350.024896][T11694] __ia32_sys_rt_sigreturn+0x239/0x850 [ 350.030472][T11694] ? x64_setup_rt_frame+0xc30/0xc30 [ 350.035752][T11694] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 350.041805][T11694] ? lock_chain_count+0x20/0x20 [ 350.046761][T11694] ? lockdep_hardirqs_on+0x98/0x150 [ 350.052011][T11694] do_syscall_64+0x55/0xb0 [ 350.056474][T11694] ? clear_bhb_loop+0x40/0x90 [ 350.061318][T11694] ? clear_bhb_loop+0x40/0x90 [ 350.066031][T11694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.072033][T11694] RIP: 0033:0x7f46b033f4d9 [ 350.076534][T11694] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 350.096268][T11694] RSP: 002b:00007f46b12afa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 350.104790][T11694] RAX: ffffffffffffffda RBX: 00007f46b0625fa0 RCX: 00007f46b033f4d9 [ 350.112798][T11694] RDX: 00007f46b12afa80 RSI: 00007f46b12afbb0 RDI: 0000000000000021 [ 350.120804][T11694] RBP: 00007f46b043506b R08: 0000000000000000 R09: 0000000000000000 [ 350.128809][T11694] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 350.136820][T11694] R13: 00007f46b0626038 R14: 00007f46b0625fa0 R15: 00007ffcdb693ca8 [ 350.144850][T11694] [ 351.059688][T11618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.236284][T11726] 9pnet_fd: Insufficient options for proto=fd [ 354.393086][T11862] syzkaller0: entered promiscuous mode [ 354.413875][T11862] syzkaller0: entered allmulticast mode [ 355.320296][T11885] loop3: detected capacity change from 0 to 736 [ 358.443596][T11945] process 'syz.4.2089' launched '/dev/fd/7' with NULL argv: empty string added [ 358.898545][T11970] syzkaller0: entered promiscuous mode [ 358.907817][T11970] syzkaller0: entered allmulticast mode [ 359.309114][T11979] syzkaller0: entered promiscuous mode [ 359.318176][T11987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 359.342448][T11979] syzkaller0: entered allmulticast mode [ 359.807519][T11997] Process accounting resumed [ 360.338912][T12016] kvm: apic: phys broadcast and lowest prio [ 360.818534][T12033] loop4: detected capacity change from 0 to 2048 [ 361.036321][T12033] loop4: unable to read partition table [ 361.046661][T12033] loop4: partition table beyond EOD, truncated [ 361.061277][T12033] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 361.376318][ T5140] loop4: unable to read partition table [ 361.385796][ T5140] loop4: partition table beyond EOD, truncated [ 362.675736][T12052] kvm: apic: phys broadcast and lowest prio [ 363.150825][T12061] loop2: detected capacity change from 0 to 256 [ 363.474319][T12073] loop3: detected capacity change from 0 to 736 [ 363.894606][T12079] syzkaller0: entered promiscuous mode [ 363.910109][T12079] syzkaller0: entered allmulticast mode [ 365.277776][T12113] kvm: apic: phys broadcast and lowest prio [ 367.701051][T12152] overlay: filesystem on ./file0 not supported as upperdir [ 369.970696][T12182] loop3: detected capacity change from 0 to 16 [ 369.991129][T12182] erofs: (device loop3): mounted with root inode @ nid 36. [ 370.429644][T12189] kvm: apic: phys broadcast and lowest prio [ 371.177537][T12208] loop4: detected capacity change from 0 to 16 [ 371.208242][T12208] erofs: (device loop4): mounted with root inode @ nid 36. [ 371.445006][T12213] loop3: detected capacity change from 0 to 16 [ 371.477522][T12213] erofs: (device loop3): mounted with root inode @ nid 36. [ 371.838883][T12229] kvm: apic: phys broadcast and lowest prio [ 372.170388][T12238] loop2: detected capacity change from 0 to 16 [ 372.182632][T12238] erofs: (device loop2): mounted with root inode @ nid 36. [ 372.574229][T12251] FAULT_INJECTION: forcing a failure. [ 372.574229][T12251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.588100][T12251] CPU: 0 PID: 12251 Comm: syz.3.2179 Not tainted syzkaller #0 [ 372.595634][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.605748][T12251] Call Trace: [ 372.609062][T12251] [ 372.612031][T12251] dump_stack_lvl+0x18c/0x250 [ 372.616763][T12251] ? show_regs_print_info+0x20/0x20 [ 372.622003][T12251] ? load_image+0x420/0x420 [ 372.626558][T12251] ? __might_fault+0xaa/0x120 [ 372.631280][T12251] ? __lock_acquire+0x7eb0/0x7eb0 [ 372.636333][T12251] ? __local_bh_enable_ip+0x13a/0x1c0 [ 372.641748][T12251] ? _local_bh_enable+0xa0/0xa0 [ 372.646639][T12251] should_fail_ex+0x394/0x4c0 [ 372.651368][T12251] copy_fpstate_to_sigframe+0xa0c/0xce0 [ 372.657075][T12251] ? copy_fpstate_to_sigframe+0x188/0xce0 [ 372.662840][T12251] ? fpregs_set+0x370/0x370 [ 372.667427][T12251] ? fpu__alloc_mathframe+0xa7/0x120 [ 372.672762][T12251] get_sigframe+0x5de/0x7d0 [ 372.677320][T12251] ? load_gs_index+0x1a0/0x1a0 [ 372.682134][T12251] ? lockdep_hardirqs_on+0x98/0x150 [ 372.687372][T12251] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.693578][T12251] x64_setup_rt_frame+0x164/0xc30 [ 372.698648][T12251] ? _raw_spin_unlock_irq+0x29/0x50 [ 372.703891][T12251] ? _raw_spin_unlock_irq+0x2e/0x50 [ 372.709130][T12251] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 372.715150][T12251] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 372.720745][T12251] ? arch_do_signal_or_restart+0x39b/0x7b0 [ 372.726608][T12251] arch_do_signal_or_restart+0x411/0x7b0 [ 372.732492][T12251] ? get_sigframe_size+0x20/0x20 [ 372.737485][T12251] ? exit_to_user_mode_loop+0x3b/0x110 [ 372.743079][T12251] exit_to_user_mode_loop+0x70/0x110 [ 372.748410][T12251] exit_to_user_mode_prepare+0xee/0x180 [ 372.753998][T12251] syscall_exit_to_user_mode+0x1a/0x50 [ 372.759495][T12251] do_syscall_64+0x61/0xb0 [ 372.763982][T12251] ? clear_bhb_loop+0x40/0x90 [ 372.768714][T12251] ? clear_bhb_loop+0x40/0x90 [ 372.773429][T12251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.779386][T12251] RIP: 0033:0x7f537699e159 [ 372.783849][T12251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.803496][T12251] RSP: 002b:00007f53777d9028 EFLAGS: 00000246 [ 372.809609][T12251] RAX: 0000000000000000 RBX: 00007f5376c25fa0 RCX: 00007f537699e159 [ 372.817615][T12251] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 372.825629][T12251] RBP: 00007f5376a3506b R08: 0000000000000000 R09: 0000000000000000 [ 372.833672][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.841677][T12251] R13: 00007f5376c26038 R14: 00007f5376c25fa0 R15: 00007ffea9ea5cb8 [ 372.849699][T12251] [ 373.648297][T12264] loop4: detected capacity change from 0 to 16 [ 373.678345][T12264] erofs: (device loop4): mounted with root inode @ nid 36. [ 374.613516][T12288] FAULT_INJECTION: forcing a failure. [ 374.613516][T12288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.629127][T12288] CPU: 0 PID: 12288 Comm: syz.4.2192 Not tainted syzkaller #0 [ 374.637212][T12288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.647425][T12288] Call Trace: [ 374.650768][T12288] [ 374.653747][T12288] dump_stack_lvl+0x18c/0x250 [ 374.658777][T12288] ? show_regs_print_info+0x20/0x20 [ 374.664145][T12288] ? load_image+0x420/0x420 [ 374.668741][T12288] ? __might_fault+0xaa/0x120 [ 374.673486][T12288] ? __lock_acquire+0x7eb0/0x7eb0 [ 374.678581][T12288] should_fail_ex+0x394/0x4c0 [ 374.683437][T12288] fpu__restore_sig+0x221/0x1210 [ 374.688549][T12288] ? copy_fpstate_to_sigframe+0xce0/0xce0 [ 374.695401][T12288] ? __lock_acquire+0x7eb0/0x7eb0 [ 374.700845][T12288] ? __might_fault+0xc6/0x120 [ 374.705862][T12288] ? __might_fault+0xaa/0x120 [ 374.710610][T12288] __ia32_sys_rt_sigreturn+0x6d1/0x850 [ 374.716156][T12288] ? x64_setup_rt_frame+0xc30/0xc30 [ 374.722567][T12288] ? lock_chain_count+0x20/0x20 [ 374.727513][T12288] ? lockdep_hardirqs_on+0x98/0x150 [ 374.733589][T12288] do_syscall_64+0x55/0xb0 [ 374.739055][T12288] ? clear_bhb_loop+0x40/0x90 [ 374.743957][T12288] ? clear_bhb_loop+0x40/0x90 [ 374.748789][T12288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.754747][T12288] RIP: 0033:0x7f470919e159 [ 374.759197][T12288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.778861][T12288] RSP: 002b:00007f470a0d0028 EFLAGS: 00000246 [ 374.784970][T12288] RAX: 0000000000000000 RBX: 00007f4709425fa0 RCX: 00007f470919e159 [ 374.793278][T12288] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 374.801288][T12288] RBP: 00007f470923506b R08: 0000000000000000 R09: 0000000000000000 [ 374.810079][T12288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.818177][T12288] R13: 00007f4709426038 R14: 00007f4709425fa0 R15: 00007ffcfedba558 [ 374.826737][T12288] [ 375.448373][T12244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.671342][T12295] loop2: detected capacity change from 0 to 16 [ 375.714139][T12295] erofs: (device loop2): mounted with root inode @ nid 36. [ 376.956547][T12314] FAULT_INJECTION: forcing a failure. [ 376.956547][T12314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.992697][T12314] CPU: 1 PID: 12314 Comm: syz.5.2201 Not tainted syzkaller #0 [ 377.000290][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 377.010412][T12314] Call Trace: [ 377.013770][T12314] [ 377.016735][T12314] dump_stack_lvl+0x18c/0x250 [ 377.021472][T12314] ? show_regs_print_info+0x20/0x20 [ 377.026764][T12314] ? load_image+0x420/0x420 [ 377.031327][T12314] ? __might_fault+0xaa/0x120 [ 377.036065][T12314] ? __lock_acquire+0x7eb0/0x7eb0 [ 377.041269][T12314] should_fail_ex+0x394/0x4c0 [ 377.046101][T12314] fpu__restore_sig+0x221/0x1210 [ 377.051116][T12314] ? copy_fpstate_to_sigframe+0xce0/0xce0 [ 377.056887][T12314] ? __lock_acquire+0x7eb0/0x7eb0 [ 377.061960][T12314] ? __might_fault+0xc6/0x120 [ 377.066672][T12314] ? __might_fault+0xaa/0x120 [ 377.071419][T12314] __ia32_sys_rt_sigreturn+0x6d1/0x850 [ 377.076924][T12314] ? x64_setup_rt_frame+0xc30/0xc30 [ 377.082180][T12314] ? lock_chain_count+0x20/0x20 [ 377.087091][T12314] ? lockdep_hardirqs_on+0x98/0x150 [ 377.092338][T12314] do_syscall_64+0x55/0xb0 [ 377.096822][T12314] ? clear_bhb_loop+0x40/0x90 [ 377.101541][T12314] ? clear_bhb_loop+0x40/0x90 [ 377.106279][T12314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.112215][T12314] RIP: 0033:0x7f111b99e159 [ 377.116663][T12314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.136325][T12314] RSP: 002b:00007f111c88d028 EFLAGS: 00000246 [ 377.142447][T12314] RAX: 0000000000000000 RBX: 00007f111bc25fa0 RCX: 00007f111b99e159 [ 377.150461][T12314] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 377.158520][T12314] RBP: 00007f111ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 377.166538][T12314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.174546][T12314] R13: 00007f111bc26038 R14: 00007f111bc25fa0 R15: 00007ffd4d6220f8 [ 377.182574][T12314] [ 377.201270][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 377.337528][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.366284][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.375981][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.424776][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.433976][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 377.441558][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.632824][T12320] loop2: detected capacity change from 0 to 16 [ 377.691344][T12320] erofs: (device loop2): mounted with root inode @ nid 36. [ 378.172942][T12328] loop5: detected capacity change from 0 to 16 [ 378.252976][T12328] erofs: (device loop5): mounted with root inode @ nid 36. [ 378.320478][T12328] overlayfs: missing 'lowerdir' [ 378.397760][T12316] chnl_net:caif_netlink_parms(): no params data found [ 378.911148][T12316] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.925030][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.933512][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.953898][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.965673][T12316] bridge_slave_0: entered allmulticast mode [ 378.974583][T12316] bridge_slave_0: entered promiscuous mode [ 378.984651][T12316] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.992437][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.019692][T12316] bridge_slave_1: entered allmulticast mode [ 379.026928][T12316] bridge_slave_1: entered promiscuous mode [ 379.206403][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.344171][T12316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.407707][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.446721][T12316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.479671][ T5778] Bluetooth: hci4: command tx timeout [ 379.582013][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.624989][T12316] team0: Port device team_slave_0 added [ 379.655539][T12316] team0: Port device team_slave_1 added [ 379.736339][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.786823][T12349] syzkaller0: entered promiscuous mode [ 379.799333][T12354] loop2: detected capacity change from 0 to 16 [ 379.818109][T12349] syzkaller0: entered allmulticast mode [ 379.836328][T12354] erofs: (device loop2): mounted with root inode @ nid 36. [ 379.884639][T12316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.904153][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.951748][T12316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.039066][T12316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.047765][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.074177][T12316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.264912][T12316] hsr_slave_0: entered promiscuous mode [ 380.290220][T12316] hsr_slave_1: entered promiscuous mode [ 380.306506][T12316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.316111][T12367] loop4: detected capacity change from 0 to 16 [ 380.324000][T12316] Cannot create hsr debugfs directory [ 380.356857][T12367] erofs: (device loop4): mounted with root inode @ nid 36. [ 380.431481][T12367] overlayfs: missing 'lowerdir' [ 381.559686][ T5778] Bluetooth: hci4: command tx timeout [ 381.816453][T12397] syzkaller0: entered promiscuous mode [ 381.848394][T12397] syzkaller0: entered allmulticast mode [ 382.025725][T12410] loop4: detected capacity change from 0 to 16 [ 382.070220][T12410] erofs: (device loop4): mounted with root inode @ nid 36. [ 382.111984][T12410] overlayfs: missing 'lowerdir' [ 382.146016][T12412] loop2: detected capacity change from 0 to 164 [ 382.201239][T10181] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 382.248672][T12412] loop2: detected capacity change from 0 to 512 [ 382.255657][T10181] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 382.289223][T10181] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.306461][T12412] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 382.311643][T10181] Buffer I/O error on dev loop2, logical block 0, async page read [ 382.740098][T12316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 382.797877][T12316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 382.860568][T12316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 382.885184][T12431] FAULT_INJECTION: forcing a failure. [ 382.885184][T12431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.909986][T12431] CPU: 1 PID: 12431 Comm: syz.5.2229 Not tainted syzkaller #0 [ 382.917553][T12431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.927804][T12431] Call Trace: [ 382.931475][T12431] [ 382.934473][T12431] dump_stack_lvl+0x18c/0x250 [ 382.939774][T12431] ? show_regs_print_info+0x20/0x20 [ 382.945227][T12431] ? load_image+0x420/0x420 [ 382.949894][T12431] ? __might_fault+0xaa/0x120 [ 382.954951][T12431] ? __lock_acquire+0x7eb0/0x7eb0 [ 382.960270][T12431] should_fail_ex+0x394/0x4c0 [ 382.965233][T12431] _copy_from_user+0x2f/0xe0 [ 382.969916][T12431] udp_lib_setsockopt+0x200/0x8a0 [ 382.975302][T12431] ? udp_destroy_sock+0x2b0/0x2b0 [ 382.980587][T12431] ? __fget_files+0x28/0x460 [ 382.985405][T12431] udpv6_setsockopt+0x77/0xb0 [ 382.990254][T12431] ? udp_v6_send_skb+0x1810/0x1810 [ 382.995439][T12431] ? sock_common_recvmsg+0x190/0x190 [ 383.001432][T12431] do_sock_setsockopt+0x175/0x1a0 [ 383.007254][T12431] ? __fdget+0x180/0x210 [ 383.011798][T12431] __x64_sys_setsockopt+0x182/0x200 [ 383.017375][T12431] do_syscall_64+0x55/0xb0 [ 383.022829][T12431] ? clear_bhb_loop+0x40/0x90 [ 383.027847][T12431] ? clear_bhb_loop+0x40/0x90 [ 383.033886][T12431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.040849][T12431] RIP: 0033:0x7f111b99e159 [ 383.046330][T12431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.069812][T12431] RSP: 002b:00007f111c88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.079106][T12431] RAX: ffffffffffffffda RBX: 00007f111bc25fa0 RCX: 00007f111b99e159 [ 383.087580][T12431] RDX: 0000000000000067 RSI: 0000000000000011 RDI: 0000000000000005 [ 383.096881][T12431] RBP: 00007f111ba3506b R08: 0000000000000004 R09: 0000000000000000 [ 383.106963][T12431] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 383.117101][T12431] R13: 00007f111bc26038 R14: 00007f111bc25fa0 R15: 00007ffd4d6220f8 [ 383.126185][T12431] [ 383.192845][T12316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.233408][T12434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2230'. [ 383.355202][ T59] hsr_slave_0: left promiscuous mode [ 383.385697][ T59] hsr_slave_1: left promiscuous mode [ 383.418226][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.446982][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.490355][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.499086][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.526189][T12442] loop4: detected capacity change from 0 to 16 [ 383.533292][ T59] bridge_slave_1: left allmulticast mode [ 383.533367][ T59] bridge_slave_1: left promiscuous mode [ 383.533860][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.572317][T12442] erofs: (device loop4): mounted with root inode @ nid 36. [ 383.602786][ T59] bridge_slave_0: left allmulticast mode [ 383.609551][ T59] bridge_slave_0: left promiscuous mode [ 383.615892][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.638059][T12442] overlayfs: missing 'lowerdir' [ 383.646512][ T5778] Bluetooth: hci4: command tx timeout [ 383.786367][ T59] veth1_macvtap: left promiscuous mode [ 383.792584][ T59] veth0_macvtap: left promiscuous mode [ 383.810178][ T59] veth1_vlan: left promiscuous mode [ 383.817659][ T59] veth0_vlan: left promiscuous mode [ 384.177747][T12458] loop4: detected capacity change from 0 to 16 [ 384.230383][T12458] erofs: (device loop4): mounted with root inode @ nid 36. [ 384.676465][ T59] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 384.732651][ T59] bond1 (unregistering): Released all slaves [ 384.750772][T12472] kvm: apic: phys broadcast and lowest prio [ 385.728417][ T5778] Bluetooth: hci4: command tx timeout [ 385.777497][ T59] team0 (unregistering): Port device team_slave_1 removed [ 385.845349][ T59] team0 (unregistering): Port device team_slave_0 removed [ 385.941433][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.046943][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.576106][ T59] bond0 (unregistering): Released all slaves [ 386.662535][T12465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2239'. [ 387.014076][T12316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.092527][T12316] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.132667][T11829] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.143195][T11829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.178319][T12497] kvm: apic: phys broadcast and lowest prio [ 387.198916][T12500] loop2: detected capacity change from 0 to 164 [ 387.218499][T11829] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.226962][T11829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.377112][T12316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.839662][T12316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.993463][T12316] veth0_vlan: entered promiscuous mode [ 388.018323][T12516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2254'. [ 388.068835][T12316] veth1_vlan: entered promiscuous mode [ 388.176759][T12316] veth0_macvtap: entered promiscuous mode [ 388.233745][T12316] veth1_macvtap: entered promiscuous mode [ 388.343764][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.373994][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.399617][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.429710][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.461914][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.480526][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.494789][T12316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.508929][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.537174][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.566354][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.594109][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.614302][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.631823][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.652520][T12316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.685267][T12316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.712727][T12316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.738707][T12316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.756132][T12316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.997046][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.026598][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.059246][T12530] kvm: apic: phys broadcast and lowest prio [ 389.129361][T11826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.145898][T11826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.442821][T12545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2262'. [ 389.771907][T12549] FAULT_INJECTION: forcing a failure. [ 389.771907][T12549] name failslab, interval 1, probability 0, space 0, times 0 [ 389.802757][T12549] CPU: 1 PID: 12549 Comm: syz.5.2265 Not tainted syzkaller #0 [ 389.812237][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.823223][T12549] Call Trace: [ 389.826919][T12549] [ 389.829993][T12549] dump_stack_lvl+0x18c/0x250 [ 389.834843][T12549] ? show_regs_print_info+0x20/0x20 [ 389.840826][T12549] ? load_image+0x420/0x420 [ 389.846493][T12549] ? __might_sleep+0xe0/0xe0 [ 389.851882][T12549] ? __lock_acquire+0x7eb0/0x7eb0 [ 389.857012][T12549] should_fail_ex+0x394/0x4c0 [ 389.861971][T12549] should_failslab+0x9/0x20 [ 389.866672][T12549] slab_pre_alloc_hook+0x59/0x300 [ 389.872034][T12549] ? bpf_init_fs_context+0x4f/0xe0 [ 389.878387][T12549] __kmem_cache_alloc_node+0x53/0x250 [ 389.883991][T12549] ? bpf_init_fs_context+0x4f/0xe0 [ 389.889663][T12549] kmalloc_trace+0x2a/0xe0 [ 389.894610][T12549] bpf_init_fs_context+0x4f/0xe0 [ 389.899724][T12549] alloc_fs_context+0x618/0x7a0 [ 389.905330][T12549] __se_sys_fsopen+0xa0/0x2c0 [ 389.911333][T12549] do_syscall_64+0x55/0xb0 [ 389.915922][T12549] ? clear_bhb_loop+0x40/0x90 [ 389.921544][T12549] ? clear_bhb_loop+0x40/0x90 [ 389.927115][T12549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.933098][T12549] RIP: 0033:0x7f111b99e159 [ 389.937755][T12549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.958527][T12549] RSP: 002b:00007f111c88d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 389.968672][T12549] RAX: ffffffffffffffda RBX: 00007f111bc25fa0 RCX: 00007f111b99e159 [ 389.977407][T12549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 389.985661][T12549] RBP: 00007f111ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 389.994145][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.003547][T12549] R13: 00007f111bc26038 R14: 00007f111bc25fa0 R15: 00007ffd4d6220f8 [ 390.013438][T12549] [ 390.255469][T12540] kvm: apic: phys broadcast and lowest prio [ 390.374500][T12561] loop2: detected capacity change from 0 to 736 [ 391.270592][T12577] kvm: apic: phys broadcast and lowest prio [ 391.395234][T12585] kvm: apic: phys broadcast and lowest prio [ 392.266242][T12618] kvm: apic: phys broadcast and lowest prio [ 392.528287][T12625] syzkaller0: entered promiscuous mode [ 392.548115][T12625] syzkaller0: entered allmulticast mode [ 392.621270][T12631] kvm: apic: phys broadcast and lowest prio [ 392.780102][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2293'. [ 393.375224][T12654] kvm: apic: phys broadcast and lowest prio [ 393.773242][T12657] kvm: apic: phys broadcast and lowest prio [ 393.923027][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2304'. [ 394.397895][T12679] FAULT_INJECTION: forcing a failure. [ 394.397895][T12679] name fail_futex, interval 1, probability 0, space 0, times 0 [ 394.429832][T12679] CPU: 1 PID: 12679 Comm: syz.4.2310 Not tainted syzkaller #0 [ 394.439885][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.452184][T12679] Call Trace: [ 394.457492][T12679] [ 394.461285][T12679] dump_stack_lvl+0x18c/0x250 [ 394.467118][T12679] ? lockdep_hardirqs_on+0x98/0x150 [ 394.473058][T12679] ? show_regs_print_info+0x20/0x20 [ 394.480933][T12679] ? load_image+0x420/0x420 [ 394.487965][T12679] ? __schedule+0x15b6/0x4660 [ 394.494218][T12679] should_fail_ex+0x394/0x4c0 [ 394.500132][T12679] get_futex_key+0x136/0x1030 [ 394.508257][T12679] ? futex_setup_timer+0xc0/0xc0 [ 394.515316][T12679] ? futex_wait_queue+0x9d/0x1b0 [ 394.521647][T12679] futex_wait_setup+0xbc/0x270 [ 394.529098][T12679] ? futex_wait_multiple+0x920/0x920 [ 394.536747][T12679] futex_wait+0x1bc/0x5c0 [ 394.542743][T12679] ? futex_setup_timer+0xc0/0xc0 [ 394.548579][T12679] ? futex_wait_setup+0x270/0x270 [ 394.555644][T12679] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 394.562699][T12679] do_futex+0x2ff/0x3e0 [ 394.568673][T12679] ? asm_exc_page_fault+0x26/0x30 [ 394.573898][T12679] ? __ia32_sys_get_robust_list+0x110/0x110 [ 394.580642][T12679] ? strncpy_from_user+0x21e/0x2f0 [ 394.588882][T12679] __se_sys_futex+0x3a9/0x440 [ 394.593837][T12679] ? __x64_sys_futex+0xf0/0xf0 [ 394.599124][T12679] ? __x64_sys_futex+0x21/0xf0 [ 394.604450][T12679] do_syscall_64+0x55/0xb0 [ 394.610530][T12679] ? clear_bhb_loop+0x40/0x90 [ 394.615508][T12679] ? clear_bhb_loop+0x40/0x90 [ 394.621778][T12679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.628433][T12679] RIP: 0033:0x7f470919e159 [ 394.634601][T12679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.659315][T12679] RSP: 002b:00007f470a0d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 394.670998][T12679] RAX: ffffffffffffffda RBX: 00007f4709425fa8 RCX: 00007f470919e159 [ 394.679577][T12679] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4709425fa8 [ 394.691181][T12679] RBP: 00007f4709425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 394.699750][T12679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.708835][T12679] R13: 00007f4709426038 R14: 00007ffcfedba470 R15: 00007ffcfedba558 [ 394.719462][T12679] [ 395.150625][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2313'. [ 395.680659][T12699] kvm: apic: phys broadcast and lowest prio [ 396.063696][T12716] FAULT_INJECTION: forcing a failure. [ 396.063696][T12716] name failslab, interval 1, probability 0, space 0, times 0 [ 396.086320][T12716] CPU: 0 PID: 12716 Comm: syz.5.2322 Not tainted syzkaller #0 [ 396.097169][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.113182][T12716] Call Trace: [ 396.117656][T12716] [ 396.121328][T12716] dump_stack_lvl+0x18c/0x250 [ 396.127740][T12716] ? show_regs_print_info+0x20/0x20 [ 396.133224][T12716] ? load_image+0x420/0x420 [ 396.138575][T12716] ? __might_sleep+0xe0/0xe0 [ 396.144551][T12716] ? __lock_acquire+0x7eb0/0x7eb0 [ 396.152549][T12716] should_fail_ex+0x394/0x4c0 [ 396.163715][T12716] should_failslab+0x9/0x20 [ 396.170305][T12716] slab_pre_alloc_hook+0x59/0x300 [ 396.175979][T12716] ? lockdep_softirqs_off+0x440/0x440 [ 396.181942][T12716] kmem_cache_alloc+0x5a/0x2c0 [ 396.188911][T12716] ? security_inode_alloc+0x34/0x110 [ 396.194444][T12716] security_inode_alloc+0x34/0x110 [ 396.202756][T12716] inode_init_always+0x914/0xc90 [ 396.210918][T12716] new_inode_pseudo+0x95/0x1d0 [ 396.216103][T12716] new_inode+0x22/0x1d0 [ 396.221956][T12716] mqueue_get_inode+0x28/0xbe0 [ 396.228198][T12716] ? do_raw_spin_unlock+0x121/0x230 [ 396.235089][T12716] mqueue_create_attr+0x20e/0x410 [ 396.240511][T12716] ? do_mq_open+0x760/0x760 [ 396.245713][T12716] vfs_mkobj+0xcf/0x240 [ 396.252291][T12716] do_mq_open+0x600/0x760 [ 396.257307][T12716] ? mq_clear_sbinfo+0x90/0x90 [ 396.264824][T12716] ? __might_fault+0xaa/0x120 [ 396.271159][T12716] ? __might_fault+0xc6/0x120 [ 396.278979][T12716] ? __might_fault+0xaa/0x120 [ 396.285676][T12716] __x64_sys_mq_open+0x186/0x1e0 [ 396.293035][T12716] ? proc_ipc_sem_dointvec+0x180/0x180 [ 396.299631][T12716] ? lockdep_hardirqs_on+0x98/0x150 [ 396.305894][T12716] do_syscall_64+0x55/0xb0 [ 396.312129][T12716] ? clear_bhb_loop+0x40/0x90 [ 396.318792][T12716] ? clear_bhb_loop+0x40/0x90 [ 396.326271][T12716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.332840][T12716] RIP: 0033:0x7f111b99e159 [ 396.340403][T12716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.365286][T12716] RSP: 002b:00007f111c88d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 396.377797][T12716] RAX: ffffffffffffffda RBX: 00007f111bc25fa0 RCX: 00007f111b99e159 [ 396.389635][T12716] RDX: 0000000000000030 RSI: 00000000000008c2 RDI: 0000200000000000 [ 396.401771][T12716] RBP: 00007f111ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 396.411123][T12716] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 396.421187][T12716] R13: 00007f111bc26038 R14: 00007f111bc25fa0 R15: 00007ffd4d6220f8 [ 396.430183][T12716] [ 396.461871][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 396.680895][T12722] kvm: apic: phys broadcast and lowest prio [ 397.206632][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2328'. [ 398.034622][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 398.470665][T12774] loop4: detected capacity change from 0 to 256 [ 398.502891][T12774] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.774285][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 399.983200][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 400.563530][T12829] syzkaller0: entered promiscuous mode [ 400.569696][T12829] syzkaller0: entered allmulticast mode [ 400.882096][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2368'. [ 401.483398][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 401.531742][T12857] syzkaller0: entered promiscuous mode [ 401.538854][T12857] syzkaller0: entered allmulticast mode [ 401.902309][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'. [ 402.371335][T12880] loop3: detected capacity change from 0 to 256 [ 402.392483][T12880] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 402.786005][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 404.006267][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'. [ 404.863209][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 405.228888][T12956] kvm: apic: phys broadcast and lowest prio [ 405.904320][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2418'. [ 407.596064][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 407.617407][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 407.643628][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 407.674871][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 407.698078][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 407.708182][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.765072][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2429'. [ 407.834744][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.107477][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.257617][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.313897][ T6032] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.453027][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.689727][T13012] chnl_net:caif_netlink_parms(): no params data found [ 409.165640][T13012] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.189621][T13012] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.203374][T13012] bridge_slave_0: entered allmulticast mode [ 409.214183][T13012] bridge_slave_0: entered promiscuous mode [ 409.229017][T13012] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.238548][T13012] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.254403][T13012] bridge_slave_1: entered allmulticast mode [ 409.267090][T13012] bridge_slave_1: entered promiscuous mode [ 409.525173][T13012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.643418][T13012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.797850][T13012] team0: Port device team_slave_0 added [ 409.806043][ T5778] Bluetooth: hci1: command tx timeout [ 409.821973][T13012] team0: Port device team_slave_1 added [ 409.945090][T13012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.970451][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.016110][T13012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.035125][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2439'. [ 410.110816][T13012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.138849][T13012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.209682][T13012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.497591][T13012] hsr_slave_0: entered promiscuous mode [ 410.528732][T13012] hsr_slave_1: entered promiscuous mode [ 410.551176][T13012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.569657][T13012] Cannot create hsr debugfs directory [ 411.196444][ T59] hsr_slave_0: left promiscuous mode [ 411.204491][ T59] hsr_slave_1: left promiscuous mode [ 411.230007][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.256127][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.281131][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.294295][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.304255][ T59] bridge_slave_1: left allmulticast mode [ 411.324710][ T59] bridge_slave_1: left promiscuous mode [ 411.333267][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.350702][ T59] bridge_slave_0: left allmulticast mode [ 411.358124][ T59] bridge_slave_0: left promiscuous mode [ 411.376115][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.436809][T13087] loop4: detected capacity change from 0 to 736 [ 411.463961][ T59] veth1_macvtap: left promiscuous mode [ 411.474678][ T59] veth0_macvtap: left promiscuous mode [ 411.507499][ T59] veth1_vlan: left promiscuous mode [ 411.532189][ T59] veth0_vlan: left promiscuous mode [ 411.879938][ T5778] Bluetooth: hci1: command tx timeout [ 412.385432][T13103] kvm: apic: phys broadcast and lowest prio [ 413.151586][ T59] team0 (unregistering): Port device team_slave_1 removed [ 413.346326][ T59] team0 (unregistering): Port device team_slave_0 removed [ 413.573758][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.689628][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.898878][T13124] kvm: pic: non byte write [ 413.959717][ T5778] Bluetooth: hci1: command tx timeout [ 414.477253][ T59] bond0 (unregistering): Released all slaves [ 414.641826][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 415.014134][T13136] kvm: apic: phys broadcast and lowest prio [ 415.659062][T13154] syz.5.2462: vmalloc error: size 40960, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 415.750987][T13154] CPU: 0 PID: 13154 Comm: syz.5.2462 Not tainted syzkaller #0 [ 415.770014][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.786488][T13154] Call Trace: [ 415.791722][T13154] [ 415.794833][T13154] dump_stack_lvl+0x18c/0x250 [ 415.799919][T13154] ? show_regs_print_info+0x20/0x20 [ 415.805299][T13154] ? load_image+0x420/0x420 [ 415.810457][T13154] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 415.819295][T13154] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 415.826930][T13154] warn_alloc+0x246/0x340 [ 415.831348][T13154] ? zone_watermark_ok_safe+0x230/0x230 [ 415.838530][T13154] ? mod_memcg_page_state+0x4bd/0x940 [ 415.844395][T13154] __vmalloc_node_range+0x1055/0x1320 [ 415.850282][T13154] ? free_vm_area+0x50/0x50 [ 415.854856][T13154] ? vscnprintf+0x80/0x80 [ 415.860869][T13154] ? alloc_fd+0x590/0x640 [ 415.868612][T13154] ? kvm_dev_ioctl+0x208/0x1810 [ 415.874661][T13154] __vmalloc+0x7a/0x90 [ 415.880653][T13154] ? kvm_dev_ioctl+0x208/0x1810 [ 415.886118][T13154] kvm_dev_ioctl+0x208/0x1810 [ 415.891665][T13154] ? __fget_files+0x28/0x460 [ 415.899293][T13154] ? kvm_resume+0x1e0/0x1e0 [ 415.907328][T13154] ? bpf_lsm_file_ioctl+0x9/0x10 [ 415.913969][T13154] ? security_file_ioctl+0x80/0xa0 [ 415.919860][T13154] ? kvm_resume+0x1e0/0x1e0 [ 415.924809][T13154] __se_sys_ioctl+0xfd/0x170 [ 415.930863][T13154] do_syscall_64+0x55/0xb0 [ 415.935352][T13154] ? clear_bhb_loop+0x40/0x90 [ 415.940484][T13154] ? clear_bhb_loop+0x40/0x90 [ 415.948764][T13154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.959331][T13154] RIP: 0033:0x7f111b99e159 [ 415.964712][T13154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.994468][T13154] RSP: 002b:00007f111c88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.008924][T13154] RAX: ffffffffffffffda RBX: 00007f111bc25fa0 RCX: 00007f111b99e159 [ 416.026336][T13154] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 416.038568][T13154] RBP: 00007f111ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 416.048531][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.061696][T13154] R13: 00007f111bc26038 R14: 00007f111bc25fa0 R15: 00007ffd4d6220f8 [ 416.076589][T13154] [ 416.143395][ T5778] Bluetooth: hci1: command tx timeout [ 416.196886][T13154] Mem-Info: [ 416.249108][T13154] active_anon:6662 inactive_anon:0 isolated_anon:0 [ 416.249108][T13154] active_file:16776 inactive_file:40090 isolated_file:0 [ 416.249108][T13154] unevictable:768 dirty:112 writeback:0 [ 416.249108][T13154] slab_reclaimable:11644 slab_unreclaimable:90803 [ 416.249108][T13154] mapped:24443 shmem:1385 pagetables:656 [ 416.249108][T13154] sec_pagetables:0 bounce:0 [ 416.249108][T13154] kernel_misc_reclaimable:0 [ 416.249108][T13154] free:1346576 free_pcp:7792 free_cma:0 [ 416.374010][T13154] Node 0 active_anon:26648kB inactive_anon:0kB active_file:67104kB inactive_file:160160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97772kB dirty:448kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11052kB pagetables:2624kB sec_pagetables:0kB all_unreclaimable? no [ 416.432818][T13012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.470333][T13012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.481692][T13154] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 416.521615][T13012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.529586][T13154] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.584923][T13012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.661365][T13154] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 416.668030][T13154] Node 0 DMA32 free:1480612kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26508kB inactive_anon:0kB active_file:67104kB inactive_file:159336kB unevictable:1536kB writepending:448kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:11468kB local_pcp:3336kB free_cma:0kB [ 416.735133][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 416.765391][T13154] lowmem_reserve[]: 0 0 0 0 0 [ 416.789621][T13154] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.898616][T13154] lowmem_reserve[]: 0 0 0 0 0 [ 416.920550][T13154] Node 1 Normal free:3890076kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20044kB local_pcp:10600kB free_cma:0kB [ 416.960245][T13012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.029177][T13012] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.040854][T13154] lowmem_reserve[]: 0 0 0 0 0 [ 417.047263][T13154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 417.097625][T11829] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.104441][T13154] Node 0 DMA32: 761*4kB (UME) 874*8kB (UME) 702*16kB (UME) 833*32kB (UME) 602*64kB (UME) 362*128kB [ 417.105413][T11829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.140756][T13154] (UM) 62*256kB (UME) 9*512kB (UM) 14*1024kB (UME) 9*2048kB (M) 316*4096kB (M) = 1480372kB [ 417.171805][T13154] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 417.195223][T11829] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.206474][T11829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.251214][T13154] Node 1 Normal: 97*4kB (UME) 39*8kB (UME) 12*16kB (UM) 75*32kB (UME) 19*64kB (UME) 8*128kB (UE) 2*256kB (UE) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3890076kB [ 417.296198][T13154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.329536][T13154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.393798][T13154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.468306][T13154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.512308][T13154] 58253 total pagecache pages [ 417.557410][T13154] 0 pages in swap cache [ 417.573957][T13154] Free swap = 124472kB [ 417.584125][T13154] Total swap = 124996kB [ 417.596135][T13154] 2097051 pages RAM [ 417.604873][T13154] 0 pages HighMem/MovableOnly [ 417.618194][T13154] 416970 pages reserved [ 417.630901][T13154] 0 pages cma reserved [ 418.715006][T13012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.757664][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 418.984433][T13012] veth0_vlan: entered promiscuous mode [ 419.047547][T13012] veth1_vlan: entered promiscuous mode [ 419.209210][T13012] veth0_macvtap: entered promiscuous mode [ 419.236490][T13012] veth1_macvtap: entered promiscuous mode [ 419.327997][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.369498][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.397224][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.425195][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.440522][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.477033][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.519005][T13012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.571265][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.610540][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.649627][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.690632][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.724835][T13012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.764462][T13012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.801724][T13012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.827859][T13012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.859552][T13012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.909436][T13012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.929552][T13012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.286786][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.319113][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.473362][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.512069][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.817466][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2484'. [ 421.164215][T13267] loop2: detected capacity change from 0 to 256 [ 421.225637][T13267] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 421.630347][T13276] loop2: detected capacity change from 0 to 764 [ 422.336630][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2493'. [ 423.117393][T13320] syzkaller0: entered promiscuous mode [ 423.149512][T13320] syzkaller0: entered allmulticast mode [ 427.038758][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'. [ 427.387996][T13363] fuse: Bad value for 'group_id' [ 427.588941][T13374] FAULT_INJECTION: forcing a failure. [ 427.588941][T13374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.619821][T13374] CPU: 0 PID: 13374 Comm: syz.2.2510 Not tainted syzkaller #0 [ 427.629808][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.643514][T13374] Call Trace: [ 427.648413][T13374] [ 427.652295][T13374] dump_stack_lvl+0x18c/0x250 [ 427.660526][T13374] ? show_regs_print_info+0x20/0x20 [ 427.668435][T13374] ? load_image+0x420/0x420 [ 427.674269][T13374] ? __might_fault+0xaa/0x120 [ 427.679182][T13374] ? __lock_acquire+0x7eb0/0x7eb0 [ 427.687278][T13374] ? __virt_addr_valid+0x10c/0x380 [ 427.693956][T13374] should_fail_ex+0x394/0x4c0 [ 427.701345][T13374] _copy_to_user+0x2f/0xa0 [ 427.705903][T13374] bpf_verifier_vlog+0x5ac/0x840 [ 427.713652][T13374] __btf_verifier_log+0xe3/0x140 [ 427.719516][T13374] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.725838][T13374] ? btf_check_sec_info+0x350/0x350 [ 427.731371][T13374] ? mark_lock+0x94/0x320 [ 427.740222][T13374] __btf_verifier_log_type+0x3c9/0x690 [ 427.747488][T13374] ? sort_r+0x17f5/0x1810 [ 427.754393][T13374] ? btf_int_show+0x2810/0x2810 [ 427.762729][T13374] btf_datasec_check_meta+0x46d/0xb50 [ 427.769376][T13374] btf_check_all_metas+0x371/0xaf0 [ 427.781390][T13374] btf_parse_type_sec+0xfc/0x1960 [ 427.787359][T13374] ? btf_check_sec_info+0x350/0x350 [ 427.795665][T13374] ? __virt_addr_valid+0x10c/0x380 [ 427.802228][T13374] ? btf_verifier_log+0x1a0/0x1a0 [ 427.807450][T13374] ? btf_parse_hdr+0x545/0x700 [ 427.813245][T13374] ? btf_parse_str_sec+0x20d/0x2a0 [ 427.819001][T13374] btf_new_fd+0x440/0x9e0 [ 427.823750][T13374] ? bpf_btf_show_fdinfo+0x80/0x80 [ 427.829818][T13374] ? capable+0x88/0xe0 [ 427.835737][T13374] __sys_bpf+0x670/0x890 [ 427.841054][T13374] ? bpf_link_show_fdinfo+0x560/0x560 [ 427.851161][T13374] ? lock_chain_count+0x20/0x20 [ 427.859772][T13374] __x64_sys_bpf+0x7c/0x90 [ 427.866482][T13374] do_syscall_64+0x55/0xb0 [ 427.872947][T13374] ? clear_bhb_loop+0x40/0x90 [ 427.877906][T13374] ? clear_bhb_loop+0x40/0x90 [ 427.885970][T13374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.892549][T13374] RIP: 0033:0x7f451699e159 [ 427.897615][T13374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.919711][T13374] RSP: 002b:00007f45177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.929791][T13374] RAX: ffffffffffffffda RBX: 00007f4516c25fa0 RCX: 00007f451699e159 [ 427.940649][T13374] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 427.950122][T13374] RBP: 00007f4516a3506b R08: 0000000000000000 R09: 0000000000000000 [ 427.960569][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.974172][T13374] R13: 00007f4516c26038 R14: 00007f4516c25fa0 R15: 00007fff28e0b4f8 [ 427.982589][T13374] [ 428.155249][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'. [ 428.394143][T13387] syzkaller0: entered promiscuous mode [ 428.403635][T13387] syzkaller0: entered allmulticast mode [ 428.927671][T13404] fuse: Bad value for 'group_id' [ 429.366899][T13411] FAULT_INJECTION: forcing a failure. [ 429.366899][T13411] name failslab, interval 1, probability 0, space 0, times 0 [ 429.419822][T13411] CPU: 1 PID: 13411 Comm: syz.2.2521 Not tainted syzkaller #0 [ 429.428351][T13411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.444708][T13411] Call Trace: [ 429.449709][T13411] [ 429.455666][T13411] dump_stack_lvl+0x18c/0x250 [ 429.463766][T13411] ? show_regs_print_info+0x20/0x20 [ 429.473075][T13411] ? load_image+0x420/0x420 [ 429.480612][T13411] ? __might_sleep+0xe0/0xe0 [ 429.490216][T13411] ? __lock_acquire+0x7eb0/0x7eb0 [ 429.495685][T13411] should_fail_ex+0x394/0x4c0 [ 429.502430][T13411] should_failslab+0x9/0x20 [ 429.508067][T13411] slab_pre_alloc_hook+0x59/0x300 [ 429.515449][T13411] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 429.522047][T13411] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 429.530885][T13411] __kmem_cache_alloc_node+0x53/0x250 [ 429.537042][T13411] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 429.543916][T13411] __kmalloc+0xa7/0x240 [ 429.548268][T13411] tomoyo_realpath_from_path+0xe6/0x5c0 [ 429.556283][T13411] ? tomoyo_domain+0xd6/0x120 [ 429.563137][T13411] tomoyo_path_number_perm+0x248/0x5e0 [ 429.569210][T13411] ? tomoyo_path_number_perm+0x217/0x5e0 [ 429.575290][T13411] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 429.583589][T13411] ? futex_wake_mark+0x150/0x150 [ 429.592802][T13411] ? __fget_files+0x28/0x460 [ 429.598744][T13411] security_file_ioctl+0x70/0xa0 [ 429.604283][T13411] __se_sys_ioctl+0x48/0x170 [ 429.612039][T13411] do_syscall_64+0x55/0xb0 [ 429.616768][T13411] ? clear_bhb_loop+0x40/0x90 [ 429.622137][T13411] ? clear_bhb_loop+0x40/0x90 [ 429.628550][T13411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.635179][T13411] RIP: 0033:0x7f451699e159 [ 429.644631][T13411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.675217][T13411] RSP: 002b:00007f45177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.686155][T13411] RAX: ffffffffffffffda RBX: 00007f4516c25fa0 RCX: 00007f451699e159 [ 429.697494][T13411] RDX: 0000000000000000 RSI: 0000000080084504 RDI: 0000000000000004 [ 429.706184][T13411] RBP: 00007f4516a3506b R08: 0000000000000000 R09: 0000000000000000 [ 429.715556][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.726296][T13411] R13: 00007f4516c26038 R14: 00007f4516c25fa0 R15: 00007fff28e0b4f8 [ 429.735759][T13411] [ 429.788283][T13411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.302490][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 432.733702][T13426] syzkaller0: entered promiscuous mode [ 432.755025][T13426] syzkaller0: entered allmulticast mode [ 433.006820][T13431] fuse: Bad value for 'group_id' [ 433.183640][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 437.278043][T13499] netlink: 'syz.2.2544': attribute type 23 has an invalid length. [ 437.966344][T13525] loop3: detected capacity change from 0 to 256 [ 437.984302][T13525] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 440.375052][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.395159][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.455184][T13579] loop4: detected capacity change from 0 to 256 [ 442.532799][T13582] loop5: detected capacity change from 0 to 256 [ 442.571699][T13582] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 442.615019][T13579] FAT-fs (loop4): Directory bread(block 64) failed [ 442.650901][T13579] FAT-fs (loop4): Directory bread(block 65) failed [ 442.658209][T13579] FAT-fs (loop4): Directory bread(block 66) failed [ 442.718884][T13579] FAT-fs (loop4): Directory bread(block 67) failed [ 442.756290][T13579] FAT-fs (loop4): Directory bread(block 68) failed [ 442.784576][T13579] FAT-fs (loop4): Directory bread(block 69) failed [ 442.797559][T13589] FAULT_INJECTION: forcing a failure. [ 442.797559][T13589] name failslab, interval 1, probability 0, space 0, times 0 [ 442.823612][T13579] FAT-fs (loop4): Directory bread(block 70) failed [ 442.834453][T13579] FAT-fs (loop4): Directory bread(block 71) failed [ 442.846562][T13589] CPU: 0 PID: 13589 Comm: syz.2.2565 Not tainted syzkaller #0 [ 442.854858][T13589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.866253][T13589] Call Trace: [ 442.869588][T13589] [ 442.873638][T13589] dump_stack_lvl+0x18c/0x250 [ 442.880208][T13589] ? show_regs_print_info+0x20/0x20 [ 442.886196][T13589] ? load_image+0x420/0x420 [ 442.892080][T13589] ? __might_sleep+0xe0/0xe0 [ 442.896743][T13589] ? __lock_acquire+0x7eb0/0x7eb0 [ 442.902259][T13589] should_fail_ex+0x394/0x4c0 [ 442.907351][T13589] should_failslab+0x9/0x20 [ 442.912671][T13589] slab_pre_alloc_hook+0x59/0x300 [ 442.918562][T13589] ? _raw_spin_unlock_irq+0x2e/0x50 [ 442.924581][T13589] ? alloc_mnt_ns+0xaf/0x3b0 [ 442.929715][T13589] __kmem_cache_alloc_node+0x53/0x250 [ 442.935961][T13589] ? alloc_mnt_ns+0xaf/0x3b0 [ 442.940825][T13589] kmalloc_trace+0x2a/0xe0 [ 442.945601][T13589] alloc_mnt_ns+0xaf/0x3b0 [ 442.950366][T13589] copy_mnt_ns+0xd0/0x8f0 [ 442.956122][T13589] ? create_new_namespaces+0x34/0x700 [ 442.965363][T13589] create_new_namespaces+0xd3/0x700 [ 442.972160][T13589] ? bpf_lsm_capable+0x9/0x10 [ 442.977981][T13589] ? security_capable+0x89/0xb0 [ 442.983546][T13589] unshare_nsproxy_namespaces+0x11a/0x160 [ 442.989631][T13589] ksys_unshare+0x4fa/0x8f0 [ 442.994839][T13589] ? sighand_ctor+0x50/0x50 [ 443.000393][T13589] ? lock_chain_count+0x20/0x20 [ 443.006396][T13589] ? syscall_enter_from_user_mode+0x25/0x80 [ 443.013170][T13589] __x64_sys_unshare+0x38/0x40 [ 443.019067][T13589] do_syscall_64+0x55/0xb0 [ 443.023931][T13589] ? clear_bhb_loop+0x40/0x90 [ 443.028911][T13589] ? clear_bhb_loop+0x40/0x90 [ 443.034995][T13589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.041165][T13589] RIP: 0033:0x7f451699e159 [ 443.046278][T13589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.070581][T13589] RSP: 002b:00007f45177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 443.079157][T13589] RAX: ffffffffffffffda RBX: 00007f4516c25fa0 RCX: 00007f451699e159 [ 443.088956][T13589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 443.098668][T13589] RBP: 00007f4516a3506b R08: 0000000000000000 R09: 0000000000000000 [ 443.110645][T13589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.119564][T13589] R13: 00007f4516c26038 R14: 00007f4516c25fa0 R15: 00007fff28e0b4f8 [ 443.135475][T13589] [ 443.142753][T13579] FAT-fs (loop4): Directory bread(block 72) failed [ 443.160155][T13579] FAT-fs (loop4): Directory bread(block 73) failed [ 443.685623][T13602] syzkaller0: entered promiscuous mode [ 443.700702][T13602] syzkaller0: entered allmulticast mode [ 443.863601][T13610] fuse: Unknown parameter 'grou00000000000000000000' [ 443.984414][T13614] loop5: detected capacity change from 0 to 256 [ 444.002062][T13614] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.424539][T13617] kvm: apic: phys broadcast and lowest prio [ 445.174587][T13635] fuse: Unknown parameter 'grou00000000000000000000' [ 446.319216][T13662] loop3: detected capacity change from 0 to 256 [ 446.350849][T13662] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 446.623765][T13665] serio: Serial port ttyS3 [ 446.979982][T13670] fuse: Unknown parameter 'group_i00000000000000000000' [ 448.339822][T13685] loop5: detected capacity change from 0 to 128 [ 448.629280][T13694] fuse: Unknown parameter 'group_i00000000000000000000' [ 448.804575][T13702] syzkaller0: entered promiscuous mode [ 448.814639][T13702] syzkaller0: entered allmulticast mode [ 449.402227][T13715] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2610'. [ 449.699326][T13727] fuse: Unknown parameter 'group_i00000000000000000000' [ 452.668552][T13761] fuse: Unknown parameter 'group_id00000000000000000000' [ 453.098307][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'. [ 453.368935][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'. [ 453.691927][T13788] ip_tables: iptables: counters copy to user failed while replacing table [ 454.364059][T13798] fuse: Unknown parameter 'group_id00000000000000000000' [ 455.057014][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2642'. [ 455.238017][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2642'. [ 455.354542][T13826] fuse: Unknown parameter 'group_id00000000000000000000' [ 455.502114][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2642'. [ 456.293626][T13854] fuse: Bad value for 'user_id' [ 456.624662][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 456.865076][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 457.159004][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 457.421989][T13887] fuse: Bad value for 'user_id' [ 458.322701][T13912] fuse: Bad value for 'user_id' [ 460.121167][T13954] overlayfs: missing 'workdir' [ 460.576864][T13973] overlayfs: missing 'lowerdir' [ 460.641731][T13975] fuse: Bad value for 'fd' [ 460.844035][T13980] overlayfs: missing 'workdir' [ 461.208308][T13997] loop2: detected capacity change from 0 to 16 [ 461.238416][T13997] erofs: (device loop2): mounted with root inode @ nid 36. [ 461.315186][T13997] overlayfs: failed to get metacopy (-117) [ 461.401006][T13999] overlayfs: missing 'lowerdir' [ 461.716399][T14008] overlayfs: missing 'lowerdir' [ 462.482574][T14033] overlayfs: missing 'lowerdir' [ 463.515240][T14067] overlayfs: missing 'lowerdir' [ 464.593668][T14092] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 464.634784][T14092] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 465.303745][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2754'. [ 465.633433][T14118] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 465.654706][T14118] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 466.620391][T14148] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 466.644570][T14148] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 468.954429][T14220] loop4: detected capacity change from 0 to 128 [ 469.047575][ T28] audit: type=1800 audit(1791062833.675:25): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2796" name="file1" dev="loop4" ino=1048616 res=0 errno=0 [ 470.771797][T14276] fuse: Bad value for 'fd' [ 471.704801][T14316] fuse: Bad value for 'fd' [ 473.459599][T14377] ip_tables: iptables: counters copy to user failed while replacing table [ 473.480657][T14377] ip_tables: iptables: counters copy to user failed while replacing table [ 473.822787][T14392] bridge_slave_0: default FDB implementation only supports local addresses [ 475.063013][ T3067] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 475.621096][ T3067] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 475.811006][ T3067] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 475.928209][ T3067] usb 3-1: config 220 interface 0 has no altsetting 0 [ 476.035155][ T3067] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 476.144169][ T3067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.329163][ T3067] usb 3-1: Product: syz [ 476.378398][ T3067] usb 3-1: Manufacturer: syz [ 476.440182][ T3067] usb 3-1: SerialNumber: syz [ 478.297219][ T3067] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 478.320587][ T3067] usb 3-1: No valid video chain found. [ 478.367986][ T3067] usb 3-1: USB disconnect, device number 7 [ 478.587805][T14439] loop5: detected capacity change from 0 to 512 [ 479.230176][T14454] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 479.255192][T14454] kvm: requested 98895 ns i8254 timer period limited to 200000 ns [ 479.273927][T14454] kvm: requested 97219 ns i8254 timer period limited to 200000 ns [ 479.290814][T14454] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 479.305040][T14454] kvm: requested 70400 ns i8254 timer period limited to 200000 ns [ 479.315812][T14454] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 480.333815][T14495] syzkaller0: entered promiscuous mode [ 480.354253][T14495] syzkaller0: entered allmulticast mode [ 480.541206][T14506] loop5: detected capacity change from 0 to 128 [ 481.925575][T14548] FAULT_INJECTION: forcing a failure. [ 481.925575][T14548] name failslab, interval 1, probability 0, space 0, times 0 [ 481.948675][T14548] CPU: 1 PID: 14548 Comm: syz.2.2910 Not tainted syzkaller #0 [ 481.957563][T14548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.971584][T14548] Call Trace: [ 481.975565][T14548] [ 481.978858][T14548] dump_stack_lvl+0x18c/0x250 [ 481.985464][T14548] ? show_regs_print_info+0x20/0x20 [ 481.991268][T14548] ? load_image+0x420/0x420 [ 481.996034][T14548] ? __might_sleep+0xe0/0xe0 [ 482.001264][T14548] ? __lock_acquire+0x7eb0/0x7eb0 [ 482.007022][T14548] should_fail_ex+0x394/0x4c0 [ 482.013384][T14548] should_failslab+0x9/0x20 [ 482.018249][T14548] slab_pre_alloc_hook+0x59/0x300 [ 482.024249][T14548] kmem_cache_alloc_lru+0x4d/0x2b0 [ 482.029978][T14548] ? new_inode_pseudo+0x82/0x1d0 [ 482.035137][T14548] new_inode_pseudo+0x82/0x1d0 [ 482.040338][T14548] new_inode+0x22/0x1d0 [ 482.045122][T14548] ? start_creating+0x1f5/0x310 [ 482.050138][T14548] debugfs_create_dir+0xf0/0x4b0 [ 482.055948][T14548] kvm_create_vm_debugfs+0x1fe/0x980 [ 482.062093][T14548] ? lockdep_softirqs_off+0x440/0x440 [ 482.067560][T14548] ? zone_statistics+0x170/0x170 [ 482.072561][T14548] ? hardware_enable_all+0x210/0x210 [ 482.078931][T14548] ? __raw_spin_lock_init+0x45/0x100 [ 482.084293][T14548] kvm_dev_ioctl+0x1426/0x1810 [ 482.089458][T14548] ? kvm_resume+0x1e0/0x1e0 [ 482.094155][T14548] ? bpf_lsm_file_ioctl+0x9/0x10 [ 482.099154][T14548] ? security_file_ioctl+0x80/0xa0 [ 482.104334][T14548] ? kvm_resume+0x1e0/0x1e0 [ 482.109051][T14548] __se_sys_ioctl+0xfd/0x170 [ 482.113773][T14548] do_syscall_64+0x55/0xb0 [ 482.120251][T14548] ? clear_bhb_loop+0x40/0x90 [ 482.125688][T14548] ? clear_bhb_loop+0x40/0x90 [ 482.130697][T14548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.137059][T14548] RIP: 0033:0x7f451699e159 [ 482.141533][T14548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.167147][T14548] RSP: 002b:00007f45177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.178938][T14548] RAX: ffffffffffffffda RBX: 00007f4516c25fa0 RCX: 00007f451699e159 [ 482.189632][T14548] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 482.199052][T14548] RBP: 00007f4516a3506b R08: 0000000000000000 R09: 0000000000000000 [ 482.207689][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.218246][T14548] R13: 00007f4516c26038 R14: 00007f4516c25fa0 R15: 00007fff28e0b4f8 [ 482.228950][T14548] [ 482.289705][T14548] debugfs: out of free dentries, can not create directory '14548-5' [ 485.296929][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 485.770076][T14591] FAULT_INJECTION: forcing a failure. [ 485.770076][T14591] name failslab, interval 1, probability 0, space 0, times 0 [ 485.790649][T14591] CPU: 0 PID: 14591 Comm: syz.4.2920 Not tainted syzkaller #0 [ 485.798311][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.810460][T14591] Call Trace: [ 485.814524][T14591] [ 485.817967][T14591] dump_stack_lvl+0x18c/0x250 [ 485.823105][T14591] ? show_regs_print_info+0x20/0x20 [ 485.828661][T14591] ? load_image+0x420/0x420 [ 485.833529][T14591] ? __might_sleep+0xe0/0xe0 [ 485.838552][T14591] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.846439][T14591] should_fail_ex+0x394/0x4c0 [ 485.852129][T14591] should_failslab+0x9/0x20 [ 485.856822][T14591] slab_pre_alloc_hook+0x59/0x300 [ 485.862324][T14591] ? tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 485.868611][T14591] ? tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 485.876413][T14591] __kmem_cache_alloc_node+0x53/0x250 [ 485.882036][T14591] ? tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 485.888995][T14591] __kmalloc_node_track_caller+0xa4/0x230 [ 485.896451][T14591] kstrdup+0x3b/0x80 [ 485.900562][T14591] tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 485.907243][T14591] ? tcp_illinois_init+0x2b0/0x2b0 [ 485.913601][T14591] tcp_md5_alloc_sigpool+0x1b/0x50 [ 485.919059][T14591] tcp_md5_do_add+0x104/0x3b0 [ 485.924536][T14591] tcp_v4_parse_md5_keys+0x47c/0x650 [ 485.930723][T14591] ? tcp4_seq_show+0xf10/0xf10 [ 485.936158][T14591] ? __local_bh_enable_ip+0x13a/0x1c0 [ 485.942136][T14591] ? _local_bh_enable+0xa0/0xa0 [ 485.948421][T14591] do_tcp_setsockopt+0x1089/0x1c50 [ 485.953936][T14591] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 485.959872][T14591] ? aa_af_perm+0x330/0x330 [ 485.964740][T14591] ? __fget_files+0x28/0x460 [ 485.970714][T14591] ? aa_sock_opt_perm+0x74/0x100 [ 485.976165][T14591] ? sock_common_setsockopt+0x36/0xc0 [ 485.981918][T14591] ? tcp_setsockopt+0x3d/0xe0 [ 485.987193][T14591] ? tcp_enable_tx_delay+0x70/0x70 [ 485.992399][T14591] ? sock_common_recvmsg+0x190/0x190 [ 485.998296][T14591] do_sock_setsockopt+0x175/0x1a0 [ 486.004058][T14591] ? __fdget+0x180/0x210 [ 486.009710][T14591] __x64_sys_setsockopt+0x182/0x200 [ 486.015193][T14591] do_syscall_64+0x55/0xb0 [ 486.020039][T14591] ? clear_bhb_loop+0x40/0x90 [ 486.024860][T14591] ? clear_bhb_loop+0x40/0x90 [ 486.029971][T14591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.036586][T14591] RIP: 0033:0x7f470919e159 [ 486.041636][T14591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.065724][T14591] RSP: 002b:00007f470a0d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 486.074741][T14591] RAX: ffffffffffffffda RBX: 00007f4709425fa0 RCX: 00007f470919e159 [ 486.083483][T14591] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004 [ 486.092122][T14591] RBP: 00007f470923506b R08: 00000000000000d8 R09: 0000000000000000 [ 486.101353][T14591] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 486.111056][T14591] R13: 00007f4709426038 R14: 00007f4709425fa0 R15: 00007ffcfedba558 [ 486.119335][T14591] [ 486.128166][T14601] fuse: root generation should be zero [ 486.952003][T14614] overlayfs: upper fs does not support file handles, falling back to index=off. [ 487.837641][T14647] loop4: detected capacity change from 0 to 128 [ 487.924925][ T28] audit: type=1800 audit(1791062852.555:26): pid=14647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2942" name="file1" dev="loop4" ino=1048618 res=0 errno=0 [ 488.072547][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2944'. [ 488.214768][T14655] loop3: detected capacity change from 0 to 128 [ 488.817146][T14672] loop4: detected capacity change from 0 to 128 [ 488.923030][ T28] audit: type=1800 audit(1791062853.555:27): pid=14672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2953" name="file1" dev="loop4" ino=1048620 res=0 errno=0 [ 489.036363][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2955'. [ 489.659801][T14696] fuse: Bad value for 'group_id' [ 489.942964][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2966'. [ 490.159047][T14712] fuse: Bad value for 'group_id' [ 490.591034][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'. [ 490.759887][T14737] fuse: Bad value for 'group_id' [ 490.831793][T14740] loop3: detected capacity change from 0 to 16 [ 490.852280][T14740] erofs: (device loop3): mounted with root inode @ nid 36. [ 491.699797][ T5838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 492.097978][ T5838] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 492.322777][ T5838] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 492.506553][ T5838] usb 5-1: config 220 interface 0 has no altsetting 0 [ 492.756666][ T5838] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 492.980806][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.241954][ T5838] usb 5-1: Product: syz [ 493.365682][ T5838] usb 5-1: Manufacturer: syz [ 493.447304][ T5838] usb 5-1: SerialNumber: syz [ 495.080218][T14763] loop5: detected capacity change from 0 to 16 [ 495.098274][T14763] erofs: (device loop5): mounted with root inode @ nid 36. [ 495.261331][ T5838] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 495.299437][ T5838] usb 5-1: No valid video chain found. [ 495.346534][ T5838] usb 5-1: USB disconnect, device number 2 [ 495.736647][T14785] kvm: apic: phys broadcast and lowest prio [ 496.879661][ T5838] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 497.325403][ T5838] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 497.474339][ T5838] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 497.621899][ T5838] usb 3-1: config 220 interface 0 has no altsetting 0 [ 497.804280][ T5838] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 497.932978][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.065342][ T5838] usb 3-1: Product: syz [ 498.129113][ T5838] usb 3-1: Manufacturer: syz [ 498.206043][ T5838] usb 3-1: SerialNumber: syz [ 500.006289][T14804] device-mapper: ioctl: Invalid ioctl structure: uuid €, name , dev 2000000000 [ 500.089790][ T5838] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 500.096511][ T5838] usb 3-1: No valid video chain found. [ 500.189817][ T5838] usb 3-1: USB disconnect, device number 8 [ 501.459948][ T5838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 501.768483][ T5838] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 501.805129][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.821850][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.916633][ T5838] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 502.037625][ T5838] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 502.166174][ T5838] usb 6-1: config 220 has no interface number 1 [ 502.253266][ T5838] usb 6-1: config 220 interface 0 has no altsetting 0 [ 502.343809][ T5838] usb 6-1: config 220 interface 76 has no altsetting 0 [ 502.476409][ T5838] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 502.587669][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.697880][ T5838] usb 6-1: Product: syz [ 502.786772][ T5838] usb 6-1: Manufacturer: syz [ 502.842157][ T5838] usb 6-1: SerialNumber: syz [ 503.879774][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 504.553556][ T5838] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 504.610686][ T5838] usb 6-1: No valid video chain found. [ 504.678351][ T5838] usb 6-1: USB disconnect, device number 2 [ 505.630573][ T5837] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 506.078592][ T5837] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 506.343253][ T5837] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 506.586640][ T5837] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 506.781632][ T5837] usb 6-1: config 220 has no interface number 1 [ 506.966691][ T5837] usb 6-1: config 220 interface 0 has no altsetting 0 [ 507.126363][ T5837] usb 6-1: config 220 interface 76 has no altsetting 0 [ 507.403164][ T5837] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 507.964576][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.208348][ T5837] usb 6-1: Product: syz [ 508.230184][ T5837] usb 6-1: Manufacturer: syz [ 508.235790][ T5837] usb 6-1: SerialNumber: syz [ 508.347660][ T5837] usb 6-1: can't set config #220, error -71 [ 508.419294][ T5837] usb 6-1: USB disconnect, device number 3 [ 508.741607][T14891] fuse: Unknown parameter 'grou00000000000000000000' [ 508.823387][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3037'. [ 509.649263][T14922] kvm: apic: phys broadcast and lowest prio [ 510.001052][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3050'. [ 510.504006][T14948] fuse: Unknown parameter 'grou00000000000000000000' [ 510.700621][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3062'. [ 510.806183][T14962] FAULT_INJECTION: forcing a failure. [ 510.806183][T14962] name failslab, interval 1, probability 0, space 0, times 0 [ 510.835105][T14962] CPU: 0 PID: 14962 Comm: syz.2.3063 Not tainted syzkaller #0 [ 510.846592][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.860123][T14962] Call Trace: [ 510.863533][T14962] [ 510.867070][T14962] dump_stack_lvl+0x18c/0x250 [ 510.872896][T14962] ? show_regs_print_info+0x20/0x20 [ 510.879947][T14962] ? load_image+0x420/0x420 [ 510.884881][T14962] ? __might_sleep+0xe0/0xe0 [ 510.891237][T14962] ? __lock_acquire+0x7eb0/0x7eb0 [ 510.897615][T14962] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 510.903781][T14962] should_fail_ex+0x394/0x4c0 [ 510.909537][T14962] should_failslab+0x9/0x20 [ 510.914738][T14962] slab_pre_alloc_hook+0x59/0x300 [ 510.921155][T14962] kmem_cache_alloc_node+0x5e/0x310 [ 510.929257][T14962] ? __alloc_skb+0x103/0x2c0 [ 510.935238][T14962] __alloc_skb+0x103/0x2c0 [ 510.942063][T14962] __ip6_append_data+0x2be0/0x3d40 [ 510.948822][T14962] ? rawv6_send_hdrinc+0x1660/0x1660 [ 510.954755][T14962] ? ip6_setup_cork+0x10f0/0x10f0 [ 510.962385][T14962] ip6_append_data+0x1b0/0x350 [ 510.969405][T14962] ? rawv6_send_hdrinc+0x1660/0x1660 [ 510.974908][T14962] rawv6_sendmsg+0x128b/0x17c0 [ 510.980185][T14962] ? compat_rawv6_ioctl+0x70/0x70 [ 510.986603][T14962] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 510.993702][T14962] ? aa_sock_msg_perm+0x94/0x150 [ 510.999946][T14962] ? inet_sendmsg+0x7e/0x2a0 [ 511.008574][T14962] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 511.015181][T14962] __sys_sendto+0x4a9/0x6b0 [ 511.021219][T14962] ? __ia32_sys_getpeername+0x90/0x90 [ 511.027705][T14962] ? __lock_acquire+0x7eb0/0x7eb0 [ 511.034328][T14962] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 511.041155][T14962] ? lock_chain_count+0x20/0x20 [ 511.046634][T14962] __x64_sys_sendto+0xde/0xf0 [ 511.051633][T14962] do_syscall_64+0x55/0xb0 [ 511.057073][T14962] ? clear_bhb_loop+0x40/0x90 [ 511.064604][T14962] ? clear_bhb_loop+0x40/0x90 [ 511.070521][T14962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.078036][T14962] RIP: 0033:0x7f451699e159 [ 511.083702][T14962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.110004][T14962] RSP: 002b:00007f45177c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 511.120886][T14962] RAX: ffffffffffffffda RBX: 00007f4516c25fa0 RCX: 00007f451699e159 [ 511.132271][T14962] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 511.140942][T14962] RBP: 00007f4516a3506b R08: 0000200000000040 R09: 0000000000000018 [ 511.151049][T14962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.159882][T14962] R13: 00007f4516c26038 R14: 00007f4516c25fa0 R15: 00007fff28e0b4f8 [ 511.169074][T14962] [ 512.157993][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3072'. [ 512.787914][T15003] FAULT_INJECTION: forcing a failure. [ 512.787914][T15003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.820917][T15003] CPU: 0 PID: 15003 Comm: syz.4.3077 Not tainted syzkaller #0 [ 512.829765][T15003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.840483][T15003] Call Trace: [ 512.845322][T15003] [ 512.849105][T15003] dump_stack_lvl+0x18c/0x250 [ 512.854022][T15003] ? show_regs_print_info+0x20/0x20 [ 512.859873][T15003] ? load_image+0x420/0x420 [ 512.864811][T15003] ? __might_fault+0xaa/0x120 [ 512.872106][T15003] ? __lock_acquire+0x7eb0/0x7eb0 [ 512.877505][T15003] ? rawv6_sendmsg+0x128b/0x17c0 [ 512.883672][T15003] ? __virt_addr_valid+0x10c/0x380 [ 512.889318][T15003] should_fail_ex+0x394/0x4c0 [ 512.894447][T15003] _copy_from_user+0x2f/0xe0 [ 512.899714][T15003] csum_and_copy_from_iter+0x1f3/0x1480 [ 512.906523][T15003] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 512.912688][T15003] ? __kmem_cache_alloc_node+0x194/0x250 [ 512.919466][T15003] ? __alloc_skb+0x138/0x2c0 [ 512.926407][T15003] ? rcu_is_watching+0x15/0xb0 [ 512.933431][T15003] ip_generic_getfrag+0x163/0x2f0 [ 512.939960][T15003] ? ip_skb_dst_mtu+0x870/0x870 [ 512.948089][T15003] ? raw6_getfrag+0x11d/0x390 [ 512.953984][T15003] ? __alloc_skb+0x1b2/0x2c0 [ 512.959728][T15003] ? skb_put+0x112/0x210 [ 512.965422][T15003] __ip6_append_data+0x3049/0x3d40 [ 512.971577][T15003] ? rawv6_send_hdrinc+0x1660/0x1660 [ 512.978884][T15003] ? ip6_setup_cork+0x10f0/0x10f0 [ 512.985644][T15003] ip6_append_data+0x1b0/0x350 [ 512.992494][T15003] ? rawv6_send_hdrinc+0x1660/0x1660 [ 512.999274][T15003] rawv6_sendmsg+0x128b/0x17c0 [ 513.006053][T15003] ? compat_rawv6_ioctl+0x70/0x70 [ 513.013535][T15003] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 513.020321][T15003] ? aa_sock_msg_perm+0x94/0x150 [ 513.026616][T15003] ? inet_sendmsg+0x7e/0x2a0 [ 513.031403][T15003] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 513.037366][T15003] __sys_sendto+0x4a9/0x6b0 [ 513.042956][T15003] ? __ia32_sys_getpeername+0x90/0x90 [ 513.049309][T15003] ? __lock_acquire+0x7eb0/0x7eb0 [ 513.054749][T15003] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 513.064115][T15003] ? lock_chain_count+0x20/0x20 [ 513.070859][T15003] __x64_sys_sendto+0xde/0xf0 [ 513.076563][T15003] do_syscall_64+0x55/0xb0 [ 513.081691][T15003] ? clear_bhb_loop+0x40/0x90 [ 513.086755][T15003] ? clear_bhb_loop+0x40/0x90 [ 513.092559][T15003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.101645][T15003] RIP: 0033:0x7f470919e159 [ 513.107540][T15003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.132979][T15003] RSP: 002b:00007f470a0d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 513.142032][T15003] RAX: ffffffffffffffda RBX: 00007f4709425fa0 RCX: 00007f470919e159 [ 513.152329][T15003] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 513.161848][T15003] RBP: 00007f470923506b R08: 0000200000000040 R09: 0000000000000018 [ 513.170762][T15003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.180151][T15003] R13: 00007f4709426038 R14: 00007f4709425fa0 R15: 00007ffcfedba558 [ 513.189707][T15003] [ 517.664678][T15009] syzkaller0: entered promiscuous mode [ 517.679508][T15009] syzkaller0: entered allmulticast mode [ 518.388112][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3084'. [ 519.151846][T15051] syzkaller0: entered promiscuous mode [ 519.166977][T15051] syzkaller0: entered allmulticast mode [ 519.667172][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'. [ 520.681527][T15091] syzkaller0: entered promiscuous mode [ 520.687647][T15091] syzkaller0: entered allmulticast mode [ 520.859738][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 522.689780][T15137] syzkaller0: entered promiscuous mode [ 522.714933][T15137] syzkaller0: entered allmulticast mode [ 524.683394][T15174] syzkaller0: entered promiscuous mode [ 524.709494][T15174] syzkaller0: entered allmulticast mode [ 526.377709][T15214] FAULT_INJECTION: forcing a failure. [ 526.377709][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 526.409211][T15214] CPU: 1 PID: 15214 Comm: syz.5.3157 Not tainted syzkaller #0 [ 526.420465][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.433347][T15214] Call Trace: [ 526.442512][T15214] [ 526.445508][T15214] dump_stack_lvl+0x18c/0x250 [ 526.450634][T15214] ? show_regs_print_info+0x20/0x20 [ 526.457480][T15214] ? load_image+0x420/0x420 [ 526.463700][T15214] ? __might_sleep+0xe0/0xe0 [ 526.476778][T15214] ? __lock_acquire+0x7eb0/0x7eb0 [ 526.486751][T15214] ? do_futex+0x2ff/0x3e0 [ 526.494013][T15214] should_fail_ex+0x394/0x4c0 [ 526.500536][T15214] should_failslab+0x9/0x20 [ 526.506132][T15214] slab_pre_alloc_hook+0x59/0x300 [ 526.512575][T15214] kmem_cache_alloc+0x5a/0x2c0 [ 526.518300][T15214] ? prepare_creds+0x30/0x5d0 [ 526.524159][T15214] prepare_creds+0x30/0x5d0 [ 526.530222][T15214] __sys_setuid+0x96/0x580 [ 526.535152][T15214] ? lockdep_hardirqs_on+0x98/0x150 [ 526.540645][T15214] do_syscall_64+0x55/0xb0 [ 526.547706][T15214] ? clear_bhb_loop+0x40/0x90 [ 526.552994][T15214] ? clear_bhb_loop+0x40/0x90 [ 526.557750][T15214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.568602][T15214] RIP: 0033:0x7f111b99e159 [ 526.573444][T15214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.599196][T15214] RSP: 002b:00007f111c88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 526.608910][T15214] RAX: ffffffffffffffda RBX: 00007f111bc25fa0 RCX: 00007f111b99e159 [ 526.618838][T15214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 526.627234][T15214] RBP: 00007f111ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 526.637201][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.647068][T15214] R13: 00007f111bc26038 R14: 00007f111bc25fa0 R15: 00007ffd4d6220f8 [ 526.656669][T15214] [ 526.690652][T15223] fuse: Bad value for 'fd' [ 526.877639][T15221] syzkaller0: entered promiscuous mode [ 526.919519][T15221] syzkaller0: entered allmulticast mode [ 532.942730][T15301] loop2: detected capacity change from 0 to 128 [ 532.959944][T15302] FAULT_INJECTION: forcing a failure. [ 532.959944][T15302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.981464][T15302] CPU: 0 PID: 15302 Comm: syz.3.3186 Not tainted syzkaller #0 [ 532.990114][T15302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.003382][T15302] Call Trace: [ 533.004635][T15301] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 533.007219][T15302] [ 533.028875][T15302] dump_stack_lvl+0x18c/0x250 [ 533.035581][T15302] ? show_regs_print_info+0x20/0x20 [ 533.044435][T15302] ? load_image+0x420/0x420 [ 533.050531][T15302] ? __lock_acquire+0x7eb0/0x7eb0 [ 533.056253][T15302] should_fail_ex+0x394/0x4c0 [ 533.061206][T15302] prepare_alloc_pages+0x1e1/0x5b0 [ 533.072704][T15302] __alloc_pages+0x134/0x460 [ 533.078291][T15302] ? zone_statistics+0x170/0x170 [ 533.085745][T15302] pte_alloc_one+0x84/0x540 [ 533.091436][T15302] ? pfn_modify_allowed+0x560/0x560 [ 533.099750][T15302] ? __might_sleep+0xe0/0xe0 [ 533.105781][T15302] ? __lock_acquire+0x7eb0/0x7eb0 [ 533.112178][T15302] ? __rwlock_init+0x150/0x150 [ 533.117824][T15302] __pte_alloc+0x22/0x2a0 [ 533.122598][T15302] move_page_tables+0x1639/0x1970 [ 533.129990][T15302] ? move_page_tables+0x1b7/0x1970 [ 533.135208][T15302] ? map_deny_write_exec+0xf0/0xf0 [ 533.141508][T15302] move_vma+0x6d0/0x16a0 [ 533.150973][T15302] ? mtree_load+0x7a4/0x840 [ 533.165304][T15302] ? vma_expandable+0xf0/0xf0 [ 533.179908][T15302] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 533.188593][T15302] ? bpf_lsm_mmap_addr+0x9/0x10 [ 533.200921][T15302] ? security_mmap_addr+0x72/0x90 [ 533.206489][T15302] ? get_unmapped_area+0x2f9/0x360 [ 533.212134][T15302] mremap_to+0x51f/0x5d0 [ 533.218880][T15302] __se_sys_mremap+0x6a8/0x11a0 [ 533.225232][T15302] ? __x64_sys_mremap+0xc0/0xc0 [ 533.232892][T15302] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 533.240417][T15302] ? lock_chain_count+0x20/0x20 [ 533.246857][T15302] ? lockdep_hardirqs_on+0x98/0x150 [ 533.253794][T15302] ? __x64_sys_mremap+0x20/0xc0 [ 533.259320][T15302] do_syscall_64+0x55/0xb0 [ 533.264430][T15302] ? clear_bhb_loop+0x40/0x90 [ 533.270720][T15302] ? clear_bhb_loop+0x40/0x90 [ 533.277180][T15302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.288254][T15302] RIP: 0033:0x7f4b20f9e159 [ 533.297091][T15302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.341914][T15302] RSP: 002b:00007f4b21f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 533.351785][T15302] RAX: ffffffffffffffda RBX: 00007f4b21225fa0 RCX: 00007f4b20f9e159 [ 533.361829][T15302] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 533.372111][T15302] RBP: 00007f4b2103506b R08: 0000200000ffd000 R09: 0000000000000000 [ 533.380493][T15302] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 533.398619][T15302] R13: 00007f4b21226038 R14: 00007f4b21225fa0 R15: 00007ffef9eb3738 [ 533.412543][T15302] [ 533.444201][T15301] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 533.643468][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 533.871201][T15312] syzkaller0: entered promiscuous mode [ 533.889547][T15312] syzkaller0: entered allmulticast mode [ 534.599513][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 534.788342][T15319] loop4: detected capacity change from 0 to 32768 [ 534.979872][ T5837] smpboot: CPU 1 is now offline [ 536.004763][T15349] syzkaller0: entered promiscuous mode [ 536.075243][T15349] syzkaller0: entered allmulticast mode [ 537.369211][T15378] FAULT_INJECTION: forcing a failure. [ 537.369211][T15378] name failslab, interval 1, probability 0, space 0, times 0 [ 537.470257][T15378] CPU: 0 PID: 15378 Comm: syz.4.3216 Not tainted syzkaller #0 [ 537.482292][T15378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 537.496003][T15378] Call Trace: [ 537.500667][T15378] [ 537.504890][T15378] dump_stack_lvl+0x18c/0x250 [ 537.514720][T15378] ? show_regs_print_info+0x20/0x20 [ 537.525811][T15378] ? load_image+0x420/0x420 [ 537.535094][T15378] ? __lock_acquire+0x7eb0/0x7eb0 [ 537.543051][T15378] should_fail_ex+0x394/0x4c0 [ 537.549199][T15378] should_failslab+0x9/0x20 [ 537.554021][T15378] slab_pre_alloc_hook+0x59/0x300 [ 537.560533][T15378] kmem_cache_alloc_lru+0x4d/0x2b0 [ 537.570717][T15378] ? sock_alloc_inode+0x28/0xc0 [ 537.584414][T15378] sock_alloc_inode+0x28/0xc0 [ 537.592564][T15378] ? sockfs_init_fs_context+0xb0/0xb0 [ 537.598736][T15378] new_inode_pseudo+0x63/0x1d0 [ 537.605978][T15378] __sock_create+0x12d/0x940 [ 537.612361][T15378] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 537.623095][T15378] __sys_socket+0xd7/0x1b0 [ 537.630586][T15378] __x64_sys_socket+0x7a/0x90 [ 537.644398][T15378] do_syscall_64+0x55/0xb0 [ 537.652917][T15378] ? clear_bhb_loop+0x40/0x90 [ 537.660773][T15378] ? clear_bhb_loop+0x40/0x90 [ 537.667208][T15378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.675420][T15378] RIP: 0033:0x7f470919e159 [ 537.683188][T15378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.713136][T15378] RSP: 002b:00007f470a0d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 537.733250][T15378] RAX: ffffffffffffffda RBX: 00007f4709425fa0 RCX: 00007f470919e159 [ 537.745079][T15378] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 000000000000000a [ 537.757419][T15378] RBP: 00007f470923506b R08: 0000000000000000 R09: 0000000000000000 [ 537.770863][T15378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.780743][T15378] R13: 00007f4709426038 R14: 00007f4709425fa0 R15: 00007ffcfedba558 [ 537.791215][T15378] [ 538.008865][T15378] socket: no more sockets [ 538.634133][T15402] syzkaller0: entered promiscuous mode [ 538.674548][T15402] syzkaller0: entered allmulticast mode [ 540.650556][T15447] syzkaller0: entered promiscuous mode [ 540.686806][T15447] syzkaller0: entered allmulticast mode [ 541.934332][T15475] overlayfs: missing 'lowerdir' [ 542.100304][T15481] fuse: Bad value for 'group_id' [ 542.201592][T15485] FAULT_INJECTION: forcing a failure. [ 542.201592][T15485] name failslab, interval 1, probability 0, space 0, times 0 [ 542.306723][T15485] CPU: 0 PID: 15485 Comm: syz.2.3257 Not tainted syzkaller #0 [ 542.325224][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.347453][T15485] Call Trace: [ 542.350874][T15485] [ 542.353851][T15485] dump_stack_lvl+0x18c/0x250 [ 542.358797][T15485] ? show_regs_print_info+0x20/0x20 [ 542.367243][T15485] ? load_image+0x420/0x420 [ 542.374178][T15485] ? __might_sleep+0xe0/0xe0 [ 542.379917][T15485] ? __lock_acquire+0x7eb0/0x7eb0 [ 542.385750][T15485] should_fail_ex+0x394/0x4c0 [ 542.392415][T15485] should_failslab+0x9/0x20 [ 542.398017][T15485] slab_pre_alloc_hook+0x59/0x300 [ 542.404507][T15485] kmem_cache_alloc+0x5a/0x2c0 [ 542.411671][T15485] ? security_inode_alloc+0x34/0x110 [ 542.419322][T15485] security_inode_alloc+0x34/0x110 [ 542.425256][T15485] inode_init_always+0x914/0xc90 [ 542.433619][T15485] new_inode_pseudo+0x95/0x1d0 [ 542.439152][T15485] __sock_create+0x12d/0x940 [ 542.445075][T15485] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 542.451894][T15485] __sys_socket+0xd7/0x1b0 [ 542.458959][T15485] __x64_sys_socket+0x7a/0x90 [ 542.464315][T15485] do_syscall_64+0x55/0xb0 [ 542.470290][T15485] ? clear_bhb_loop+0x40/0x90 [ 542.475568][T15485] ? clear_bhb_loop+0x40/0x90 [ 542.482766][T15485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.489784][T15485] RIP: 0033:0x7f451699e159 [ 542.495742][T15485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.527630][T15485] RSP: 002b:00007f45177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 542.536614][T15485] RAX: ffffffffffffffda RBX: 00007f4516c25fa0 RCX: 00007f451699e159 [ 542.544981][T15485] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 000000000000000a [ 542.553375][T15485] RBP: 00007f4516a3506b R08: 0000000000000000 R09: 0000000000000000 [ 542.562497][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.573684][T15485] R13: 00007f4516c26038 R14: 00007f4516c25fa0 R15: 00007fff28e0b4f8 [ 542.582752][T15485] [ 542.950012][T15492] syzkaller0: entered promiscuous mode [ 542.971610][T15492] syzkaller0: entered allmulticast mode [ 543.108370][T15485] socket: no more sockets [ 543.834904][T15507] fuse: Unknown parameter 'grou00000000000000000000' [ 543.860176][T15508] overlayfs: missing 'lowerdir' [ 544.194087][T15520] fuse: Bad value for 'fd' [ 544.217665][T15519] FAULT_INJECTION: forcing a failure. [ 544.217665][T15519] name failslab, interval 1, probability 0, space 0, times 0 [ 544.339091][T15519] CPU: 0 PID: 15519 Comm: syz.4.3270 Not tainted syzkaller #0 [ 544.350669][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.364269][T15519] Call Trace: [ 544.370283][T15519] [ 544.374316][T15519] dump_stack_lvl+0x18c/0x250 [ 544.380448][T15519] ? show_regs_print_info+0x20/0x20 [ 544.387476][T15519] ? load_image+0x420/0x420 [ 544.394826][T15519] ? __lock_acquire+0x7eb0/0x7eb0 [ 544.401437][T15519] should_fail_ex+0x394/0x4c0 [ 544.410546][T15519] should_failslab+0x9/0x20 [ 544.420996][T15519] slab_pre_alloc_hook+0x59/0x300 [ 544.429992][T15519] kmem_cache_alloc_lru+0x4d/0x2b0 [ 544.436898][T15519] ? sock_alloc_inode+0x28/0xc0 [ 544.442735][T15519] sock_alloc_inode+0x28/0xc0 [ 544.451662][T15519] ? sockfs_init_fs_context+0xb0/0xb0 [ 544.459065][T15519] new_inode_pseudo+0x63/0x1d0 [ 544.464328][T15519] __sock_create+0x12d/0x940 [ 544.470882][T15519] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 544.477854][T15519] __sys_socket+0xd7/0x1b0 [ 544.483086][T15519] __x64_sys_socket+0x7a/0x90 [ 544.489204][T15519] do_syscall_64+0x55/0xb0 [ 544.495400][T15519] ? clear_bhb_loop+0x40/0x90 [ 544.500395][T15519] ? clear_bhb_loop+0x40/0x90 [ 544.508948][T15519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.517338][T15519] RIP: 0033:0x7f470919e159 [ 544.522596][T15519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.546524][T15519] RSP: 002b:00007f470a0d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 544.556575][T15519] RAX: ffffffffffffffda RBX: 00007f4709425fa0 RCX: 00007f470919e159 [ 544.568066][T15519] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 000000000000000a [ 544.577147][T15519] RBP: 00007f470923506b R08: 0000000000000000 R09: 0000000000000000 [ 544.586618][T15519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.597386][T15519] R13: 00007f4709426038 R14: 00007f4709425fa0 R15: 00007ffcfedba558 [ 544.609488][T15519] [ 544.683956][T15523] kvm: apic: phys broadcast and lowest prio [ 544.825794][T15519] socket: no more sockets [ 545.211204][T15533] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 545.229978][T15536] syzkaller0: entered promiscuous mode [ 545.243730][T15536] syzkaller0: entered allmulticast mode [ 545.617545][T15542] FAULT_INJECTION: forcing a failure. [ 545.617545][T15542] name failslab, interval 1, probability 0, space 0, times 0 [ 545.641890][T15542] CPU: 0 PID: 15542 Comm: syz.2.3277 Not tainted syzkaller #0 [ 545.652677][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.664834][T15542] Call Trace: [ 545.670230][T15542] [ 545.673703][T15542] dump_stack_lvl+0x18c/0x250 [ 545.686344][T15542] ? show_regs_print_info+0x20/0x20 [ 545.696346][T15542] ? load_image+0x420/0x420 [ 545.701652][T15542] should_fail_ex+0x394/0x4c0 [ 545.707434][T15542] should_failslab+0x9/0x20 [ 545.713342][T15542] slab_pre_alloc_hook+0x59/0x300 [ 545.719354][T15542] kmem_cache_alloc+0x5a/0x2c0 [ 545.724786][T15542] ? sctp_get_port_local+0x69f/0x15d0 [ 545.734135][T15542] sctp_get_port_local+0x69f/0x15d0 [ 545.739800][T15542] ? sctp_do_bind+0x8f0/0x8f0 [ 545.744904][T15542] ? sctp_bind_addr_match+0x30/0x2a0 [ 545.757255][T15542] sctp_do_bind+0x4c0/0x8f0 [ 545.769782][T15542] sctp_connect_new_asoc+0x26a/0x6a0 [ 545.778477][T15542] ? __sctp_connect+0xd80/0xd80 [ 545.784951][T15542] ? __local_bh_enable_ip+0x13a/0x1c0 [ 545.794244][T15542] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 545.803418][T15542] ? security_sctp_bind_connect+0x89/0xb0 [ 545.810808][T15542] sctp_sendmsg+0x1519/0x27b0 [ 545.816929][T15542] ? sctp_getsockopt+0xb60/0xb60 [ 545.823998][T15542] ? aa_af_perm+0x330/0x330 [ 545.831359][T15542] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 545.838901][T15542] ? sock_rps_record_flow+0x19/0x3f0 [ 545.845840][T15542] ? inet_sendmsg+0xce/0x2a0 [ 545.852357][T15542] __sys_sendto+0x4a9/0x6b0 [ 545.857527][T15542] ? __ia32_sys_getpeername+0x90/0x90 [ 545.865535][T15542] ? __lock_acquire+0x7eb0/0x7eb0 [ 545.871662][T15542] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 545.879333][T15542] ? lock_chain_count+0x20/0x20 [ 545.885562][T15542] __x64_sys_sendto+0xde/0xf0 [ 545.892065][T15542] do_syscall_64+0x55/0xb0 [ 545.898451][T15542] ? clear_bhb_loop+0x40/0x90 [ 545.905520][T15542] ? clear_bhb_loop+0x40/0x90 [ 545.911966][T15542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.918107][T15542] RIP: 0033:0x7f451699e159 [ 545.922867][T15542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.957025][T15542] RSP: 002b:00007f45177c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 545.967450][T15542] RAX: ffffffffffffffda RBX: 00007f4516c25fa0 RCX: 00007f451699e159 [ 545.989642][T15542] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 546.000082][T15542] RBP: 00007f4516a3506b R08: 0000200000000000 R09: 000000000000001c [ 546.012209][T15542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.023564][T15542] R13: 00007f4516c26038 R14: 00007f4516c25fa0 R15: 00007fff28e0b4f8 [ 546.035788][T15542] [ 546.051667][T15544] fuse: Unknown parameter 'grou00000000000000000000' [ 546.925507][T15566] kvm: apic: phys broadcast and lowest prio [ 547.294501][ T28] audit: type=1800 audit(1791062911.915:28): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3287" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 547.746023][T15580] fuse: Unknown parameter 'group_i00000000000000000000' [ 547.952525][T15582] syzkaller0: entered promiscuous mode [ 547.987831][T15582] syzkaller0: entered allmulticast mode [ 548.327133][T15589] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(23.3.0), cmd(12) [ 549.288109][T15608] fuse: Unknown parameter 'group_i00000000000000000000' [ 549.338526][T15611] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 549.401291][T15611] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 549.435772][T15616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 549.617407][T15618] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(23.3.0), cmd(12) [ 550.119102][T15632] syzkaller0: entered promiscuous mode [ 550.175513][T15632] syzkaller0: entered allmulticast mode [ 550.527083][T15640] fuse: Unknown parameter 'group_i00000000000000000000' [ 550.860395][T15645] overlayfs: missing 'lowerdir' [ 551.030241][T15649] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 551.670230][T15662] fuse: Unknown parameter 'group_id00000000000000000000' [ 552.075591][T15669] overlayfs: missing 'lowerdir' [ 552.114578][T15672] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 552.539286][T15678] syzkaller0: entered promiscuous mode [ 552.574080][T15678] syzkaller0: entered allmulticast mode [ 552.847706][T15687] fuse: Unknown parameter 'grou00000000000000000000' [ 553.173892][T15690] fuse: Bad value for 'fd' [ 553.519775][T15696] fuse: Unknown parameter 'group_id00000000000000000000' [ 553.545758][T15697] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 553.638486][T15697] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 553.676907][T15700] overlayfs: missing 'lowerdir' [ 553.696025][T15701] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 554.048087][T15709] fuse: Unknown parameter 'grou00000000000000000000' [ 554.156577][T15714] fuse: Bad value for 'fd' [ 554.568769][T15721] netlink: 'syz.3.3345': attribute type 4 has an invalid length. [ 554.622626][T15723] fuse: Unknown parameter 'group_id00000000000000000000' [ 554.818515][T15731] overlayfs: missing 'workdir' [ 555.078180][T15734] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 555.172799][T15735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.410299][T15739] fuse: Unknown parameter 'grou00000000000000000000' [ 555.507843][T15741] fuse: Bad value for 'fd' [ 555.538158][T15744] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 555.756703][T15748] fuse: Bad value for 'user_id' [ 555.973828][T15753] overlayfs: missing 'workdir' [ 556.130857][T15757] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 556.349427][T15765] capability: warning: `syz.5.3363' uses 32-bit capabilities (legacy support in use) [ 556.462940][T15768] fuse: Unknown parameter 'group_i00000000000000000000' [ 556.530290][T15766] program syz.5.3363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.008781][T15783] overlayfs: missing 'workdir' [ 557.172579][T15787] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 559.123522][T15828] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 559.162929][T15828] overlayfs: failed to set xattr on upper [ 559.192125][T15828] overlayfs: ...falling back to redirect_dir=nofollow. [ 559.228810][T15828] overlayfs: ...falling back to index=off. [ 559.263197][T15828] overlayfs: ...falling back to uuid=null. [ 559.842949][T15835] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 559.919575][T15835] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 560.414035][T15853] fuse: Bad value for 'fd' [ 561.740377][T15876] syzkaller0: entered promiscuous mode [ 561.763766][T15876] syzkaller0: entered allmulticast mode [ 563.118768][T15907] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 563.168475][T15907] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 563.208850][T15907] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 563.249859][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.257988][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.275638][T15907] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 563.292763][T15911] syzkaller0: entered promiscuous mode [ 563.310693][T15907] kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 563.323957][T15911] syzkaller0: entered allmulticast mode [ 563.344794][T15907] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 563.391979][T15907] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 563.421699][T15907] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 563.459916][T15907] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 563.510840][T15907] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 564.088001][T15925] FAULT_INJECTION: forcing a failure. [ 564.088001][T15925] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 564.142862][T15928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3429'. [ 564.166339][T15928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3429'. [ 564.178119][T15925] CPU: 0 PID: 15925 Comm: syz.3.3428 Not tainted syzkaller #0 [ 564.192077][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.207240][T15925] Call Trace: [ 564.214042][T15925] [ 564.217277][T15925] dump_stack_lvl+0x18c/0x250 [ 564.222923][T15925] ? show_regs_print_info+0x20/0x20 [ 564.228883][T15925] ? load_image+0x420/0x420 [ 564.235230][T15925] ? __lock_acquire+0x7eb0/0x7eb0 [ 564.241790][T15925] should_fail_ex+0x394/0x4c0 [ 564.251723][T15925] prepare_alloc_pages+0x1e1/0x5b0 [ 564.257759][T15925] __alloc_pages+0x134/0x460 [ 564.265073][T15925] ? zone_statistics+0x170/0x170 [ 564.271931][T15925] __pmd_alloc+0x9a/0x8c0 [ 564.279015][T15925] ? __rwlock_init+0x150/0x150 [ 564.285355][T15925] ? __pud_alloc+0x200/0x200 [ 564.291735][T15925] ? hugepage_vma_check+0x471/0x560 [ 564.297523][T15925] handle_mm_fault+0xb75/0x4a50 [ 564.303569][T15925] ? handle_mm_fault+0xe6/0x4a50 [ 564.311791][T15925] ? numa_migrate_prep+0x350/0x350 [ 564.317510][T15925] __get_user_pages+0x604/0x1580 [ 564.325918][T15925] ? vma_link+0x2e1/0x530 [ 564.331228][T15925] ? populate_vma_page_range+0x380/0x380 [ 564.336951][T15925] get_user_pages_remote+0x39e/0xb90 [ 564.343971][T15925] ? get_dump_page+0x200/0x200 [ 564.350356][T15925] ? down_read+0x1ac/0x2e0 [ 564.356618][T15925] get_arg_page+0x274/0x560 [ 564.363493][T15925] ? copy_string_kernel+0x220/0x220 [ 564.369687][T15925] ? up_write+0x1be/0x410 [ 564.376137][T15925] copy_string_kernel+0x165/0x220 [ 564.387121][T15925] do_execveat_common+0x35d/0x6b0 [ 564.398043][T15925] __x64_sys_execveat+0xc4/0xe0 [ 564.406990][T15925] do_syscall_64+0x55/0xb0 [ 564.415038][T15925] ? clear_bhb_loop+0x40/0x90 [ 564.427308][T15925] ? clear_bhb_loop+0x40/0x90 [ 564.432417][T15925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.438653][T15925] RIP: 0033:0x7f4b20f9e159 [ 564.444137][T15925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.468706][T15925] RSP: 002b:00007f4b21f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 564.478136][T15925] RAX: ffffffffffffffda RBX: 00007f4b21225fa0 RCX: 00007f4b20f9e159 [ 564.490077][T15925] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 564.499819][T15925] RBP: 00007f4b2103506b R08: 0000000000001000 R09: 0000000000000000 [ 564.511126][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.521661][T15925] R13: 00007f4b21226038 R14: 00007f4b21225fa0 R15: 00007ffef9eb3738 [ 564.531426][T15925] [ 565.426857][T15953] syzkaller0: entered promiscuous mode [ 565.459144][T15953] syzkaller0: entered allmulticast mode [ 567.491761][T15998] syzkaller0: entered promiscuous mode [ 567.497821][T15998] syzkaller0: entered allmulticast mode [ 569.435721][T16035] md: could not open device unknown-block(1,0). [ 570.117129][T16051] fuse: Bad value for 'fd' [ 570.157672][T16055] fuse: Bad value for 'rootmode' [ 570.493161][T16061] md: could not open device unknown-block(1,0). [ 571.160806][T16082] fuse: Bad value for 'fd' [ 571.286717][T16085] fuse: Bad value for 'rootmode' [ 572.208841][T16113] fuse: Bad value for 'fd' [ 572.516428][T16119] fuse: Unknown parameter 'use00000000000000000000' [ 573.498235][T16144] fuse: Unknown parameter 'use00000000000000000000' [ 573.797615][T16152] loop3: detected capacity change from 0 to 256 [ 573.853935][T16152] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 574.573527][T16170] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 574.622692][T16172] fuse: Unknown parameter 'use00000000000000000000' [ 575.582564][T16194] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 576.631661][T16221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 576.695836][T16226] program syz.4.3540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.988206][T16233] FAULT_INJECTION: forcing a failure. [ 576.988206][T16233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 577.014573][T16231] FAULT_INJECTION: forcing a failure. [ 577.014573][T16231] name failslab, interval 1, probability 0, space 0, times 0 [ 577.032144][T16231] CPU: 0 PID: 16231 Comm: syz.5.3541 Not tainted syzkaller #0 [ 577.044882][T16231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.062683][T16231] Call Trace: [ 577.069841][T16231] [ 577.075629][T16231] dump_stack_lvl+0x18c/0x250 [ 577.086604][T16231] ? show_regs_print_info+0x20/0x20 [ 577.098593][T16231] ? load_image+0x420/0x420 [ 577.106300][T16231] should_fail_ex+0x394/0x4c0 [ 577.113565][T16231] ? __sigqueue_alloc+0x32/0x520 [ 577.119899][T16231] should_failslab+0x9/0x20 [ 577.131516][T16231] slab_pre_alloc_hook+0x59/0x300 [ 577.138805][T16231] ? __lock_acquire+0x7eb0/0x7eb0 [ 577.144614][T16231] ? __sigqueue_alloc+0x32/0x520 [ 577.151234][T16231] kmem_cache_alloc+0x5a/0x2c0 [ 577.156686][T16231] ? __sigqueue_alloc+0x40c/0x520 [ 577.162274][T16231] ? __sigqueue_alloc+0x32/0x520 [ 577.168693][T16231] __sigqueue_alloc+0x40c/0x520 [ 577.174088][T16231] __send_signal_locked+0x22f/0xe00 [ 577.179859][T16231] do_notify_parent+0xb26/0xd10 [ 577.186145][T16231] ? trace_signal_generate+0x1c0/0x1c0 [ 577.193287][T16231] ? __lock_acquire+0x7eb0/0x7eb0 [ 577.198882][T16231] release_task+0x1227/0x1690 [ 577.203687][T16231] ? do_exit+0x1888/0x2530 [ 577.209674][T16231] ? delayed_put_task_struct+0x2a0/0x2a0 [ 577.216278][T16231] ? _raw_write_lock_irq+0xbb/0xf0 [ 577.223777][T16231] ? _raw_write_lock_irqsave+0x100/0x100 [ 577.230674][T16231] ? _raw_write_unlock_irq+0x23/0x50 [ 577.237390][T16231] ? lockdep_hardirqs_on+0x98/0x150 [ 577.245550][T16231] do_exit+0x1888/0x2530 [ 577.250511][T16231] ? put_task_struct+0xc0/0xc0 [ 577.255591][T16231] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 577.263896][T16231] ? get_signal+0x100e/0x1390 [ 577.273018][T16231] ? lock_chain_count+0x20/0x20 [ 577.278935][T16231] ? _raw_spin_lock_irq+0xbb/0xf0 [ 577.288203][T16231] do_group_exit+0x22d/0x2f0 [ 577.295226][T16231] ? lockdep_hardirqs_on+0x98/0x150 [ 577.302256][T16231] get_signal+0x12a6/0x1390 [ 577.309315][T16231] arch_do_signal_or_restart+0xc2/0x7b0 [ 577.316430][T16231] ? __ia32_sys_get_robust_list+0x110/0x110 [ 577.324534][T16231] ? get_sigframe_size+0x20/0x20 [ 577.332452][T16231] ? exit_to_user_mode_loop+0x3b/0x110 [ 577.340734][T16231] exit_to_user_mode_loop+0x70/0x110 [ 577.349098][T16231] exit_to_user_mode_prepare+0xee/0x180 [ 577.360922][T16231] syscall_exit_to_user_mode+0x1a/0x50 [ 577.368600][T16231] do_syscall_64+0x61/0xb0 [ 577.376088][T16231] ? clear_bhb_loop+0x40/0x90 [ 577.382764][T16231] ? clear_bhb_loop+0x40/0x90 [ 577.389284][T16231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.396052][T16231] RIP: 0033:0x7f111b99e159 [ 577.401290][T16231] Code: Unable to access opcode bytes at 0x7f111b99e12f. [ 577.409325][T16231] RSP: 002b:00007f111c88d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 577.421808][T16231] RAX: fffffffffffffe00 RBX: 00007f111bc25fa8 RCX: 00007f111b99e159 [ 577.432174][T16231] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f111bc25fa8 [ 577.441954][T16231] RBP: 00007f111bc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 577.453159][T16231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.461902][T16231] R13: 00007f111bc26038 R14: 00007ffd4d622010 R15: 00007ffd4d6220f8 [ 577.474186][T16231] [ 577.489472][T16233] CPU: 0 PID: 16233 Comm: syz.2.3543 Not tainted syzkaller #0 [ 577.498045][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.510658][T16233] Call Trace: [ 577.514747][T16233] [ 577.518322][T16233] dump_stack_lvl+0x18c/0x250 [ 577.523297][T16233] ? show_regs_print_info+0x20/0x20 [ 577.530986][T16233] ? load_image+0x420/0x420 [ 577.535933][T16233] ? __lock_acquire+0x7eb0/0x7eb0 [ 577.541187][T16233] should_fail_ex+0x394/0x4c0 [ 577.549054][T16233] prepare_alloc_pages+0x1e1/0x5b0 [ 577.555689][T16233] __alloc_pages+0x134/0x460 [ 577.561876][T16233] ? zone_statistics+0x170/0x170 [ 577.568098][T16233] ? alloc_pages+0x4e1/0x740 [ 577.574525][T16233] ? do_raw_spin_unlock+0x121/0x230 [ 577.581338][T16233] __get_free_pages+0xc/0x30 [ 577.588159][T16233] kasan_populate_vmalloc_pte+0x35/0x100 [ 577.594894][T16233] __apply_to_page_range+0x860/0xdd0 [ 577.600401][T16233] ? kasan_populate_vmalloc+0x70/0x70 [ 577.609776][T16233] ? apply_to_page_range+0x50/0x50 [ 577.616163][T16233] ? do_raw_spin_unlock+0x121/0x230 [ 577.621495][T16233] alloc_vmap_area+0x1d26/0x1e50 [ 577.627478][T16233] ? vm_map_ram+0xcf0/0xcf0 [ 577.633517][T16233] ? rcu_is_watching+0x15/0xb0 [ 577.639908][T16233] __get_vm_area_node+0x162/0x370 [ 577.648043][T16233] __vmalloc_node_range+0x36f/0x1320 [ 577.655124][T16233] ? translate_table+0x194/0x1f60 [ 577.665007][T16233] ? __asan_memset+0x22/0x40 [ 577.672040][T16233] ? free_vm_area+0x50/0x50 [ 577.676972][T16233] ? kvmalloc_node+0x70/0x180 [ 577.682489][T16233] ? rcu_is_watching+0x15/0xb0 [ 577.691442][T16233] ? kvmalloc_node+0x70/0x180 [ 577.697819][T16233] ? trace_kmalloc+0x1f/0xa0 [ 577.705392][T16233] kvmalloc_node+0x13f/0x180 [ 577.711191][T16233] ? translate_table+0x194/0x1f60 [ 577.718974][T16233] translate_table+0x194/0x1f60 [ 577.726176][T16233] ? ipt_register_table+0x7b0/0x7b0 [ 577.734124][T16233] ? __might_fault+0xaa/0x120 [ 577.739775][T16233] ? __lock_acquire+0x7eb0/0x7eb0 [ 577.747625][T16233] ? __virt_addr_valid+0x10c/0x380 [ 577.753627][T16233] ? __virt_addr_valid+0x10c/0x380 [ 577.759841][T16233] ? __might_fault+0xaa/0x120 [ 577.768780][T16233] ? __might_fault+0xc6/0x120 [ 577.776167][T16233] ? __might_fault+0xaa/0x120 [ 577.783784][T16233] do_ipt_set_ctl+0x9f5/0xe00 [ 577.790226][T16233] ? ipt_unregister_table_exit+0x230/0x230 [ 577.797166][T16233] ? __lock_acquire+0x7eb0/0x7eb0 [ 577.804216][T16233] ? rcu_is_watching+0x15/0xb0 [ 577.811720][T16233] ? trace_contention_end+0x39/0xe0 [ 577.819406][T16233] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 577.827760][T16233] ? mutex_unlock+0x10/0x10 [ 577.833253][T16233] ? aa_af_perm+0x330/0x330 [ 577.837978][T16233] nf_setsockopt+0x263/0x280 [ 577.847244][T16233] ? sock_common_recvmsg+0x190/0x190 [ 577.853885][T16233] do_sock_setsockopt+0x175/0x1a0 [ 577.860716][T16233] ? __fdget+0x180/0x210 [ 577.866887][T16233] __x64_sys_setsockopt+0x182/0x200 [ 577.874234][T16233] do_syscall_64+0x55/0xb0 [ 577.880783][T16233] ? clear_bhb_loop+0x40/0x90 [ 577.885709][T16233] ? clear_bhb_loop+0x40/0x90 [ 577.892093][T16233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.900988][T16233] RIP: 0033:0x7f451699e159 [ 577.905860][T16233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.930684][T16233] RSP: 002b:00007f45177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 577.940539][T16233] RAX: ffffffffffffffda RBX: 00007f4516c25fa0 RCX: 00007f451699e159 [ 577.954460][T16233] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 577.964983][T16233] RBP: 00007f4516a3506b R08: 00000000000002a8 R09: 0000000000000000 [ 577.975383][T16233] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 577.986069][T16233] R13: 00007f4516c26038 R14: 00007f4516c25fa0 R15: 00007fff28e0b4f8 [ 577.994893][T16233] [ 578.318140][T16233] syz.2.3543: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 578.518218][T16233] CPU: 0 PID: 16233 Comm: syz.2.3543 Not tainted syzkaller #0 [ 578.527280][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.537652][T16233] Call Trace: [ 578.540982][T16233] [ 578.544519][T16233] dump_stack_lvl+0x18c/0x250 [ 578.551611][T16233] ? show_regs_print_info+0x20/0x20 [ 578.557198][T16233] ? load_image+0x420/0x420 [ 578.562450][T16233] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 578.570154][T16233] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 578.578259][T16233] warn_alloc+0x246/0x340 [ 578.582994][T16233] ? slab_free_freelist_hook+0x130/0x1a0 [ 578.590596][T16233] ? zone_watermark_ok_safe+0x230/0x230 [ 578.597662][T16233] ? __get_vm_area_node+0x17b/0x370 [ 578.604743][T16233] ? __get_vm_area_node+0x17b/0x370 [ 578.610348][T16233] __vmalloc_node_range+0x394/0x1320 [ 578.616129][T16233] ? __asan_memset+0x22/0x40 [ 578.621307][T16233] ? free_vm_area+0x50/0x50 [ 578.626049][T16233] ? kvmalloc_node+0x70/0x180 [ 578.631563][T16233] ? rcu_is_watching+0x15/0xb0 [ 578.637213][T16233] ? kvmalloc_node+0x70/0x180 [ 578.643230][T16233] ? trace_kmalloc+0x1f/0xa0 [ 578.648923][T16233] kvmalloc_node+0x13f/0x180 [ 578.653871][T16233] ? translate_table+0x194/0x1f60 [ 578.660009][T16233] translate_table+0x194/0x1f60 [ 578.666292][T16233] ? ipt_register_table+0x7b0/0x7b0 [ 578.671776][T16233] ? __might_fault+0xaa/0x120 [ 578.677250][T16233] ? __lock_acquire+0x7eb0/0x7eb0 [ 578.683187][T16233] ? __virt_addr_valid+0x10c/0x380 [ 578.690746][T16233] ? __virt_addr_valid+0x10c/0x380 [ 578.697218][T16233] ? __might_fault+0xaa/0x120 [ 578.702284][T16233] ? __might_fault+0xc6/0x120 [ 578.706992][T16233] ? __might_fault+0xaa/0x120 [ 578.712835][T16233] do_ipt_set_ctl+0x9f5/0xe00 [ 578.718072][T16233] ? ipt_unregister_table_exit+0x230/0x230 [ 578.723946][T16233] ? __lock_acquire+0x7eb0/0x7eb0 [ 578.729719][T16233] ? rcu_is_watching+0x15/0xb0 [ 578.734794][T16233] ? trace_contention_end+0x39/0xe0 [ 578.741875][T16233] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 578.749590][T16233] ? mutex_unlock+0x10/0x10 [ 578.754584][T16233] ? aa_af_perm+0x330/0x330 [ 578.760930][T16233] nf_setsockopt+0x263/0x280 [ 578.765737][T16233] ? sock_common_recvmsg+0x190/0x190 [ 578.771956][T16233] do_sock_setsockopt+0x175/0x1a0 [ 578.777717][T16233] ? __fdget+0x180/0x210 [ 578.782841][T16233] __x64_sys_setsockopt+0x182/0x200 [ 578.789405][T16233] do_syscall_64+0x55/0xb0 [ 578.794559][T16233] ? clear_bhb_loop+0x40/0x90 [ 578.799548][T16233] ? clear_bhb_loop+0x40/0x90 [ 578.808993][T16233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.816276][T16233] RIP: 0033:0x7f451699e159 [ 578.820782][T16233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.845564][T16233] RSP: 002b:00007f45177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 578.854391][T16233] RAX: ffffffffffffffda RBX: 00007f4516c25fa0 RCX: 00007f451699e159 [ 578.873283][T16233] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 578.884078][T16233] RBP: 00007f4516a3506b R08: 00000000000002a8 R09: 0000000000000000 [ 578.894001][T16233] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 578.906924][T16233] R13: 00007f4516c26038 R14: 00007f4516c25fa0 R15: 00007fff28e0b4f8 [ 578.916022][T16233] [ 579.604168][T16233] Mem-Info: [ 579.625284][T16233] active_anon:23013 inactive_anon:0 isolated_anon:0 [ 579.625284][T16233] active_file:16776 inactive_file:40412 isolated_file:0 [ 579.625284][T16233] unevictable:768 dirty:181 writeback:0 [ 579.625284][T16233] slab_reclaimable:11523 slab_unreclaimable:92533 [ 579.625284][T16233] mapped:24493 shmem:17811 pagetables:686 [ 579.625284][T16233] sec_pagetables:0 bounce:0 [ 579.625284][T16233] kernel_misc_reclaimable:0 [ 579.625284][T16233] free:1325166 free_pcp:10952 free_cma:0 [ 579.780634][T16260] FAULT_INJECTION: forcing a failure. [ 579.780634][T16260] name failslab, interval 1, probability 0, space 0, times 0 [ 579.800126][T16260] CPU: 0 PID: 16260 Comm: syz.3.3554 Not tainted syzkaller #0 [ 579.809335][T16260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 579.822859][T16260] Call Trace: [ 579.826467][T16260] [ 579.831282][T16260] dump_stack_lvl+0x18c/0x250 [ 579.836878][T16260] ? show_regs_print_info+0x20/0x20 [ 579.846549][T16260] ? load_image+0x420/0x420 [ 579.852707][T16260] should_fail_ex+0x394/0x4c0 [ 579.858575][T16260] ? __sigqueue_alloc+0x32/0x520 [ 579.864798][T16260] should_failslab+0x9/0x20 [ 579.870386][T16260] slab_pre_alloc_hook+0x59/0x300 [ 579.877194][T16260] ? __lock_acquire+0x7eb0/0x7eb0 [ 579.882949][T16260] ? __sigqueue_alloc+0x32/0x520 [ 579.890985][T16260] kmem_cache_alloc+0x5a/0x2c0 [ 579.896179][T16260] ? __sigqueue_alloc+0x40c/0x520 [ 579.901860][T16260] ? __sigqueue_alloc+0x32/0x520 [ 579.909050][T16260] __sigqueue_alloc+0x40c/0x520 [ 579.914061][T16260] __send_signal_locked+0x22f/0xe00 [ 579.920306][T16260] do_notify_parent+0xb26/0xd10 [ 579.927581][T16260] ? trace_signal_generate+0x1c0/0x1c0 [ 579.938107][T16260] ? __lock_acquire+0x7eb0/0x7eb0 [ 579.943729][T16260] release_task+0x1227/0x1690 [ 579.948663][T16260] ? do_exit+0x1888/0x2530 [ 579.953911][T16260] ? delayed_put_task_struct+0x2a0/0x2a0 [ 579.964118][T16260] ? _raw_write_lock_irq+0xbb/0xf0 [ 579.972013][T16260] ? _raw_write_lock_irqsave+0x100/0x100 [ 579.980798][T16260] ? _raw_write_unlock_irq+0x23/0x50 [ 579.989717][T16260] ? lockdep_hardirqs_on+0x98/0x150 [ 579.995592][T16260] do_exit+0x1888/0x2530 [ 580.000763][T16260] ? put_task_struct+0xc0/0xc0 [ 580.005729][T16260] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 580.013082][T16260] ? get_signal+0x100e/0x1390 [ 580.018023][T16260] ? lock_chain_count+0x20/0x20 [ 580.023163][T16260] ? _raw_spin_lock_irq+0xbb/0xf0 [ 580.030644][T16260] do_group_exit+0x22d/0x2f0 [ 580.036590][T16260] ? lockdep_hardirqs_on+0x98/0x150 [ 580.042013][T16260] get_signal+0x12a6/0x1390 [ 580.048130][T16260] arch_do_signal_or_restart+0xc2/0x7b0 [ 580.056630][T16260] ? __ia32_sys_get_robust_list+0x110/0x110 [ 580.062823][T16260] ? get_sigframe_size+0x20/0x20 [ 580.068532][T16260] ? exit_to_user_mode_loop+0x3b/0x110 [ 580.075921][T16260] exit_to_user_mode_loop+0x70/0x110 [ 580.083010][T16260] exit_to_user_mode_prepare+0xee/0x180 [ 580.091856][T16260] syscall_exit_to_user_mode+0x1a/0x50 [ 580.098772][T16260] do_syscall_64+0x61/0xb0 [ 580.106010][T16260] ? clear_bhb_loop+0x40/0x90 [ 580.113246][T16260] ? clear_bhb_loop+0x40/0x90 [ 580.121122][T16260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.130658][T16260] RIP: 0033:0x7f4b20f9e159 [ 580.135572][T16260] Code: Unable to access opcode bytes at 0x7f4b20f9e12f. [ 580.143048][T16260] RSP: 002b:00007f4b21f2a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 580.151906][T16260] RAX: fffffffffffffe00 RBX: 00007f4b21225fa8 RCX: 00007f4b20f9e159 [ 580.161125][T16260] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b21225fa8 [ 580.169620][T16260] RBP: 00007f4b21225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 580.179502][T16260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.188882][T16260] R13: 00007f4b21226038 R14: 00007ffef9eb3650 R15: 00007ffef9eb3738 [ 580.197440][T16260] [ 580.229497][T16233] Node 0 active_anon:92028kB inactive_anon:0kB active_file:67076kB inactive_file:161448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97944kB dirty:724kB writeback:0kB shmem:69708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11472kB pagetables:2740kB sec_pagetables:0kB all_unreclaimable? no [ 580.278093][T16233] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 580.314521][T16233] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.393191][T16233] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 580.399978][T16233] Node 0 DMA32 free:1384152kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:91832kB inactive_anon:0kB active_file:67076kB inactive_file:160624kB unevictable:1536kB writepending:724kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:34780kB local_pcp:34780kB free_cma:0kB [ 580.445097][T16233] lowmem_reserve[]: 0 0 0 0 0 [ 580.462828][T16233] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.506078][T16233] lowmem_reserve[]: 0 0 0 0 0 [ 580.515133][T16233] Node 1 Normal free:3901144kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8992kB local_pcp:8992kB free_cma:0kB [ 580.555125][T16233] lowmem_reserve[]: 0 0 0 0 0 [ 580.561576][T16233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 580.612723][T16233] Node 0 DMA32: 496*4kB (UME) 155*8kB (UM) 2*16kB (UE) 463*32kB (UE) 47*64kB (UME) 223*128kB (UE) 39*256kB (UME) 7*512kB (ME) 16*1024kB (UME) 9*2048kB (ME) 314*4096kB (UM) = 1384152kB [ 580.662700][T16233] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 580.706094][T16233] Node 1 Normal: 228*4kB (UE) 37*8kB (UE) 32*16kB (UME) 223*32kB (UME) 61*64kB (UME) 12*128kB (UE) 3*256kB (UE) 2*512kB (ME) 0*1024kB 3*2048kB (UE) 947*4096kB (M) = 3901144kB [ 580.769046][T16233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.827836][T16233] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 580.863938][T16233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.908038][T16233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 580.946816][T16233] 74999 total pagecache pages [ 580.970491][T16233] 0 pages in swap cache [ 580.990221][T16233] Free swap = 124748kB [ 581.028685][T16233] Total swap = 124996kB [ 581.074269][T16233] 2097051 pages RAM [ 581.106965][T16233] 0 pages HighMem/MovableOnly [ 581.130153][T16233] 416970 pages reserved [ 581.168448][T16233] 0 pages cma reserved [ 581.930813][T16281] loop3: detected capacity change from 0 to 164 [ 582.999989][T16298] FAULT_INJECTION: forcing a failure. [ 582.999989][T16298] name failslab, interval 1, probability 0, space 0, times 0 [ 583.102370][T16298] CPU: 0 PID: 16298 Comm: syz.4.3571 Not tainted syzkaller #0 [ 583.111044][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.127120][T16298] Call Trace: [ 583.132042][T16298] [ 583.135157][T16298] dump_stack_lvl+0x18c/0x250 [ 583.142092][T16298] ? show_regs_print_info+0x20/0x20 [ 583.149511][T16298] ? load_image+0x420/0x420 [ 583.154832][T16298] ? __might_sleep+0xe0/0xe0 [ 583.159555][T16298] ? __lock_acquire+0x7eb0/0x7eb0 [ 583.166711][T16298] should_fail_ex+0x394/0x4c0 [ 583.173365][T16298] should_failslab+0x9/0x20 [ 583.180041][T16298] slab_pre_alloc_hook+0x59/0x300 [ 583.185757][T16298] ? alloc_fs_context+0x63/0x7a0 [ 583.192015][T16298] __kmem_cache_alloc_node+0x53/0x250 [ 583.198588][T16298] ? alloc_fs_context+0x63/0x7a0 [ 583.205874][T16298] kmalloc_trace+0x2a/0xe0 [ 583.210986][T16298] alloc_fs_context+0x63/0x7a0 [ 583.217379][T16298] do_new_mount+0x10e/0xa40 [ 583.228674][T16298] __se_sys_mount+0x2e7/0x3d0 [ 583.238438][T16298] ? __x64_sys_mount+0xc0/0xc0 [ 583.243632][T16298] ? lockdep_hardirqs_on+0x98/0x150 [ 583.249475][T16298] ? __x64_sys_mount+0x20/0xc0 [ 583.255044][T16298] do_syscall_64+0x55/0xb0 [ 583.261496][T16298] ? clear_bhb_loop+0x40/0x90 [ 583.268441][T16298] ? clear_bhb_loop+0x40/0x90 [ 583.274716][T16298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.281203][T16298] RIP: 0033:0x7f470919e159 [ 583.287735][T16298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.313966][T16298] RSP: 002b:00007f470a0d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 583.323637][T16298] RAX: ffffffffffffffda RBX: 00007f4709425fa0 RCX: 00007f470919e159 [ 583.335786][T16298] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 583.348977][T16298] RBP: 00007f470923506b R08: 0000000000000000 R09: 0000000000000000 [ 583.360160][T16298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.371136][T16298] R13: 00007f4709426038 R14: 00007f4709425fa0 R15: 00007ffcfedba558 [ 583.389333][T16298] [ 584.131909][T16308] loop3: detected capacity change from 0 to 164 [ 584.160576][T16310] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 585.190070][T16332] overlayfs: statfs failed on './file0' [ 585.310945][T16335] FAULT_INJECTION: forcing a failure. [ 585.310945][T16335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 585.378409][T16337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 585.402959][T16335] CPU: 0 PID: 16335 Comm: syz.5.3585 Not tainted syzkaller #0 [ 585.412515][T16335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.426160][T16335] Call Trace: [ 585.429822][T16335] [ 585.433764][T16335] dump_stack_lvl+0x18c/0x250 [ 585.439458][T16335] ? show_regs_print_info+0x20/0x20 [ 585.445671][T16335] ? load_image+0x420/0x420 [ 585.451198][T16335] ? __lock_acquire+0x7eb0/0x7eb0 [ 585.458073][T16335] should_fail_ex+0x394/0x4c0 [ 585.463500][T16335] prepare_alloc_pages+0x1e1/0x5b0 [ 585.469532][T16335] __alloc_pages+0x134/0x460 [ 585.474872][T16335] ? zone_statistics+0x170/0x170 [ 585.482442][T16335] ? alloc_pages+0x4e1/0x740 [ 585.489250][T16335] ? do_raw_spin_unlock+0x121/0x230 [ 585.495645][T16335] __get_free_pages+0xc/0x30 [ 585.501525][T16335] kasan_populate_vmalloc_pte+0x35/0x100 [ 585.507296][T16335] __apply_to_page_range+0x860/0xdd0 [ 585.513622][T16335] ? kasan_populate_vmalloc+0x70/0x70 [ 585.519317][T16335] ? apply_to_page_range+0x50/0x50 [ 585.525192][T16335] ? do_raw_spin_unlock+0x121/0x230 [ 585.530953][T16335] alloc_vmap_area+0x1d26/0x1e50 [ 585.535958][T16335] ? vm_map_ram+0xcf0/0xcf0 [ 585.541167][T16335] ? rcu_is_watching+0x15/0xb0 [ 585.546519][T16335] __get_vm_area_node+0x162/0x370 [ 585.553427][T16335] __vmalloc_node_range+0x36f/0x1320 [ 585.560058][T16335] ? translate_table+0x194/0x1f60 [ 585.565659][T16335] ? __asan_memset+0x22/0x40 [ 585.570451][T16335] ? free_vm_area+0x50/0x50 [ 585.576661][T16335] ? kvmalloc_node+0x70/0x180 [ 585.583248][T16335] ? rcu_is_watching+0x15/0xb0 [ 585.588928][T16335] ? kvmalloc_node+0x70/0x180 [ 585.594957][T16335] ? trace_kmalloc+0x1f/0xa0 [ 585.600472][T16335] kvmalloc_node+0x13f/0x180 [ 585.607625][T16335] ? translate_table+0x194/0x1f60 [ 585.612823][T16335] translate_table+0x194/0x1f60 [ 585.618582][T16335] ? ipt_register_table+0x7b0/0x7b0 [ 585.625084][T16335] ? __might_fault+0xaa/0x120 [ 585.631364][T16335] ? __lock_acquire+0x7eb0/0x7eb0 [ 585.637246][T16335] ? __virt_addr_valid+0x10c/0x380 [ 585.643531][T16335] ? __virt_addr_valid+0x10c/0x380 [ 585.648959][T16335] ? __might_fault+0xaa/0x120 [ 585.654833][T16335] ? __might_fault+0xc6/0x120 [ 585.660511][T16335] ? __might_fault+0xaa/0x120 [ 585.667017][T16335] do_ipt_set_ctl+0x9f5/0xe00 [ 585.671908][T16335] ? ipt_unregister_table_exit+0x230/0x230 [ 585.678473][T16335] ? __lock_acquire+0x7eb0/0x7eb0 [ 585.685421][T16335] ? rcu_is_watching+0x15/0xb0 [ 585.692070][T16335] ? trace_contention_end+0x39/0xe0 [ 585.698635][T16335] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 585.707616][T16335] ? mutex_unlock+0x10/0x10 [ 585.715972][T16335] ? aa_af_perm+0x330/0x330 [ 585.723964][T16335] nf_setsockopt+0x263/0x280 [ 585.729587][T16335] ? sock_common_recvmsg+0x190/0x190 [ 585.735188][T16335] do_sock_setsockopt+0x175/0x1a0 [ 585.741591][T16335] ? __fdget+0x180/0x210 [ 585.748769][T16335] __x64_sys_setsockopt+0x182/0x200 [ 585.754817][T16335] do_syscall_64+0x55/0xb0 [ 585.759807][T16335] ? clear_bhb_loop+0x40/0x90 [ 585.765179][T16335] ? clear_bhb_loop+0x40/0x90 [ 585.770084][T16335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.776029][T16335] RIP: 0033:0x7f111b99e159 [ 585.780586][T16335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.801152][T16335] RSP: 002b:00007f111c88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 585.810842][T16335] RAX: ffffffffffffffda RBX: 00007f111bc25fa0 RCX: 00007f111b99e159 [ 585.819753][T16335] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 585.827777][T16335] RBP: 00007f111ba3506b R08: 00000000000002a8 R09: 0000000000000000 [ 585.835988][T16335] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 585.846488][T16335] R13: 00007f111bc26038 R14: 00007f111bc25fa0 R15: 00007ffd4d6220f8 [ 585.855339][T16335] [ 585.876441][T16337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.188097][T16349] loop2: detected capacity change from 0 to 128 [ 586.429539][ T28] audit: type=1800 audit(1791062950.975:29): pid=16349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3591" name="file1" dev="loop2" ino=1048628 res=0 errno=0 [ 587.010979][T16361] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.134891][T16361] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.547538][T16335] warn_alloc: 2 callbacks suppressed [ 588.547554][T16335] syz.5.3585: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 588.635911][T16385] loop4: detected capacity change from 0 to 256 [ 588.704589][T16385] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.777896][T16335] CPU: 0 PID: 16335 Comm: syz.5.3585 Not tainted syzkaller #0 [ 588.795801][T16335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.814819][T16335] Call Trace: [ 588.818123][T16335] [ 588.822404][T16335] dump_stack_lvl+0x18c/0x250 [ 588.828764][T16335] ? show_regs_print_info+0x20/0x20 [ 588.835648][T16335] ? load_image+0x420/0x420 [ 588.841913][T16335] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 588.850632][T16335] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 588.862172][T16335] warn_alloc+0x246/0x340 [ 588.871609][T16335] ? zone_watermark_ok_safe+0x230/0x230 [ 588.885121][T16335] ? _raw_spin_unlock+0x28/0x40 [ 588.895718][T16335] __vmalloc_node_range+0x661/0x1320 [ 588.901488][T16335] ? __asan_memset+0x22/0x40 [ 588.908875][T16335] ? free_vm_area+0x50/0x50 [ 588.914152][T16335] ? kvmalloc_node+0x70/0x180 [ 588.921552][T16335] ? rcu_is_watching+0x15/0xb0 [ 588.931653][T16335] ? kvmalloc_node+0x70/0x180 [ 588.937689][T16335] ? trace_kmalloc+0x1f/0xa0 [ 588.942973][T16335] kvmalloc_node+0x13f/0x180 [ 588.950139][T16335] ? translate_table+0x194/0x1f60 [ 588.959445][T16335] translate_table+0x194/0x1f60 [ 588.966749][T16335] ? ipt_register_table+0x7b0/0x7b0 [ 588.973689][T16335] ? __might_fault+0xaa/0x120 [ 588.982632][T16335] ? __lock_acquire+0x7eb0/0x7eb0 [ 588.990254][T16335] ? __virt_addr_valid+0x10c/0x380 [ 588.997956][T16335] ? __virt_addr_valid+0x10c/0x380 [ 589.008502][T16335] ? __might_fault+0xaa/0x120 [ 589.015495][T16335] ? __might_fault+0xc6/0x120 [ 589.023934][T16335] ? __might_fault+0xaa/0x120 [ 589.034835][T16335] do_ipt_set_ctl+0x9f5/0xe00 [ 589.040688][T16335] ? ipt_unregister_table_exit+0x230/0x230 [ 589.051709][T16335] ? __lock_acquire+0x7eb0/0x7eb0 [ 589.060108][T16335] ? rcu_is_watching+0x15/0xb0 [ 589.067805][T16335] ? trace_contention_end+0x39/0xe0 [ 589.075932][T16335] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 589.082275][T16335] ? mutex_unlock+0x10/0x10 [ 589.092958][T16335] ? aa_af_perm+0x330/0x330 [ 589.099259][T16335] nf_setsockopt+0x263/0x280 [ 589.104395][T16335] ? sock_common_recvmsg+0x190/0x190 [ 589.112162][T16335] do_sock_setsockopt+0x175/0x1a0 [ 589.119776][T16335] ? __fdget+0x180/0x210 [ 589.124463][T16335] __x64_sys_setsockopt+0x182/0x200 [ 589.131872][T16335] do_syscall_64+0x55/0xb0 [ 589.137360][T16335] ? clear_bhb_loop+0x40/0x90 [ 589.142507][T16335] ? clear_bhb_loop+0x40/0x90 [ 589.147757][T16335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.156142][T16335] RIP: 0033:0x7f111b99e159 [ 589.160930][T16335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.189180][T16335] RSP: 002b:00007f111c88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 589.210179][T16335] RAX: ffffffffffffffda RBX: 00007f111bc25fa0 RCX: 00007f111b99e159 [ 589.228213][T16335] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 589.247808][T16335] RBP: 00007f111ba3506b R08: 00000000000002a8 R09: 0000000000000000 [ 589.257829][T16335] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 589.271138][T16335] R13: 00007f111bc26038 R14: 00007f111bc25fa0 R15: 00007ffd4d6220f8 [ 589.282403][T16335] [ 589.333756][T16388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.366733][T16388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.964065][T16335] Mem-Info: [ 590.011257][T16335] active_anon:22936 inactive_anon:0 isolated_anon:0 [ 590.011257][T16335] active_file:16776 inactive_file:40429 isolated_file:0 [ 590.011257][T16335] unevictable:768 dirty:44 writeback:0 [ 590.011257][T16335] slab_reclaimable:11239 slab_unreclaimable:92856 [ 590.011257][T16335] mapped:24475 shmem:17817 pagetables:646 [ 590.011257][T16335] sec_pagetables:0 bounce:0 [ 590.011257][T16335] kernel_misc_reclaimable:0 [ 590.011257][T16335] free:1316416 free_pcp:3391 free_cma:0 [ 590.286783][T16335] Node 0 active_anon:92004kB inactive_anon:0kB active_file:67076kB inactive_file:161516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97900kB dirty:176kB writeback:0kB shmem:69732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11504kB pagetables:2792kB sec_pagetables:0kB all_unreclaimable? no [ 590.496863][T16335] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 590.584820][T16417] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.629107][T16417] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.662446][T16335] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.828265][T16419] FAULT_INJECTION: forcing a failure. [ 590.828265][T16419] name failslab, interval 1, probability 0, space 0, times 0 [ 590.848214][T16335] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 590.875035][T16335] Node 0 DMA32 free:1348648kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:91964kB inactive_anon:0kB active_file:67076kB inactive_file:160692kB unevictable:1536kB writepending:228kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:3344kB local_pcp:3344kB free_cma:0kB [ 590.937577][T16419] CPU: 0 PID: 16419 Comm: syz.4.3616 Not tainted syzkaller #0 [ 590.947848][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 590.959583][T16419] Call Trace: [ 590.964799][T16419] [ 590.968290][T16419] dump_stack_lvl+0x18c/0x250 [ 590.974381][T16419] ? show_regs_print_info+0x20/0x20 [ 590.980997][T16419] ? load_image+0x420/0x420 [ 590.986438][T16419] ? __might_sleep+0xe0/0xe0 [ 590.992122][T16419] ? __lock_acquire+0x7eb0/0x7eb0 [ 591.000447][T16419] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 591.006950][T16419] should_fail_ex+0x394/0x4c0 [ 591.011872][T16419] should_failslab+0x9/0x20 [ 591.018937][T16419] slab_pre_alloc_hook+0x59/0x300 [ 591.025522][T16419] kmem_cache_alloc+0x5a/0x2c0 [ 591.032309][T16419] ? ep_insert+0x250/0x1990 [ 591.037395][T16419] ep_insert+0x250/0x1990 [ 591.045165][T16419] ? rcu_is_watching+0x15/0xb0 [ 591.052475][T16419] ? trace_contention_end+0x39/0xe0 [ 591.058698][T16419] ? __mutex_lock+0x30d/0xc80 [ 591.063889][T16419] ? end_current_label_crit_section+0x170/0x170 [ 591.072915][T16419] ? ep_loop_check+0x1b0/0x1b0 [ 591.078539][T16419] ? do_epoll_ctl+0x405/0xf40 [ 591.086858][T16419] ? mutex_lock_nested+0x20/0x20 [ 591.092628][T16419] ? apparmor_capable+0x137/0x1a0 [ 591.098660][T16419] ? bpf_lsm_capable+0x9/0x10 [ 591.104365][T16419] ? security_capable+0x89/0xb0 [ 591.110952][T16419] do_epoll_ctl+0x8bc/0xf40 [ 591.116369][T16419] __x64_sys_epoll_ctl+0x166/0x1b0 [ 591.123503][T16419] ? ep_modify+0xa80/0xa80 [ 591.128671][T16419] ? syscall_enter_from_user_mode+0x2e/0x80 [ 591.137764][T16419] do_syscall_64+0x55/0xb0 [ 591.147060][T16419] ? clear_bhb_loop+0x40/0x90 [ 591.153922][T16419] ? clear_bhb_loop+0x40/0x90 [ 591.160091][T16419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.170779][T16419] RIP: 0033:0x7f470919e159 [ 591.176935][T16419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.201444][T16419] RSP: 002b:00007f470a0d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 591.213499][T16419] RAX: ffffffffffffffda RBX: 00007f4709425fa0 RCX: 00007f470919e159 [ 591.223896][T16419] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 591.235659][T16419] RBP: 00007f470923506b R08: 0000000000000000 R09: 0000000000000000 [ 591.244677][T16419] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 591.253900][T16419] R13: 00007f4709426038 R14: 00007f4709425fa0 R15: 00007ffcfedba558 [ 591.267006][T16419] [ 591.277734][T16335] lowmem_reserve[]: 0 0 0 0 0 [ 591.286345][T16335] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.365856][T16335] lowmem_reserve[]: 0 0 0 0 0 [ 591.376267][T16335] Node 1 Normal free:3901144kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8992kB local_pcp:8992kB free_cma:0kB [ 591.534618][T16335] lowmem_reserve[]: 0 0 0 0 0 [ 591.572658][T16335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 591.658301][T16335] Node 0 DMA32: 150*4kB (UME) 254*8kB (UME) 186*16kB (UME) 130*32kB (UME) 70*64kB (ME) 45*128kB (ME) 30*256kB (UME) 8*512kB (UME) 18*1024kB (UME) 10*2048kB (UME) 312*4096kB (UM) = 1348648kB [ 591.831583][T16335] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 591.903801][T16335] Node 1 Normal: 228*4kB (UE) 37*8kB (UE) 32*16kB (UME) 223*32kB (UME) 61*64kB (UME) 12*128kB (UE) 3*256kB (UE) 2*512kB (ME) 0*1024kB 3*2048kB (UE) 947*4096kB (M) = 3901144kB [ 592.049275][T16335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.103684][T16335] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 592.166658][T16335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.214286][T16335] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 592.291989][T16335] 76746 total pagecache pages [ 592.322612][T16335] 0 pages in swap cache [ 592.375397][T16335] Free swap = 124748kB [ 592.407103][T16335] Total swap = 124996kB [ 592.449063][T16335] 2097051 pages RAM [ 592.479883][T16335] 0 pages HighMem/MovableOnly [ 592.507663][T16335] 416970 pages reserved [ 592.539608][T16335] 0 pages cma reserved [ 592.812374][T16446] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 593.862846][ T28] audit: type=1326 audit(1791062958.475:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16462 comm="syz.4.3633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f470919e159 code=0x0 [ 595.051928][T16494] loop2: detected capacity change from 0 to 128 [ 595.148777][ T28] audit: type=1800 audit(1791062959.775:31): pid=16494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3645" name="file1" dev="loop2" ino=1048631 res=0 errno=0 [ 596.041097][T16517] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.173025][T16520] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.441507][T16527] overlayfs: missing 'lowerdir' [ 597.740574][T16553] overlayfs: missing 'workdir' [ 598.389585][T16571] syzkaller0: entered promiscuous mode [ 598.396070][T16571] syzkaller0: entered allmulticast mode [ 599.573626][T16590] loop3: detected capacity change from 0 to 128 [ 599.637744][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 599.802694][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 600.012219][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 600.107034][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 600.346405][T16604] loop5: detected capacity change from 0 to 128 [ 600.413902][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 600.474341][T16604] FAT-fs (loop5): bogus number of reserved sectors [ 600.484137][T16604] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 600.551641][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 600.577375][T16604] FAT-fs (loop5): Can't find a valid FAT filesystem [ 600.654212][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 600.754594][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 600.923993][T16613] overlayfs: failed to clone upperpath [ 600.997158][T16615] overlayfs: failed to resolve './bus': -2 [ 602.030066][T16634] fuse: Bad value for 'fd' [ 603.161594][T16651] overlayfs: failed to resolve './bus': -2 [ 603.175941][T16652] loop3: detected capacity change from 0 to 512 [ 603.296734][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 603.800794][T16664] fuse: Bad value for 'fd' [ 603.843740][T16626] FAT-fs (loop3): FAT read failed (blocknr 128) [ 604.882566][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 604.995160][T15336] udevd[15336]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 605.443434][T16691] kvm: Disabled LAPIC found during irq injection [ 605.453493][T16691] kvm: apic: phys broadcast and lowest prio [ 605.473953][T16692] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 605.544899][T16693] fuse: Bad value for 'fd' [ 606.023212][T16701] fuse: Bad value for 'fd' [ 606.695292][T16713] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 606.937960][T16718] fuse: Bad value for 'fd' [ 607.728930][T16731] fuse: Bad value for 'fd' [ 608.450990][T16747] udevd[16747]: open /dev/null failed: No such file or directory [ 608.735838][T16751] FAULT_INJECTION: forcing a failure. [ 608.735838][T16751] name fail_futex, interval 1, probability 0, space 0, times 0 [ 608.854657][T16755] overlayfs: failed to clone upperpath [ 608.878370][T15336] udevd[15336]: inotify_add_watch(7, /dev/sda, 10) failed: No such file or directory [ 608.897120][T16751] CPU: 0 PID: 16751 Comm: syz.5.3740 Not tainted syzkaller #0 [ 608.908080][T16751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.920150][T16751] Call Trace: [ 608.925055][T16751] [ 608.929647][T16751] dump_stack_lvl+0x18c/0x250 [ 608.934701][T16751] ? show_regs_print_info+0x20/0x20 [ 608.944248][T16751] ? load_image+0x420/0x420 [ 608.953461][T16751] should_fail_ex+0x394/0x4c0 [ 608.958489][T16751] get_futex_key+0x136/0x1030 [ 608.965156][T16751] ? verify_lock_unused+0x140/0x140 [ 608.973038][T16751] ? futex_setup_timer+0xc0/0xc0 [ 608.980181][T16751] futex_wait_setup+0xbc/0x270 [ 608.986386][T16751] ? futex_wait_multiple+0x920/0x920 [ 608.995024][T16751] futex_wait+0x1bc/0x5c0 [ 609.001297][T16751] ? futex_setup_timer+0xc0/0xc0 [ 609.007712][T16751] ? futex_wait_setup+0x270/0x270 [ 609.014205][T16751] ? file_end_write+0x159/0x250 [ 609.023579][T16751] ? vfs_write+0x5de/0x9a0 [ 609.029808][T16751] do_futex+0x2ff/0x3e0 [ 609.035309][T16751] ? __ia32_sys_get_robust_list+0x110/0x110 [ 609.042495][T16751] __se_sys_futex+0x3a9/0x440 [ 609.052022][T16751] ? __x64_sys_futex+0xf0/0xf0 [ 609.058587][T16751] ? __x64_sys_futex+0x21/0xf0 [ 609.066096][T16751] do_syscall_64+0x55/0xb0 [ 609.072980][T16751] ? clear_bhb_loop+0x40/0x90 [ 609.079099][T16751] ? clear_bhb_loop+0x40/0x90 [ 609.089071][T16751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.097569][T16751] RIP: 0033:0x7f111b99e159 [ 609.102724][T16751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.136882][T16751] RSP: 002b:00007f111c88d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 609.151379][T16751] RAX: ffffffffffffffda RBX: 00007f111bc25fa8 RCX: 00007f111b99e159 [ 609.165044][T16751] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f111bc25fa8 [ 609.176491][T16751] RBP: 00007f111bc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 609.185544][T16751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.195300][T16751] R13: 00007f111bc26038 R14: 00007ffd4d622010 R15: 00007ffd4d6220f8 [ 609.204634][T16751] [ 609.388266][T15336] udevd[15336]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 609.974350][T16774] fuse: Bad value for 'fd' [ 610.994984][T16799] fuse: Bad value for 'fd' [ 611.495995][T16812] overlayfs: failed to clone upperpath [ 612.343754][T16834] overlayfs: failed to clone upperpath [ 613.193902][T16857] fuse: Bad value for 'fd' [ 613.857273][T16877] overlayfs: failed to clone upperpath [ 613.980729][T16880] fuse: Bad value for 'fd' [ 614.684512][T16898] netlink: 'syz.2.3806': attribute type 12 has an invalid length. [ 614.737529][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3806'. [ 615.426758][T16920] ip_tables: iptables: counters copy to user failed while replacing table [ 621.200065][T17037] sctp: [Deprecated]: syz.3.3864 (pid 17037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 621.200065][T17037] Use struct sctp_sack_info instead [ 623.673358][T11825] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.700237][T17075] FAULT_INJECTION: forcing a failure. [ 623.700237][T17075] name failslab, interval 1, probability 0, space 0, times 0 [ 623.785228][T17075] CPU: 0 PID: 17075 Comm: syz.4.3880 Not tainted syzkaller #0 [ 623.794617][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.808147][T17075] Call Trace: [ 623.815200][T17075] [ 623.818351][T17075] dump_stack_lvl+0x18c/0x250 [ 623.823968][T17075] ? show_regs_print_info+0x20/0x20 [ 623.831323][T17075] ? load_image+0x420/0x420 [ 623.836437][T17075] ? __lock_acquire+0x7eb0/0x7eb0 [ 623.841787][T17075] should_fail_ex+0x394/0x4c0 [ 623.849201][T17075] should_failslab+0x9/0x20 [ 623.859227][T17075] slab_pre_alloc_hook+0x59/0x300 [ 623.868101][T17075] ? end_current_label_crit_section+0x170/0x170 [ 623.875831][T17075] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 623.881571][T17075] kmem_cache_alloc+0x5a/0x2c0 [ 623.889505][T17075] ? alloc_vfsmnt+0x24/0x450 [ 623.894692][T17075] alloc_vfsmnt+0x24/0x450 [ 623.901622][T17075] vfs_create_mount+0x7e/0x3d0 [ 623.907697][T17075] ? __fdget+0x180/0x210 [ 623.913501][T17075] __se_sys_fsmount+0x3ea/0x9b0 [ 623.920201][T17075] ? __x64_sys_fsmount+0x80/0x80 [ 623.926326][T17075] ? lockdep_hardirqs_on+0x98/0x150 [ 623.932365][T17075] do_syscall_64+0x55/0xb0 [ 623.939530][T17075] ? clear_bhb_loop+0x40/0x90 [ 623.944977][T17075] ? clear_bhb_loop+0x40/0x90 [ 623.950871][T17075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.960393][T17075] RIP: 0033:0x7f470919e159 [ 623.965555][T17075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.996227][T17075] RSP: 002b:00007f470a0d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 624.006772][T17075] RAX: ffffffffffffffda RBX: 00007f4709425fa0 RCX: 00007f470919e159 [ 624.019973][T17075] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 624.031639][T17075] RBP: 00007f470923506b R08: 0000000000000000 R09: 0000000000000000 [ 624.044356][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.054574][T17075] R13: 00007f4709426038 R14: 00007f4709425fa0 R15: 00007ffcfedba558 [ 624.063382][T17075] [ 624.271580][T11825] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.555610][T17080] overlayfs: failed to clone upperpath [ 624.578866][T11825] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.689929][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.699044][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.908063][T11825] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.873698][T17112] loop4: detected capacity change from 0 to 256 [ 627.053848][T17063] udevd[17063]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 627.178308][T17063] udevd[17063]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 627.531928][T17126] overlayfs: failed to clone upperpath [ 627.595476][T17063] udevd[17063]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 627.711835][T17063] udevd[17063]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 628.983078][T11825] hsr_slave_0: left promiscuous mode [ 629.055143][T11825] hsr_slave_1: left promiscuous mode [ 629.122603][T11825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.170896][T11825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.217869][T17158] overlayfs: failed to clone upperpath [ 629.234265][T11825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.290295][T11825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.360995][T11825] bridge_slave_1: left allmulticast mode [ 629.450386][T11825] bridge_slave_1: left promiscuous mode [ 629.499626][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.583660][T11825] bridge_slave_0: left allmulticast mode [ 629.609938][T11825] bridge_slave_0: left promiscuous mode [ 629.616937][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.773432][T11825] veth1_macvtap: left promiscuous mode [ 629.796417][T11825] veth0_macvtap: left promiscuous mode [ 629.883075][T11825] veth1_vlan: left promiscuous mode [ 629.909580][T11825] veth0_vlan: left promiscuous mode [ 632.424295][T11825] team0 (unregistering): Port device team_slave_1 removed [ 633.826402][T11825] team0 (unregistering): Port device team_slave_0 removed [ 633.853761][T17204] overlayfs: failed to clone upperpath [ 634.066141][T11825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.354549][T11825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.247722][T11825] bond0 (unregistering): Released all slaves [ 638.938167][T17290] overlayfs: failed to clone upperpath [ 639.005853][T17293] overlayfs: failed to clone upperpath [ 639.213496][T17298] overlayfs: failed to clone upperpath [ 640.631519][ T28] audit: type=1326 audit(1791063005.265:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17331 comm="syz.2.3940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f451699e159 code=0x0 [ 642.298113][T17357] netlink: 'syz.3.3943': attribute type 2 has an invalid length. [ 642.327696][T17361] loop4: detected capacity change from 0 to 512 [ 642.393914][T17217] udevd[17217]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 642.409249][T17361] FAT-fs (loop4): Unrecognized mount option "Xos1xfloppy" or missing value [ 642.523965][T17217] udevd[17217]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 642.639101][T17217] udevd[17217]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 642.795608][T17369] overlayfs: failed to clone upperpath [ 648.352278][T17423] overlayfs: failed to clone upperpath [ 650.022832][T17441] ip_tables: iptables: counters copy to user failed while replacing table [ 650.367984][T17445] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 651.303972][T17459] overlayfs: failed to clone upperpath [ 653.598938][T17487] overlayfs: failed to resolve './file0': -2 [ 657.033053][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3986'. [ 657.190779][T17550] ip_tables: iptables: counters copy to user failed while replacing table [ 657.997807][T17544] hsr_slave_1 (unregistering): left promiscuous mode [ 660.043577][T17575] overlayfs: failed to clone upperpath [ 660.666552][ T28] audit: type=1326 audit(1791063025.295:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 660.876612][ T28] audit: type=1326 audit(1791063025.335:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 661.064997][ T28] audit: type=1326 audit(1791063025.335:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 661.288901][ T28] audit: type=1326 audit(1791063025.335:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 661.507314][ T28] audit: type=1326 audit(1791063025.365:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 661.684236][ T28] audit: type=1326 audit(1791063025.365:38): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 661.878215][ T28] audit: type=1326 audit(1791063025.365:39): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 662.062609][ T28] audit: type=1326 audit(1791063025.365:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 662.243852][ T28] audit: type=1326 audit(1791063025.375:41): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 662.379720][ T28] audit: type=1326 audit(1791063025.375:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.2.4000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451699e159 code=0x7ffc0000 [ 662.807904][ T6031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.044709][ T6031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.183734][ T6031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.483527][ T6031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.220860][ T6031] hsr_slave_0: left promiscuous mode [ 667.267084][ T6031] hsr_slave_1: left promiscuous mode [ 667.310465][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.354950][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.430293][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.437832][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 Stopping sshd: [ 667.510393][ T6031] bridge_slave_1: left allmulticast mode [ 667.516876][ T6031] bridge_slave_1: left promiscuous mode [ 667.582180][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.641272][ T6031] bridge_slave_0: left allmulticast mode [ 667.647601][ T6031] bridge_slave_0: left promiscuous mode stopped /usr/sbin/sshd (pid 5530) OK [ 667.710830][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.978713][ T6031] veth1_macvtap: left promiscuous mode [ 668.012095][ T6031] veth0_macvtap: left promiscuous mode [ 668.019200][ T6031] veth1_vlan: left promiscuous mode Stopping crond: [ 668.114117][ T6031] veth0_vlan: left promiscuous mode stopped /usr/sbin/crond (pid 5514) OK [ 668.771992][T17678] overlayfs: failed to clone upperpath Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5434) Stopping network: [ 671.113566][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 671.192857][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 671.264858][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.338947][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.986686][ T6031] bond0 (unregistering): Released all slaves OK Stopping iptables: OK Stopping system message bus: [ 674.682032][T17737] mmap: syz.2.4027 (17737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 675.961014][T17753] xt_connbytes: Forcing CT accounting to be enabled [ 676.253512][T17758] overlayfs: failed to clone upperpath done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5122) OK umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 686.135015][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.145601][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.72 closed by remote host. [ 688.087121][T14289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 688.231566][T14289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.346658][T14289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.490386][T14289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.426267][T14289] hsr_slave_0: left promiscuous mode [ 689.435406][T14289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.447738][T14289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.458287][T14289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.468020][T14289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.476880][T14289] bridge_slave_1: left allmulticast mode [ 689.488771][T14289] bridge_slave_1: left promiscuous mode [ 689.497820][T14289] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.509606][T14289] bridge_slave_0: left allmulticast mode [ 689.516875][T14289] bridge_slave_0: left promiscuous mode [ 689.526083][T14289] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.564912][T14289] veth1_macvtap: left promiscuous mode [ 689.572522][T14289] veth0_macvtap: left promiscuous mode [ 689.578516][T14289] veth1_vlan: left promiscuous mode [ 689.586039][T14289] veth0_vlan: left promiscuous mode [ 690.237168][T17875] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 690.266888][T17875] ACPI: PM: Preparing to enter system sleep state S5 [ 690.296760][T17875] kvm: exiting hardware virtualization [ 690.320062][T17875] reboot: Power down serialport: VM disconnected.